Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/pFGl_ZX1fLyIAZMO42tb0tX4lTw.roa
File:                     pFGl_ZX1fLyIAZMO42tb0tX4lTw.roa (raw, json)
Hash identifier:          lF4Gef7SdjhhcXbNYDRtZXSPWKKd3Qhv57xjxLVla2A=
Subject key identifier:   A4:51:A5:FD:95:F5:7C:BC:88:01:93:0E:E3:6B:5B:D2:D5:F8:95:3C
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       62
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/pFGl_ZX1fLyIAZMO42tb0tX4lTw.roa
Signing time:             Wed 04 Sep 2024 06:29:22 +0000
ROA not before:           Wed 04 Sep 2024 06:29:22 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     15830
IP address blocks:        119.75.224.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Sep  4 06:29:22 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=A451A5FD95F57CBC8801930EE36B5BD2D5F8953C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:57:9b:f8:02:ca:03:8e:80:32:3a:39:7f:6a:
                    78:91:4b:7f:d6:00:e8:2c:5b:e4:db:30:39:8f:06:
                    a5:e0:17:18:ad:41:ac:be:3e:94:07:a6:6c:b2:9b:
                    79:0f:0f:20:f1:ea:c3:de:dc:72:95:92:66:74:61:
                    84:41:ce:d1:ea:eb:50:a7:e1:4c:7c:53:66:ce:18:
                    5a:af:35:e7:9d:5a:7f:9d:ce:fd:cb:d4:c4:13:2f:
                    52:03:de:da:62:1f:61:8d:35:72:eb:ef:1d:a3:db:
                    a6:c2:69:96:ea:89:92:db:c4:06:40:6d:8c:71:35:
                    0c:0d:de:b4:ff:28:8f:4e:de:04:8f:f2:42:84:82:
                    8d:79:c3:10:d9:80:8f:74:37:ab:98:9f:b3:b4:94:
                    b3:56:3c:1c:49:f6:54:21:2d:dd:8f:51:b2:1c:93:
                    95:61:af:65:bd:8e:d6:29:45:a7:03:d4:dd:10:15:
                    1a:e8:d3:47:73:96:3c:75:a9:88:9f:b6:e4:a7:8c:
                    c9:1a:a0:3c:0d:c0:5a:a4:04:4a:65:6f:4f:81:75:
                    5e:ae:76:89:d3:4f:a1:31:73:bb:1b:61:81:80:56:
                    16:5c:66:6b:3f:9f:e9:ca:c9:03:76:3e:06:8a:70:
                    65:db:c4:2b:e0:1e:d6:f0:2c:ba:e7:6a:b6:89:be:
                    d2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:51:A5:FD:95:F5:7C:BC:88:01:93:0E:E3:6B:5B:D2:D5:F8:95:3C
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/pFGl_ZX1fLyIAZMO42tb0tX4lTw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.75.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         11:5d:4b:b3:b1:c7:d6:10:a9:be:f9:9b:e1:78:2d:18:b4:4d:
         54:01:c8:64:2d:1a:93:29:31:aa:14:0a:71:41:1f:b6:d1:60:
         45:8b:4d:ac:1d:96:12:6e:3d:97:69:93:7b:55:6a:cd:6e:7d:
         e7:f5:30:f0:06:b7:7e:d4:9c:1d:8e:cf:ac:29:57:8f:12:62:
         13:f7:23:85:81:72:12:b6:57:cd:e3:64:d2:50:01:ca:09:c8:
         72:1f:1a:cb:a4:88:fa:3d:74:2a:14:5e:b1:48:9d:d0:60:45:
         e1:3b:59:a4:ae:60:f6:cd:d0:63:db:13:a0:ed:cf:13:2b:16:
         0e:71:3f:77:f9:80:99:86:f2:1e:c4:4f:3b:74:b2:70:d0:34:
         19:b8:60:af:0e:80:a4:49:37:61:d7:d6:15:6f:3a:55:c2:19:
         37:28:39:dc:69:86:ed:1a:bf:0d:22:49:a1:69:76:8c:b3:02:
         9d:cc:3f:7c:d6:52:70:c8:ab:69:38:fc:49:6e:17:41:00:1a:
         94:bf:65:09:c2:a9:8d:5c:52:9c:62:4c:eb:d2:70:e9:97:6c:
         d2:b8:56:17:cd:8f:56:fd:ec:51:27:f6:9b:f2:bb:c6:d4:f1:
         78:e1:99:00:12:f2:a6:53:84:ff:95:fc:67:26:4c:43:cd:72:
         ba:37:74:26
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:08:05 2025 by rpki-client