Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/_j1uXO41xISijHPxZkpgAnnOCcY.roa
File:                     _j1uXO41xISijHPxZkpgAnnOCcY.roa (raw, json)
Hash identifier:          nSyU3XR1M5VyveORB1UBy7dm1jlf+GZMIsxkKz5/cRI=
Subject key identifier:   FE:3D:6E:5C:EE:35:C4:84:A2:8C:73:F1:66:4A:60:02:79:CE:09:C6
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       90
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/_j1uXO41xISijHPxZkpgAnnOCcY.roa
Signing time:             Tue 03 Dec 2024 17:52:24 +0000
ROA not before:           Tue 03 Dec 2024 17:52:24 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     139358
IP address blocks:        61.200.87.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Dec  3 17:52:24 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=FE3D6E5CEE35C484A28C73F1664A600279CE09C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:64:bd:8d:2f:0f:50:2f:a3:fa:3d:9a:fb:7d:
                    b3:1f:6c:3e:15:7f:68:5b:c8:f7:c9:32:af:50:07:
                    71:39:8f:54:f5:47:06:9c:c2:8e:bd:69:bc:76:9d:
                    d1:09:e1:79:81:53:51:de:85:ad:40:ba:33:9c:b4:
                    48:6c:4c:25:00:82:fc:84:76:6c:8e:7f:12:33:4f:
                    5f:b8:86:30:da:9f:42:a6:a0:a4:68:24:91:fd:bb:
                    e3:04:60:bd:79:97:2d:39:e7:15:41:0c:fb:08:cc:
                    c3:4d:8c:3f:bb:93:a1:a3:b1:9f:ea:ee:86:39:cc:
                    6e:fc:67:23:aa:d0:d3:14:0c:f2:04:2e:c6:ad:71:
                    12:73:ef:2a:e5:19:60:65:c7:a8:2a:7d:c5:bc:02:
                    a7:05:43:27:a4:9b:a4:16:37:ad:2e:ec:fb:96:9f:
                    86:23:94:cd:32:e0:18:86:d9:24:46:b2:9a:5b:3b:
                    5d:15:89:80:97:cd:1d:b4:63:06:61:9a:13:d5:7f:
                    38:d4:b3:bc:8a:79:2e:0a:4a:b1:67:51:a8:7d:24:
                    98:d5:f6:4b:c2:bb:28:18:90:88:89:50:ad:2d:ce:
                    88:9a:bb:62:ba:91:78:b5:0f:cc:58:0f:3e:4d:65:
                    92:14:7f:8d:a3:45:59:06:ec:a1:bf:11:d3:ec:3d:
                    66:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3D:6E:5C:EE:35:C4:84:A2:8C:73:F1:66:4A:60:02:79:CE:09:C6
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/_j1uXO41xISijHPxZkpgAnnOCcY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.200.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:99:cc:eb:ba:f8:0d:1a:09:1e:a5:1a:50:b3:b2:e0:2c:b7:
         26:f3:a8:4e:07:a6:2a:d2:52:42:c0:de:33:ab:ed:f9:40:19:
         30:19:7f:74:fc:8f:cf:4d:94:47:6d:a8:ae:86:15:87:a6:ad:
         4a:cd:3d:4b:f4:4c:d3:d8:48:98:91:30:99:79:0f:ee:d1:78:
         98:b3:49:e7:33:6d:3f:f3:7a:ec:1a:0b:15:03:3e:2c:84:96:
         d6:77:f3:f3:ff:b1:83:b7:5e:29:31:bf:ce:9e:75:28:f2:38:
         5d:0b:5e:aa:15:7f:93:52:d6:01:3a:b8:56:e3:68:e8:51:73:
         f8:c0:24:76:c8:14:21:6b:0c:75:04:53:35:9c:90:3f:0f:3d:
         ec:c9:c3:ee:fe:d0:db:a2:b1:4f:16:0d:b1:46:7b:cf:78:66:
         d9:95:fe:0e:f5:01:2c:32:36:e8:3b:48:7f:79:29:00:3f:01:
         7d:e6:d5:08:e4:50:01:ee:db:75:2d:08:1e:2f:d9:a1:60:44:
         a4:ce:5d:57:92:e2:10:6a:ac:65:b6:15:da:64:76:7c:ba:45:
         eb:78:ef:ef:d3:7f:05:1a:ca:3c:f7:07:0d:49:52:1a:32:e7:
         0d:45:24:3e:44:12:49:87:84:08:11:7f:34:62:1d:c1:52:84:
         8c:cd:cd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:25 2025 by rpki-client