Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1453/mwVQd-bjes8bYtFqztuBYJdZ3Lg.roa
File:                     mwVQd-bjes8bYtFqztuBYJdZ3Lg.roa (raw, json)
Hash identifier:          Cuglm+LS4FCV/d7+bQ87W1et0/HT6Hi8gsJ8Yv+rNKU=
Subject key identifier:   9B:05:50:77:E6:E3:7A:CF:1B:62:D1:6A:CE:DB:81:60:97:59:DC:B8
Certificate issuer:       /CN=011A556FFC4BA39EB90A5924A36AFDA37E9819B6
Certificate serial:       06
Authority key identifier: 01:1A:55:6F:FC:4B:A3:9E:B9:0A:59:24:A3:6A:FD:A3:7E:98:19:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ARpVb_xLo565Clkko2r9o36YGbY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1453/mwVQd-bjes8bYtFqztuBYJdZ3Lg.roa
Signing time:             Mon 28 Oct 2024 07:21:54 +0000
ROA not before:           Mon 28 Oct 2024 07:21:54 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     10021
IP address blocks:        202.255.101.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011A556FFC4BA39EB90A5924A36AFDA37E9819B6
        Validity
            Not Before: Oct 28 07:21:54 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=9B055077E6E37ACF1B62D16ACEDB81609759DCB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:13:3b:d7:1b:05:18:11:f6:67:1e:da:7c:73:
                    cb:eb:d5:c7:0a:f2:e1:f9:83:52:7f:ca:bd:3c:7f:
                    01:76:9f:19:2e:44:1b:5a:eb:34:4e:e1:e8:17:55:
                    fe:5c:e8:01:c7:d7:24:99:99:2c:66:58:4a:7c:8e:
                    79:8b:3c:62:2e:b8:1a:98:88:2f:dc:d2:3c:45:25:
                    f2:68:28:73:4e:43:69:f4:dd:5e:5e:ee:ab:32:70:
                    66:49:a6:bb:a9:ed:f5:97:b1:dc:49:29:c8:ba:b4:
                    23:40:b4:37:b1:c9:3d:72:1b:cc:a5:d1:73:63:a4:
                    95:34:23:ab:0f:68:f9:5e:49:01:cf:23:3b:74:30:
                    82:b0:7a:84:12:5c:26:60:16:cb:e0:64:58:3a:77:
                    4b:f3:b6:af:60:e6:21:d0:4b:19:98:83:de:ed:bd:
                    77:da:11:3d:73:e5:5c:37:d7:52:e4:fc:59:d4:0a:
                    94:de:9e:88:d1:41:f4:93:2a:52:72:41:db:15:f8:
                    61:47:1f:19:4a:f4:ac:9b:64:c8:de:e2:0f:44:93:
                    69:6e:1d:ab:0a:f1:77:8e:94:d4:b1:b8:ca:87:40:
                    92:9d:d0:28:5c:ba:42:0d:3e:da:f8:32:c8:25:a0:
                    14:1f:e3:0f:89:99:28:ad:9b:a5:be:4d:71:88:5b:
                    c6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:05:50:77:E6:E3:7A:CF:1B:62:D1:6A:CE:DB:81:60:97:59:DC:B8
            X509v3 Authority Key Identifier:
                keyid:01:1A:55:6F:FC:4B:A3:9E:B9:0A:59:24:A3:6A:FD:A3:7E:98:19:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1453/ARpVb_xLo565Clkko2r9o36YGbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ARpVb_xLo565Clkko2r9o36YGbY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1453/mwVQd-bjes8bYtFqztuBYJdZ3Lg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.255.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:a9:91:8d:dd:d1:39:80:d0:76:a1:18:bd:7b:4c:1b:35:58:
         35:60:18:25:fc:62:e8:72:ba:96:b7:ff:08:09:99:c4:38:21:
         3d:98:c3:88:cf:64:3c:e7:c6:78:93:00:17:82:a3:da:4e:50:
         d5:72:f9:85:34:26:d6:ce:f8:88:27:24:af:b5:ba:b3:6b:ae:
         1b:bc:fc:92:cf:29:37:c4:de:76:3f:a6:3a:af:e2:bd:c0:26:
         bc:4a:ff:07:94:bd:7a:08:1a:67:d3:04:74:05:03:a2:d0:58:
         1f:40:13:2b:19:13:47:eb:44:51:f0:0f:aa:1a:3d:bb:2d:4d:
         a9:d5:14:bc:e9:17:03:47:4d:66:71:fd:f1:f4:f5:32:87:77:
         63:e7:78:45:2e:93:14:ed:d7:4b:6f:d3:be:a2:b3:d0:61:f4:
         76:96:56:e4:8c:19:7f:30:99:c8:cf:47:af:57:b0:d2:fb:c3:
         a0:0d:73:ea:23:46:91:0a:8d:24:61:0f:31:5a:34:ed:85:24:
         0b:93:a6:62:e4:21:45:40:65:18:89:58:3a:dd:66:f3:f9:4a:
         4d:01:47:bc:51:1c:bf:fd:a0:5b:91:02:34:14:13:4a:75:16:
         0a:56:f4:ef:61:5c:70:35:b6:53:10:c8:7e:15:42:23:1e:6f:
         8b:85:1c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:12:26 2025 by rpki-client