Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/4l3WxyiLv9wQMyh4Kz3vwnqo4d0.roa
File:                     4l3WxyiLv9wQMyh4Kz3vwnqo4d0.roa (raw, json)
Hash identifier:          aHJO4jMMemDawCcUa7R7pI0QfvcQql3EQdjQXbaw65U=
Subject key identifier:   E2:5D:D6:C7:28:8B:BF:DC:10:33:28:78:2B:3D:EF:C2:7A:A8:E1:DD
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       84
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/4l3WxyiLv9wQMyh4Kz3vwnqo4d0.roa
Signing time:             Tue 03 Dec 2024 17:28:19 +0000
ROA not before:           Tue 03 Dec 2024 17:28:19 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     30103
IP address blocks:        120.29.148.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Dec  3 17:28:19 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=E25DD6C7288BBFDC103328782B3DEFC27AA8E1DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:17:01:79:94:94:1e:f4:15:48:6c:a5:7c:74:
                    60:a2:78:18:c7:4c:eb:e8:2d:dd:40:94:53:cc:dd:
                    72:f8:59:2b:d3:3a:f8:30:30:78:20:f4:6d:4f:df:
                    49:b6:2c:6d:66:dd:d6:d7:62:bf:19:6b:d6:9f:83:
                    b3:83:a5:85:20:56:4b:71:d1:bb:f2:7e:a7:75:09:
                    4a:fd:e8:6d:31:84:0e:41:4f:87:0c:79:fc:a7:45:
                    8c:0a:34:d3:6c:cd:8a:95:4c:25:47:17:ba:4e:36:
                    99:22:94:94:21:29:b4:f0:ee:3b:a7:bb:16:30:79:
                    ac:99:00:f9:83:5a:3e:dc:c2:77:9c:a9:a3:6f:14:
                    6c:90:b5:e4:b1:99:72:99:2a:0c:3f:35:8e:3e:2a:
                    5a:15:3e:e6:49:e8:4c:e2:4c:59:ec:02:b7:e8:44:
                    72:be:96:d3:ef:26:a0:3d:f4:f4:91:bd:e7:00:9d:
                    13:86:9d:4f:9b:2b:83:71:dc:86:a4:22:21:0a:2f:
                    26:fd:e2:c7:b2:10:77:62:db:cf:52:d7:d9:83:37:
                    9e:3f:b0:82:cf:e5:1f:be:2b:67:30:bb:9f:4e:53:
                    a0:2e:a4:87:65:64:34:58:33:bb:ba:72:af:c5:be:
                    61:23:cd:6e:98:58:9e:44:ed:e1:51:65:83:34:e0:
                    3e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:5D:D6:C7:28:8B:BF:DC:10:33:28:78:2B:3D:EF:C2:7A:A8:E1:DD
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/4l3WxyiLv9wQMyh4Kz3vwnqo4d0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.29.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:21:3e:ba:c2:1b:b8:96:07:10:87:73:06:33:52:8c:03:dc:
         be:4e:65:c0:fd:b9:2c:ee:38:53:38:7a:e7:4a:61:bb:8c:4b:
         9e:2c:a0:48:75:43:09:3b:ea:bb:de:2f:55:6d:01:ec:4c:34:
         5f:a0:67:c4:82:7c:91:b3:3a:e9:35:6d:3b:80:f7:97:65:13:
         a6:b9:bc:84:4a:40:fd:a9:87:45:db:2c:4b:93:87:04:3b:c3:
         2c:ea:51:f7:77:4d:ec:bd:2b:48:2c:e5:f2:e7:1e:d1:b0:7d:
         05:2a:73:64:6c:37:14:29:76:e3:73:e9:52:e2:af:38:78:65:
         16:21:61:70:fa:66:d4:b2:8f:3e:54:8a:04:e9:27:9b:2d:da:
         e9:5b:e8:2d:6b:b1:53:46:56:7f:00:13:fa:10:ec:d0:2e:92:
         7a:15:1f:f3:c5:06:27:4c:1e:ff:ad:6a:22:4d:29:00:38:5f:
         9a:5c:9f:57:e0:8b:c4:99:22:9a:6c:a2:0b:c7:1f:96:21:34:
         9f:81:85:58:29:29:4c:2c:51:3b:90:ea:2f:42:8e:53:bc:3d:
         3f:d2:1a:70:01:6a:f4:74:b5:bb:46:d6:7a:d6:c8:9f:81:ba:
         d3:52:38:e2:ab:e6:8e:ac:30:75:df:cb:4c:a9:26:86:e8:f8:
         32:86:c0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:08:16 2025 by rpki-client