Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20080/r4s6cnpx8YPDsOMQBOPVaafNfmE.roa
File:                     r4s6cnpx8YPDsOMQBOPVaafNfmE.roa (raw, json)
Hash identifier:          W1XxDmuhnBvK7dxhX4jwYaDehEkUejG3vrM32J5HIhg=
Subject key identifier:   AF:8B:3A:72:7A:71:F1:83:C3:B0:E3:10:04:E3:D5:69:A7:CD:7E:61
Certificate issuer:       /CN=E9326B6ADF29A394E87C090DC61744D8D86C3383
Certificate serial:       4E
Authority key identifier: E9:32:6B:6A:DF:29:A3:94:E8:7C:09:0D:C6:17:44:D8:D8:6C:33:83
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6TJrat8po5TofAkNxhdE2NhsM4M.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/r4s6cnpx8YPDsOMQBOPVaafNfmE.roa
Signing time:             Fri 31 Jan 2025 01:34:55 +0000
ROA not before:           Fri 31 Jan 2025 01:34:55 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     63786
IP address blocks:        103.123.182.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9326B6ADF29A394E87C090DC61744D8D86C3383
        Validity
            Not Before: Jan 31 01:34:55 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=AF8B3A727A71F183C3B0E31004E3D569A7CD7E61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e1:04:85:bd:35:a9:0f:78:f3:ea:ed:ca:f3:
                    81:a5:dc:a9:85:0f:d2:da:57:7f:b3:7e:68:eb:c0:
                    e0:d8:9f:a7:2c:dd:0b:40:0d:84:9b:93:1a:d2:6d:
                    b2:59:ba:a9:76:10:37:0c:30:6d:b2:22:8b:e6:fe:
                    c1:6f:1a:a7:ae:dd:cd:45:35:b5:98:1d:20:26:b4:
                    c6:46:1c:0a:61:78:cf:43:a0:41:f6:0a:a5:37:b5:
                    8b:76:78:e9:ab:7c:47:66:e0:c1:cd:64:f9:12:a5:
                    4b:6d:6e:82:b7:dc:83:02:a0:39:30:30:24:7f:dc:
                    8a:e1:0a:85:16:b2:4c:e0:4d:70:c0:8a:ae:6c:d0:
                    15:e7:f4:4b:01:ba:86:fb:10:4c:0d:66:cc:f0:14:
                    30:45:dc:55:1a:74:b9:11:17:77:79:98:b1:b9:bd:
                    81:de:93:c3:5d:42:47:28:58:03:33:ff:b9:ce:9d:
                    d3:d5:c6:48:bb:35:ac:77:d1:e1:29:86:20:95:96:
                    ac:31:a5:5c:49:d7:b0:f6:02:76:98:61:b0:1a:da:
                    b9:c5:83:f9:3d:58:95:14:9c:ba:bf:bc:9a:7a:34:
                    ab:64:2e:2a:78:d3:25:9b:ff:d3:a9:45:aa:a8:47:
                    ec:f1:34:86:6e:07:0f:9b:47:74:3f:73:c3:fc:b5:
                    30:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8B:3A:72:7A:71:F1:83:C3:B0:E3:10:04:E3:D5:69:A7:CD:7E:61
            X509v3 Authority Key Identifier:
                keyid:E9:32:6B:6A:DF:29:A3:94:E8:7C:09:0D:C6:17:44:D8:D8:6C:33:83

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/6TJrat8po5TofAkNxhdE2NhsM4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6TJrat8po5TofAkNxhdE2NhsM4M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/r4s6cnpx8YPDsOMQBOPVaafNfmE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:5b:72:c2:e4:db:6f:66:42:45:fa:16:2c:59:42:b9:ab:9a:
         36:b1:c0:46:3f:9e:67:e3:0e:7d:8f:3c:b2:76:64:0a:56:5f:
         6f:d8:85:dc:d5:b0:06:fa:86:0d:c1:83:c9:1d:8c:a4:da:f3:
         83:fd:22:89:5e:57:af:41:99:92:d9:b4:fa:19:c7:b8:21:39:
         3b:4a:15:d8:59:e8:5d:a8:a3:77:30:41:46:7f:f9:4d:57:99:
         c8:b6:d0:e9:5e:4a:b9:ad:91:c9:d9:a3:74:5f:a5:9c:74:d2:
         cd:ac:7f:33:4e:dc:b0:00:f2:0f:5d:d8:82:af:77:1a:10:17:
         67:d9:ee:c3:50:02:d9:9f:5d:6b:3e:4a:6b:34:e5:f6:36:af:
         a3:01:fb:10:a9:51:13:3b:13:ee:98:80:2e:0f:b5:ef:02:a2:
         85:c2:6a:5b:f0:9e:5c:43:13:33:ec:17:fb:99:14:85:48:be:
         79:6a:32:a5:12:be:a2:4e:a8:fd:ca:f1:48:fa:7d:b5:1c:14:
         bd:14:12:4d:cf:ff:d2:fa:dc:29:f8:ef:d0:e1:d8:92:01:17:
         fb:08:5f:6b:b6:cb:fe:b0:34:ef:37:53:43:84:f6:95:1a:36:
         ac:32:d5:38:90:19:7e:0d:aa:43:19:53:84:29:92:1e:5b:e4:
         93:ab:c6:ae
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:27 2025 by rpki-client