Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/a7sZgh200aTfpuTOIR2ii6h8Kzk.roa
File:                     a7sZgh200aTfpuTOIR2ii6h8Kzk.roa (raw, json)
Hash identifier:          hisRXBGn6tIs0DN3ssnnOjNxMJ06EiX7TZL4iz0hI64=
Subject key identifier:   6B:BB:19:82:1D:B4:D1:A4:DF:A6:E4:CE:21:1D:A2:8B:A8:7C:2B:39
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       CA
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/a7sZgh200aTfpuTOIR2ii6h8Kzk.roa
Signing time:             Fri 31 Jan 2025 01:31:23 +0000
ROA not before:           Fri 31 Jan 2025 01:31:23 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     18126
IP address blocks:        203.129.112.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: Jan 31 01:31:23 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=6BBB19821DB4D1A4DFA6E4CE211DA28BA87C2B39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7a:34:22:ca:58:3a:8b:41:0e:2c:f1:c5:6b:
                    7d:f1:29:3b:29:e7:98:85:e1:0f:fb:40:34:bb:ff:
                    8d:c9:08:5f:41:12:df:d0:1e:6a:59:c3:dc:3f:c0:
                    05:15:96:d0:c4:86:c5:87:52:f6:ec:3a:e9:2f:ea:
                    30:e3:25:6c:7d:1e:ef:8c:7e:2e:dd:1b:82:71:3b:
                    f9:ed:a8:0f:8c:eb:f1:8b:05:ed:95:76:6b:74:a5:
                    77:69:98:93:75:b8:03:40:e4:96:a9:f7:84:6f:35:
                    20:ce:e3:2c:0b:91:3f:4e:19:b4:e2:0d:e0:17:3b:
                    ba:fe:a7:14:e1:b7:ff:8f:87:8c:01:e0:86:02:fb:
                    85:f4:ed:ff:5b:92:8c:06:ad:27:7e:b3:80:0f:7d:
                    e8:40:5b:ff:4d:35:69:47:23:f4:fa:20:8e:1a:f1:
                    92:e1:08:23:92:75:28:65:20:68:0c:2d:4c:bf:d5:
                    02:86:07:de:6c:72:03:3b:2f:43:a3:c4:da:cc:82:
                    79:0f:bc:80:8a:e4:c9:b1:83:2c:45:2a:b4:a0:08:
                    8e:12:4c:0c:02:9f:29:65:15:7e:34:14:ba:d6:ac:
                    5e:62:a9:26:09:f9:12:cd:47:29:ab:93:4e:dc:fb:
                    f4:1e:db:8e:69:03:40:31:90:6f:8d:12:23:91:c1:
                    d4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BB:19:82:1D:B4:D1:A4:DF:A6:E4:CE:21:1D:A2:8B:A8:7C:2B:39
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/a7sZgh200aTfpuTOIR2ii6h8Kzk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.129.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3a:e3:61:ed:89:24:44:7a:70:18:59:3a:a4:e4:fc:81:cc:24:
         e3:97:ed:3d:98:37:c7:cd:af:32:ee:e3:90:4d:85:a1:3d:5c:
         d4:aa:34:2e:13:77:e1:9b:4d:d0:0c:bd:9d:42:71:bb:4c:61:
         21:65:cc:0c:c7:29:1d:5f:19:67:bb:a5:01:34:72:39:6b:63:
         23:79:f2:7f:72:1c:3a:a6:6f:4e:3c:0e:76:b5:1d:33:55:c0:
         cd:86:c9:95:e9:78:ff:da:7d:b4:19:ae:68:c9:78:ff:31:ae:
         b5:40:43:4b:26:f2:b3:69:4a:f0:6f:cc:fa:9f:ba:db:76:bb:
         80:8d:f5:59:91:60:ee:e1:6b:34:95:2e:d8:37:ca:6a:fd:45:
         e2:b1:53:71:bf:8d:2a:88:51:88:38:2e:74:6e:43:be:3a:ef:
         d1:fa:0f:e6:dc:e9:57:6b:33:17:ab:f7:5e:e3:7c:06:06:de:
         f7:06:70:bd:47:f0:b9:1c:cc:38:44:c7:6b:61:2f:cf:45:ec:
         40:25:d9:71:92:0b:8d:ae:bf:84:41:99:0c:42:10:6e:64:80:
         59:a2:c7:53:90:be:2c:0f:57:5d:de:d8:dd:4c:0b:d5:56:ed:
         f1:2c:cd:d6:35:7e:f2:b4:37:f6:44:43:1c:f9:ef:b5:30:b6:
         27:65:b1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:22:35 2025 by rpki-client