Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/YZyJqwll_HCa08H9-7E0Dc6dRiE.roa
File:                     YZyJqwll_HCa08H9-7E0Dc6dRiE.roa (raw, json)
Hash identifier:          b4OonhxukXtIJDnQ8WGh8jsJCbEQSBwluz2EFobMELs=
Subject key identifier:   61:9C:89:AB:09:65:FC:70:9A:D3:C1:FD:FB:B1:34:0D:CE:9D:46:21
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       7A
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/YZyJqwll_HCa08H9-7E0Dc6dRiE.roa
Signing time:             Sat 30 Nov 2024 01:28:56 +0000
ROA not before:           Sat 30 Nov 2024 01:28:56 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     6220
IP address blocks:        61.200.83.64/28 maxlen: 28
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Nov 30 01:28:56 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=619C89AB0965FC709AD3C1FDFBB1340DCE9D4621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9c:27:cf:60:19:ba:9f:39:1b:d3:38:0d:3d:
                    ae:cd:9c:e9:9a:c3:52:5a:26:e3:e8:4d:0d:7b:02:
                    59:11:88:74:c7:38:80:53:6a:b3:d9:ab:a3:3f:f8:
                    8c:f2:42:bf:23:92:9d:9e:f2:12:74:3e:f0:17:76:
                    c7:c2:93:7a:e9:4d:51:78:cc:7b:56:b8:c1:e6:c9:
                    43:93:b3:c8:bc:cf:92:d8:c0:a9:88:b3:6b:31:30:
                    db:89:5e:10:36:f0:f9:de:ed:ac:b4:63:e7:fb:66:
                    40:44:56:bf:33:e6:2e:58:66:1b:0a:07:03:f0:ca:
                    1c:75:6b:79:fc:0b:f0:a0:c7:a8:77:79:88:17:b9:
                    34:7f:72:b6:cf:11:f5:e8:e4:52:96:a9:5d:71:f6:
                    d7:86:10:f5:e1:c3:16:88:df:a6:2a:03:08:bc:a4:
                    a6:ba:c0:0b:a4:6b:b4:d4:18:d4:04:7d:03:74:b2:
                    70:78:6f:d3:7c:d4:71:87:ac:a0:da:2f:0e:20:5d:
                    b2:11:28:c6:5f:c7:98:b4:c6:5c:26:c3:9b:03:b7:
                    b0:88:ea:8e:65:ad:2b:15:d2:fa:b9:43:1c:32:4a:
                    90:eb:de:bf:bb:b6:09:cc:ee:3e:3e:5b:af:51:a3:
                    db:79:32:aa:e0:9d:71:b0:f8:eb:72:27:9c:8e:4b:
                    60:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:9C:89:AB:09:65:FC:70:9A:D3:C1:FD:FB:B1:34:0D:CE:9D:46:21
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/YZyJqwll_HCa08H9-7E0Dc6dRiE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.200.83.64/28

    Signature Algorithm: sha256WithRSAEncryption
         95:a2:69:25:87:c4:a7:62:03:26:f2:5d:d6:9d:c6:f5:c6:1b:
         79:7b:54:92:cf:4b:84:8f:c9:1b:40:7a:ad:4e:f0:bf:6d:a6:
         b9:80:2e:b9:53:bf:c8:74:64:0f:be:88:05:6b:79:17:e9:16:
         ca:c4:3d:18:55:63:58:2b:84:64:95:5c:15:f7:6a:af:0e:94:
         41:43:71:d2:65:cc:dc:3d:06:d4:15:4a:d6:93:97:06:78:1d:
         d3:f4:8e:b1:97:42:3c:cc:70:2c:85:d7:34:87:f7:58:81:b1:
         1b:ce:2e:bd:80:3a:f7:02:54:c2:b2:e0:2f:5a:3d:a8:8c:09:
         c1:45:70:53:a3:6f:2b:59:0a:9f:f6:be:51:b9:40:33:d4:03:
         d1:19:ca:0e:1c:84:62:4a:e4:79:83:5e:8b:b4:99:ac:48:ff:
         a6:fd:59:e8:4f:b4:5d:af:ac:bc:75:46:e1:a1:12:e4:7c:9d:
         9a:7c:81:4d:10:df:fc:8c:e6:10:ee:3a:a6:d3:a4:09:8e:20:
         5f:5f:78:b9:cc:9f:6a:d1:35:05:01:69:5b:1f:56:20:74:ce:
         25:04:15:8d:49:f2:5d:b5:ff:3e:f6:7c:cc:2f:3c:50:54:d0:
         e1:48:5d:3f:15:3b:ce:ad:bb:f9:56:81:a3:b0:12:28:a6:f8:
         24:b0:52:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:56:26 2025 by rpki-client