Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/NwTsd2noxW-McM67eIBFwuj6A5M.roa
File:                     NwTsd2noxW-McM67eIBFwuj6A5M.roa (raw, json)
Hash identifier:          wpzi4jdATLqutd8oWNZSy4xBV+FHhwyBbIMe2ZFvtQw=
Subject key identifier:   37:04:EC:77:69:E8:C5:6F:8C:70:CE:BB:78:80:45:C2:E8:FA:03:93
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       87
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/NwTsd2noxW-McM67eIBFwuj6A5M.roa
Signing time:             Tue 03 Dec 2024 17:40:19 +0000
ROA not before:           Tue 03 Dec 2024 17:40:19 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     394646
IP address blocks:        61.120.148.0/25 maxlen: 25
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Dec  3 17:40:19 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=3704EC7769E8C56F8C70CEBB788045C2E8FA0393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a2:fd:73:35:78:f2:3e:89:ee:9e:16:99:3a:
                    94:26:2f:8a:b6:63:fc:f0:7a:2b:c3:b6:82:48:6b:
                    ec:b2:eb:16:87:0c:d9:95:40:42:20:cf:e9:35:7a:
                    ee:42:0c:df:d2:14:0d:f1:59:ae:da:4f:1b:50:ef:
                    d6:a1:64:92:0c:41:b7:b5:a1:74:bc:ba:2d:bc:fd:
                    14:33:76:67:0d:49:c3:f7:c3:78:bb:32:44:da:74:
                    7c:7b:10:5c:26:72:ce:78:a4:63:b7:b6:3d:5f:14:
                    aa:05:f0:ef:6a:fa:d2:b0:c6:c8:d0:3d:f9:80:47:
                    cb:67:6a:45:67:ad:07:77:2a:20:b5:70:fe:b4:90:
                    f2:05:73:0b:b1:68:f1:75:30:d9:a4:04:ae:88:86:
                    4f:e4:db:60:bd:1a:dd:8d:9c:b5:c1:27:21:08:42:
                    c8:69:f3:af:41:8a:18:ec:73:89:9b:bb:66:c7:77:
                    89:71:fc:67:80:bc:4c:70:f3:19:59:4c:d6:16:55:
                    84:b6:e2:4c:30:7c:09:56:a1:80:71:e2:57:ba:f9:
                    f0:92:ce:14:89:88:0d:27:d5:73:44:c9:f4:22:d6:
                    a9:fe:7c:c5:79:d7:5d:bb:24:55:9d:b2:5d:75:0b:
                    4f:90:de:28:f0:9f:95:5d:61:28:8a:1a:f0:ae:60:
                    9f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:04:EC:77:69:E8:C5:6F:8C:70:CE:BB:78:80:45:C2:E8:FA:03:93
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/NwTsd2noxW-McM67eIBFwuj6A5M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.120.148.0/25

    Signature Algorithm: sha256WithRSAEncryption
         89:d5:cf:b7:29:6e:92:c9:c4:31:90:23:f2:c9:ad:6d:e2:c4:
         02:95:fd:79:d0:53:7e:cc:e0:3a:e5:14:f8:27:be:76:2c:05:
         bd:48:a2:ec:84:3a:65:e1:f9:ea:4c:dc:26:e2:48:84:7e:40:
         59:87:0e:d6:9f:e4:30:fa:19:cf:5a:5b:d9:c6:56:32:47:a4:
         e3:42:c2:1a:80:6f:a5:f5:c0:09:77:8b:8c:2b:18:13:06:73:
         91:ed:5c:28:3c:1e:05:1b:fe:0d:89:6a:7e:b4:b1:50:6f:d8:
         2f:94:b9:8a:bf:94:21:cd:22:b0:df:23:dd:ac:13:4f:40:c2:
         55:56:f9:4b:2d:91:f8:15:76:64:49:51:05:6e:c8:e6:94:4c:
         92:72:99:c4:68:3e:d6:7f:19:4c:4f:93:4a:02:95:a3:fa:ae:
         96:35:23:c1:ca:e5:ef:b3:e1:f3:30:8a:56:e1:31:5a:88:fd:
         2e:86:5b:32:13:ac:ab:05:89:bc:06:c6:06:29:03:cb:78:6d:
         6f:9f:bf:b4:81:54:c5:17:ed:99:96:92:7e:2f:92:25:83:80:
         df:6d:ec:36:74:ea:44:a1:d8:77:37:f3:ab:bb:15:3b:57:1e:
         5b:49:ca:f8:6f:88:d9:22:30:69:36:79:2d:20:bd:20:25:85:
         99:35:27:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:24:58 2025 by rpki-client