Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/djrgJ9NeKCIXSSFNUfgQxuGQwA8.roa
File:                     djrgJ9NeKCIXSSFNUfgQxuGQwA8.roa (raw, json)
Hash identifier:          7Z4N9FbcNjij8dg8cn16oq0s0XKPeKptYAPdjaijk3w=
Subject key identifier:   76:3A:E0:27:D3:5E:28:22:17:49:21:4D:51:F8:10:C6:E1:90:C0:0F
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       8F
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/djrgJ9NeKCIXSSFNUfgQxuGQwA8.roa
Signing time:             Tue 03 Dec 2024 17:52:24 +0000
ROA not before:           Tue 03 Dec 2024 17:52:24 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     3949
IP address blocks:        61.200.83.192/26 maxlen: 26
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Dec  3 17:52:24 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=763AE027D35E28221749214D51F810C6E190C00F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8a:55:c1:1e:dc:76:c8:23:47:db:e7:0b:5f:
                    5a:21:21:c3:1f:f2:8d:51:ad:7a:a9:23:73:7d:0b:
                    be:3d:5f:fc:ad:11:22:1d:6b:d9:fc:21:57:50:51:
                    28:24:68:bd:d8:68:1e:d9:13:7f:2e:c3:fb:a4:5c:
                    38:8c:a3:93:9a:6b:17:ff:32:51:20:db:0c:24:04:
                    1d:72:7d:fc:04:60:27:fe:99:d7:00:38:94:ad:b2:
                    d0:7f:63:b6:47:c6:5e:24:8a:29:b3:1f:74:0a:c5:
                    8d:7d:32:b3:ff:63:78:86:8e:52:4e:26:a1:ab:8b:
                    8b:47:de:92:fd:eb:2e:68:5c:e5:ad:85:c9:80:90:
                    50:28:e8:8f:f1:b6:db:c8:ec:9f:aa:d9:39:61:8a:
                    52:3b:b8:c3:cb:82:a8:79:76:b7:d1:7d:40:8b:90:
                    6f:d4:32:b5:76:63:3d:34:bc:57:a6:8c:77:bb:79:
                    30:79:8d:66:bc:0b:5f:ac:ed:66:9b:0c:fa:ad:f4:
                    a7:f1:fa:e2:c5:95:5e:ae:84:07:bd:cb:bf:18:09:
                    90:73:9f:03:4c:55:87:a7:15:6e:f5:f9:0a:d0:55:
                    4a:f0:68:93:d0:19:a7:34:41:53:ec:05:35:69:a4:
                    cf:54:63:45:84:bb:59:67:1c:48:d9:54:de:6f:54:
                    a2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3A:E0:27:D3:5E:28:22:17:49:21:4D:51:F8:10:C6:E1:90:C0:0F
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/djrgJ9NeKCIXSSFNUfgQxuGQwA8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.200.83.192/26

    Signature Algorithm: sha256WithRSAEncryption
         35:8a:a9:0b:f0:3a:99:49:f7:e8:82:6c:6a:57:fc:99:4c:9e:
         df:b4:59:93:64:94:e3:7c:34:96:fc:35:fa:55:f8:e8:00:1a:
         b0:a2:09:40:a9:14:43:36:c1:32:87:8e:dc:94:96:15:38:32:
         67:3c:3e:97:f0:fe:3e:68:07:f4:48:61:c3:4a:71:36:88:83:
         79:49:7a:83:be:27:45:ac:30:90:22:dd:d7:7b:d8:4c:97:7a:
         9a:a7:9a:3a:12:91:74:ab:35:f2:e0:92:34:96:58:59:77:20:
         fb:a3:08:8a:24:f4:ba:06:de:70:91:d7:5c:a0:09:53:02:54:
         57:8d:79:ba:7d:a9:a7:53:de:3f:3f:4b:ff:45:63:10:7b:64:
         c6:d0:3d:a1:4e:bc:4d:27:63:d9:74:f6:3f:ae:de:bf:a4:1d:
         d0:29:ba:f6:48:db:3e:9f:c2:f9:9e:be:a1:8a:a8:d3:e5:ef:
         b3:f5:68:38:5e:b5:61:0e:9b:92:b4:15:77:1f:90:07:fa:7e:
         bd:4a:ea:d2:69:ae:c6:f3:1d:1d:61:21:7a:a8:31:dd:25:2f:
         67:fc:d8:15:71:d4:a5:fb:bd:22:e7:e8:bd:14:59:54:f8:82:
         9e:f3:06:d2:ce:54:ff:40:e1:1a:b4:fb:da:69:a8:8d:63:01:
         7f:5b:78:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:51:55 2025 by rpki-client