Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/li5jOitMtAXR3gcvu1Zk_Bt7jy4.roa
File:                     li5jOitMtAXR3gcvu1Zk_Bt7jy4.roa (raw, json)
Hash identifier:          V44dxcScYTkgX4SY7t6PZeKTOnnsvWWOJJmR0c8+MFQ=
Subject key identifier:   96:2E:63:3A:2B:4C:B4:05:D1:DE:07:2F:BB:56:64:FC:1B:7B:8F:2E
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       9C
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/li5jOitMtAXR3gcvu1Zk_Bt7jy4.roa
Signing time:             Wed 04 Dec 2024 19:23:02 +0000
ROA not before:           Wed 04 Dec 2024 19:23:02 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     394957
IP address blocks:        61.213.151.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Dec  4 19:23:02 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=962E633A2B4CB405D1DE072FBB5664FC1B7B8F2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3d:b7:e9:53:74:a5:db:a5:8e:9f:43:8b:a4:
                    e9:00:c3:34:85:80:15:39:8a:1f:ed:1b:b0:44:70:
                    9b:21:55:65:b3:0f:c8:49:11:2e:1f:08:79:69:f3:
                    5e:1d:35:1d:56:35:d7:c6:6c:1d:55:9e:fd:b2:bc:
                    00:73:87:56:b1:c3:d1:a2:42:df:3e:33:66:d1:8e:
                    24:fc:7a:7a:42:68:9b:79:fc:e6:5d:bd:5b:fc:33:
                    07:83:17:1a:6a:a6:fe:50:eb:ef:10:bd:f9:c8:ec:
                    39:67:e6:cd:40:04:2c:8f:bd:f6:7e:80:18:8f:12:
                    3c:57:b5:17:cf:b8:bf:3d:3f:74:27:4a:d0:f1:37:
                    78:70:c5:4c:ab:7e:06:e1:9d:66:35:22:57:2d:c1:
                    0e:6e:fb:f1:37:91:51:a1:8a:8b:1f:f4:10:30:91:
                    46:53:2e:b2:d9:e6:d4:82:b7:c0:50:0d:5a:c5:09:
                    89:2e:26:72:6e:80:9c:16:30:92:01:86:2c:fb:62:
                    51:a0:d2:19:b5:7a:da:5b:66:c5:e9:ae:0d:de:3f:
                    07:7e:08:2a:a8:9a:b7:f7:54:35:ff:6b:5d:64:3b:
                    86:cb:2f:25:5c:76:a0:51:14:b9:f2:11:b7:19:6d:
                    2e:df:1f:ca:31:9b:c9:8a:52:e5:be:69:a7:17:35:
                    8c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:2E:63:3A:2B:4C:B4:05:D1:DE:07:2F:BB:56:64:FC:1B:7B:8F:2E
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/li5jOitMtAXR3gcvu1Zk_Bt7jy4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.213.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:d8:4c:46:f3:09:2d:9f:6e:06:87:a5:a6:0a:42:10:d4:c9:
         78:a3:08:3e:51:87:49:7d:b2:48:b1:93:cd:aa:56:72:f1:a9:
         3a:6e:40:e7:b6:77:f9:56:aa:cd:c1:88:9d:b4:90:ca:6d:17:
         db:b8:08:18:ee:11:d0:e0:c1:84:be:18:6d:b7:ec:0b:8d:0e:
         89:d3:a0:c8:32:a3:97:62:2f:4f:ce:41:f2:a3:d1:d7:27:9e:
         04:56:78:55:d0:fc:42:52:d5:7c:6a:a2:ea:8b:a1:24:d1:3a:
         7a:08:d6:d2:b0:28:93:23:9e:5d:99:6d:01:30:b3:7f:d8:69:
         1f:10:de:9b:52:27:1c:8f:b5:39:89:60:2f:fa:ef:b5:97:e1:
         62:6d:11:35:dd:2f:05:3e:bc:8a:97:81:6a:59:a5:87:b7:b2:
         ec:ee:6a:f7:cd:44:ed:90:9b:21:ad:3f:9b:5c:8d:8e:4d:27:
         78:9c:03:46:5f:59:69:fb:30:b1:0c:94:32:9d:49:3f:38:e4:
         14:c5:b0:b1:05:6c:ac:c9:b5:3c:93:53:6c:bd:65:5a:48:a0:
         45:1e:e5:74:6c:45:be:2c:83:81:76:c5:62:77:18:71:6c:ee:
         42:a4:7f:00:9e:a1:13:bf:2b:8a:4d:d1:51:0e:c8:09:57:6a:
         cc:ba:a2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:45:43 2025 by rpki-client