Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1639/UWP5aFt5WfIDsDftrt0pnMBrRp8.roa
File:                     UWP5aFt5WfIDsDftrt0pnMBrRp8.roa (raw, json)
Hash identifier:          IK9+a0NJqHMg1dH5NccdFL402pRGKPoT23G1LDPOC2Y=
Subject key identifier:   51:63:F9:68:5B:79:59:F2:03:B0:37:ED:AE:DD:29:9C:C0:6B:46:9F
Certificate issuer:       /CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
Certificate serial:       72
Authority key identifier: 24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/UWP5aFt5WfIDsDftrt0pnMBrRp8.roa
Signing time:             Fri 31 Jan 2025 01:30:34 +0000
ROA not before:           Fri 31 Jan 2025 01:30:34 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     7667
IP address blocks:        202.255.44.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
        Validity
            Not Before: Jan 31 01:30:34 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=5163F9685B7959F203B037EDAEDD299CC06B469F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d4:48:78:3d:f9:6e:c5:73:25:4a:e4:79:dc:
                    76:45:b6:51:4c:6d:85:a3:b8:97:ca:65:47:04:a1:
                    3b:07:2a:ae:31:56:2b:52:af:76:15:aa:20:87:fe:
                    90:c2:6f:f6:73:45:6b:f9:0b:40:4d:e8:37:1a:89:
                    d3:0a:6c:20:59:70:b0:82:55:c8:28:64:db:70:2e:
                    5f:0e:49:c0:97:3d:ea:5a:e3:17:2a:80:4c:45:79:
                    b0:13:93:d8:f9:eb:38:67:f4:2a:5e:aa:97:fd:24:
                    5b:a5:3b:7f:33:e1:13:2c:60:29:33:5d:9c:6c:c2:
                    a5:c0:90:50:34:63:d9:80:e9:ae:de:14:7b:9b:dd:
                    ee:e2:44:1a:f2:83:5a:f4:dc:df:a3:0d:7d:d0:d0:
                    13:b8:c5:b8:ab:ab:b5:8e:45:5e:ab:a6:af:a6:85:
                    88:ea:d2:c2:b7:ec:e7:2e:82:86:f7:e6:ae:f3:18:
                    c1:1b:ab:d4:82:10:68:40:54:d6:b3:8b:ac:d2:bd:
                    80:d0:01:6b:62:c0:d9:fb:c1:bf:48:72:85:51:e1:
                    e5:d8:02:07:01:8e:03:0e:62:a2:a1:22:30:b5:e9:
                    18:80:42:46:bd:34:56:9c:10:7e:e0:71:3e:87:47:
                    de:e2:1d:02:4e:e1:17:1f:39:d7:6e:d3:c7:63:d3:
                    ad:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:63:F9:68:5B:79:59:F2:03:B0:37:ED:AE:DD:29:9C:C0:6B:46:9F
            X509v3 Authority Key Identifier:
                keyid:24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/UWP5aFt5WfIDsDftrt0pnMBrRp8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.255.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:c8:64:23:ce:8b:8c:00:36:c1:95:bf:a7:85:29:02:d4:06:
         fc:73:84:ac:6c:bb:9d:ac:8f:33:b6:23:6a:e6:11:b4:72:f6:
         28:d3:d3:8f:5e:c4:aa:60:31:4e:4b:f2:57:d1:3a:72:02:3a:
         ac:5e:e0:d2:85:c9:0d:c6:c5:4a:0d:83:98:a4:78:1a:8f:bb:
         36:74:f1:fe:f5:68:88:ef:62:52:dc:84:78:e8:e1:47:ad:6f:
         9e:39:54:8f:dc:1d:7f:df:c0:0c:65:5a:40:14:21:f9:9c:7e:
         a7:b9:70:fa:a3:c8:fd:3c:c8:17:3d:0b:e8:ec:c3:da:e0:f9:
         6f:42:d2:a6:43:d6:88:88:16:62:79:dd:46:5a:21:28:d6:87:
         ef:0e:bf:03:57:db:ab:b7:c9:35:cd:d4:36:0b:63:e1:d9:33:
         a9:a2:0b:5d:07:3e:6d:ce:2a:38:f0:e6:8d:4c:29:25:9b:a8:
         33:58:9b:d6:c5:a1:81:a4:ce:d1:5e:91:68:6c:35:43:ed:ca:
         b4:46:d6:04:8a:c4:83:a6:93:a7:15:7d:b0:0c:91:22:d5:31:
         6d:d7:73:1e:cf:67:7a:36:ff:c8:69:88:5b:bf:3e:7b:42:77:
         0e:dd:d8:47:13:72:09:5e:cc:f1:74:70:a8:46:5e:de:9f:df:
         c2:e2:cd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 14:22:59 2025 by rpki-client