Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20062/eF_Fpe6JCF_2GT6kuczMglL9m7k.roa
File:                     eF_Fpe6JCF_2GT6kuczMglL9m7k.roa (raw, json)
Hash identifier:          SWlE4pQTGCX/iFeIIlJ40SXVQxSMdMXtdGWrYdvRaW8=
Subject key identifier:   78:5F:C5:A5:EE:89:08:5F:F6:19:3E:A4:B9:CC:CC:82:52:FD:9B:B9
Certificate issuer:       /CN=938067C25BCA7D1385BD36C482858F830B5A6E3A
Certificate serial:       37
Authority key identifier: 93:80:67:C2:5B:CA:7D:13:85:BD:36:C4:82:85:8F:83:0B:5A:6E:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k4BnwlvKfROFvTbEgoWPgwtabjo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/eF_Fpe6JCF_2GT6kuczMglL9m7k.roa
Signing time:             Fri 31 Jan 2025 01:28:48 +0000
ROA not before:           Fri 31 Jan 2025 01:28:48 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     131929
IP address blocks:        219.100.248.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=938067C25BCA7D1385BD36C482858F830B5A6E3A
        Validity
            Not Before: Jan 31 01:28:48 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=785FC5A5EE89085FF6193EA4B9CCCC8252FD9BB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8c:1d:1e:d5:3e:e9:31:52:ee:d2:c3:42:2f:
                    e2:a0:b6:a5:ca:76:70:9b:e6:aa:5e:70:17:b4:27:
                    3c:dd:bb:55:9e:36:48:9d:5a:4b:85:78:6a:31:af:
                    97:29:8e:f4:49:2f:47:1f:d7:30:76:08:91:46:8a:
                    e3:22:46:ad:42:89:fa:45:be:d3:da:c1:cc:97:63:
                    eb:fb:8d:50:bc:f5:1c:cf:04:d1:df:09:e3:83:5f:
                    de:94:fc:8e:5e:5b:0e:11:4b:5e:96:73:39:18:85:
                    c6:65:10:75:34:0d:8d:43:2e:7a:d1:2b:94:cd:56:
                    95:6d:8e:e8:92:b5:ad:ce:c3:da:6f:9e:60:3a:b9:
                    7c:0e:74:0c:83:f4:b7:f8:87:07:76:eb:24:d6:c1:
                    58:29:a3:6d:11:7f:07:48:6f:57:1e:0f:91:4d:f8:
                    33:a9:d4:fd:70:e5:f3:b6:3d:a0:6a:90:7f:69:34:
                    87:e7:cf:77:86:e3:83:aa:17:35:8f:ca:38:c6:db:
                    01:34:58:b9:2f:ef:3c:b1:a2:a6:2a:dc:b5:64:c5:
                    45:2a:86:20:a1:8c:29:54:5f:d0:2b:43:a9:55:c3:
                    16:60:d7:10:3b:4d:39:c4:0c:e3:74:57:84:62:cc:
                    de:7e:00:3b:b9:a7:4d:a2:8f:24:7b:0a:0c:12:dd:
                    8e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:5F:C5:A5:EE:89:08:5F:F6:19:3E:A4:B9:CC:CC:82:52:FD:9B:B9
            X509v3 Authority Key Identifier:
                keyid:93:80:67:C2:5B:CA:7D:13:85:BD:36:C4:82:85:8F:83:0B:5A:6E:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/k4BnwlvKfROFvTbEgoWPgwtabjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k4BnwlvKfROFvTbEgoWPgwtabjo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/eF_Fpe6JCF_2GT6kuczMglL9m7k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:08:3e:a1:82:f0:fa:22:ce:26:99:f1:06:42:c6:34:64:3f:
         3c:5b:91:d2:02:50:87:56:75:0b:05:76:bc:dc:ee:92:6d:f3:
         ba:06:73:dd:bd:e7:3f:ed:31:1e:01:77:6c:97:6c:df:95:6f:
         2d:66:6c:26:2e:e6:ea:6b:58:68:11:85:79:0b:e5:8e:04:08:
         88:7f:1f:d2:af:33:13:58:7f:04:7d:d9:40:bf:ce:d5:a8:0b:
         89:d6:ba:21:9b:ff:a1:61:d8:33:15:af:b5:37:3b:d7:51:ea:
         27:40:2e:05:6e:aa:44:33:c0:e0:d9:18:ea:3c:ae:34:14:e9:
         83:30:75:f4:6e:c9:bd:e0:c0:27:77:2d:26:c4:90:6d:34:76:
         45:5e:ba:cf:ac:a9:97:f6:85:5c:c1:2e:d9:fe:d6:18:97:1e:
         7c:3f:df:37:57:65:e7:68:8a:01:aa:3e:a3:2e:63:28:1c:71:
         15:4a:ac:08:02:cd:60:a5:36:db:07:20:44:e2:bd:5d:04:8f:
         6a:3b:e6:2c:e4:e1:7d:95:28:4e:7c:40:d4:28:b4:75:4b:ca:
         0d:02:c8:ee:83:68:87:f1:b8:a4:fd:c8:c8:f0:37:50:74:4f:
         71:c6:26:02:22:5b:de:7b:7f:84:ed:82:88:6b:77:61:10:3c:
         43:8c:91:7e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:05:16 2025 by rpki-client