Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/utfDRHE2tsjjHt_Ow6hJY4QMuN4.roa
File:                     utfDRHE2tsjjHt_Ow6hJY4QMuN4.roa (raw, json)
Hash identifier:          wYsRasbM2sbGz9UbVX0vHHI+AYv4WktWOQUe3GMFzM4=
Subject key identifier:   BA:D7:C3:44:71:36:B6:C8:E3:1E:DF:CE:C3:A8:49:63:84:0C:B8:DE
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0206
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/utfDRHE2tsjjHt_Ow6hJY4QMuN4.roa
Signing time:             Sat 01 Mar 2025 01:31:05 +0000
ROA not before:           Sat 01 Mar 2025 01:31:05 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     4713
IP address blocks:        114.160.0.0/11 maxlen: 11
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 518 (0x206)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Mar  1 01:31:05 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=BAD7C3447136B6C8E31EDFCEC3A84963840CB8DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a3:5c:e5:05:39:a3:24:d0:f3:42:25:8a:49:
                    69:74:99:fa:d3:b6:79:2e:20:6e:05:91:48:2a:7f:
                    74:5c:b8:63:bf:77:fb:75:60:55:59:72:41:d8:d2:
                    cd:03:33:a2:ad:b4:8f:9e:18:a1:97:f5:48:90:8c:
                    73:a0:e8:1a:ad:70:55:ee:b7:1c:75:9c:f6:30:53:
                    2f:f6:b7:73:ea:75:08:2b:1e:44:43:ac:1d:03:67:
                    24:20:bc:b4:7b:e7:10:51:38:57:80:00:dd:41:a6:
                    58:f2:f9:93:ce:50:64:b3:6a:61:bd:ee:03:1d:85:
                    f1:fa:53:1b:bb:21:0d:28:f4:3c:2e:0b:b9:0d:67:
                    47:20:f4:be:a0:b5:0a:0b:4d:6e:5a:33:e4:08:c6:
                    0e:7c:1b:8e:9e:c2:36:91:31:12:18:80:8f:1e:01:
                    97:e4:3a:62:42:da:70:76:74:63:35:63:60:c0:c2:
                    56:38:f9:7f:8b:0f:c7:36:7c:18:e8:76:82:c4:b3:
                    64:a1:a0:90:3f:ac:55:f9:29:a9:e0:4c:9e:76:06:
                    d1:ba:c0:a6:f1:7d:88:7d:11:7e:28:12:65:3e:20:
                    34:1a:f6:b5:97:1a:5c:c6:9c:a5:89:75:63:12:34:
                    9b:ce:0b:7e:29:d7:8b:18:67:de:71:5e:f8:b7:aa:
                    91:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D7:C3:44:71:36:B6:C8:E3:1E:DF:CE:C3:A8:49:63:84:0C:B8:DE
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/utfDRHE2tsjjHt_Ow6hJY4QMuN4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.160.0.0/11

    Signature Algorithm: sha256WithRSAEncryption
         40:65:2d:2b:1c:08:a3:42:1f:96:99:27:78:b5:06:71:67:f7:
         fb:11:ba:40:fe:aa:25:ae:12:bb:f0:8c:25:87:ee:92:7c:14:
         8c:bc:e9:e7:f5:28:9c:82:99:28:dd:6c:d0:23:98:fb:e0:4f:
         a6:44:91:77:fb:4a:44:87:5e:56:46:e4:65:a2:6c:1d:0c:d9:
         06:21:95:95:e1:8e:11:91:fd:a3:a6:f7:1d:84:ba:6f:56:8b:
         08:8d:e6:1e:dd:c9:dd:bb:fc:7c:fe:5e:44:73:4b:82:2f:ee:
         8b:a4:0f:5e:c9:e6:b1:f9:b9:95:55:3a:c5:df:15:38:8e:d1:
         bc:e5:3b:19:7b:72:49:09:52:77:46:ea:98:cf:bf:80:a3:d4:
         4d:4e:b7:59:14:f5:e2:ac:b4:b0:89:fe:9e:38:5c:55:5a:2b:
         c8:00:2c:25:21:62:5c:99:65:58:2c:d6:1b:2b:b5:4f:60:e4:
         82:3b:90:f4:ff:94:17:6a:70:57:c6:25:30:ce:c1:5c:1f:2a:
         79:f1:30:6a:25:78:a1:13:40:d1:6d:c5:e5:5a:b0:8c:96:fa:
         6d:6f:63:bc:66:af:37:74:e4:4b:a4:5e:d9:c2:58:30:4a:d1:
         05:f3:df:99:da:b8:7d:a1:6c:0f:67:05:f4:75:75:11:94:66:
         18:e0:8b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:49:13 2025 by rpki-client