Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/tF8AZQpxFwQrAepGhnWtiQuVcV4.roa
File:                     tF8AZQpxFwQrAepGhnWtiQuVcV4.roa (raw, json)
Hash identifier:          ptS5QPhZxk23OrV9Mpm8O5WXcZF6jKyTK3hs//dlenQ=
Subject key identifier:   B4:5F:00:65:0A:71:17:04:2B:01:EA:46:86:75:AD:89:0B:95:71:5E
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       01FD
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/tF8AZQpxFwQrAepGhnWtiQuVcV4.roa
Signing time:             Sat 01 Mar 2025 01:31:01 +0000
ROA not before:           Sat 01 Mar 2025 01:31:01 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     4713
IP address blocks:        60.32.0.0/12 maxlen: 12
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 509 (0x1fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Mar  1 01:31:01 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=B45F00650A7117042B01EA468675AD890B95715E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:83:ed:82:c3:ea:e6:21:86:6b:c0:89:3c:fb:
                    81:c9:00:67:9b:0e:dc:ea:65:62:74:a0:56:53:d5:
                    27:79:ee:0a:c4:17:ad:a6:12:96:18:28:3c:6d:a9:
                    dd:24:f3:77:e1:6c:07:48:66:82:71:ba:5b:94:ee:
                    1b:68:2f:d0:7a:64:80:c5:0d:72:c8:60:c6:e7:62:
                    c2:c4:a9:01:b0:d9:7d:50:38:28:06:9a:54:91:00:
                    ae:5b:b1:95:c9:88:57:6c:66:dd:3e:08:c0:a8:56:
                    68:b6:00:a7:96:57:93:67:0f:85:b9:02:1d:0e:9b:
                    bd:b5:e6:03:0b:e6:74:13:96:bc:dd:db:35:8a:6e:
                    c5:f7:8b:7f:56:d8:04:f3:1f:a9:a3:37:a1:99:19:
                    28:f3:f6:58:e7:66:c6:14:08:0d:b8:e8:92:37:db:
                    fe:98:f1:0e:6c:ed:79:97:09:fd:47:b2:77:a0:3d:
                    e8:62:ea:c1:ba:35:3b:96:4e:3e:00:1a:a6:79:62:
                    1e:89:e9:18:69:7b:7e:83:29:1c:33:b8:b7:0a:6b:
                    0b:7c:21:c8:54:7d:4c:05:ab:ff:47:76:98:1d:38:
                    fa:86:7e:fd:b4:e8:16:e0:37:a4:c7:e4:47:53:76:
                    1f:01:20:0a:dd:e7:b8:fb:c5:f0:17:66:a2:49:a5:
                    e7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:5F:00:65:0A:71:17:04:2B:01:EA:46:86:75:AD:89:0B:95:71:5E
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/tF8AZQpxFwQrAepGhnWtiQuVcV4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.32.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         1d:18:e7:82:76:ff:6e:65:32:cd:4b:ad:c4:f9:73:93:85:2a:
         f4:f9:c4:3f:c1:9d:00:c2:18:1d:68:20:61:08:21:f4:67:35:
         93:54:78:1f:aa:a6:bd:9d:42:c2:9f:9f:f2:43:cc:6d:f0:77:
         53:eb:3a:71:e3:ba:6e:bc:bc:45:82:cf:2b:e5:95:7b:a9:f4:
         6b:27:46:85:cb:96:98:1b:16:32:68:f5:95:f0:2d:b5:9d:1d:
         b1:cb:c9:f3:fb:99:7c:7d:50:9e:28:cf:cf:b2:a6:8b:23:b6:
         18:5b:40:7d:2a:87:3e:d3:a4:7b:b4:d2:f6:b6:52:1c:61:a7:
         3f:54:29:1f:f6:07:66:4d:3d:9b:89:1f:c8:d7:0c:53:43:31:
         5a:e9:83:a1:93:d7:c4:88:28:8e:0f:4c:71:78:c4:dd:34:27:
         df:2a:b3:70:85:8e:74:9c:96:fc:06:ef:3b:eb:5a:00:77:99:
         27:e3:2b:60:c9:16:04:5d:6a:a1:4e:4e:a5:05:a6:85:36:0a:
         ef:69:4f:99:97:06:3d:bc:ad:ee:06:2d:41:4f:9c:e3:1d:43:
         3f:62:c9:85:bb:22:39:24:ce:72:8f:5b:a8:91:6b:c0:b0:0a:
         a5:d0:83:26:5d:1e:42:2b:03:df:7e:58:c4:c0:05:36:cf:0c:
         e8:7a:63:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:50 2025 by rpki-client