Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20199/LUSUrcqqOkY5Yr1a4qVLiPcWjEM.roa
File:                     LUSUrcqqOkY5Yr1a4qVLiPcWjEM.roa (raw, json)
Hash identifier:          XRkyGpOHJUA5ShPrOxFFKDXmZrUhdl7h+5YR/70BD4k=
Subject key identifier:   2D:44:94:AD:CA:AA:3A:46:39:62:BD:5A:E2:A5:4B:88:F7:16:8C:43
Certificate issuer:       /CN=8D57B3B8DB318598B66F4DD6618CB19A08565FFD
Certificate serial:       27
Authority key identifier: 8D:57:B3:B8:DB:31:85:98:B6:6F:4D:D6:61:8C:B1:9A:08:56:5F:FD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVezuNsxhZi2b03WYYyxmghWX_0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/LUSUrcqqOkY5Yr1a4qVLiPcWjEM.roa
Signing time:             Sun 01 Dec 2024 16:17:38 +0000
ROA not before:           Sun 01 Dec 2024 16:17:38 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     45691
IP address blocks:        103.37.88.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D57B3B8DB318598B66F4DD6618CB19A08565FFD
        Validity
            Not Before: Dec  1 16:17:38 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=2D4494ADCAAA3A463962BD5AE2A54B88F7168C43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:49:2a:51:20:07:79:1b:e0:1e:17:4b:d9:db:
                    91:69:0c:e1:c1:0a:13:4c:18:24:51:48:20:86:1f:
                    0f:7c:e1:02:14:03:f2:53:48:80:18:67:4d:be:db:
                    5a:8d:07:79:1e:f1:4e:74:37:42:7c:ab:8a:92:1d:
                    4c:2b:29:ad:1f:dd:87:c5:7d:92:46:e0:23:c6:eb:
                    a5:b6:f6:0a:a4:ab:2a:0d:3e:6c:ec:e5:1f:ab:77:
                    3d:7e:d9:90:d9:44:b3:17:be:20:19:ef:a5:36:95:
                    1c:11:89:c5:40:a6:7b:2c:82:86:45:4a:d5:8c:15:
                    45:0a:2c:f5:9c:6c:90:27:c7:b4:9f:a6:6b:24:44:
                    84:94:04:eb:8e:c1:16:42:62:97:6a:65:47:42:44:
                    07:eb:e4:d1:3f:a6:d9:52:17:77:04:87:a2:1c:d9:
                    c7:3e:3e:7e:d0:d0:b4:4a:07:48:f2:82:8f:d4:d0:
                    00:e8:9c:aa:4e:12:1a:59:be:6b:6a:17:18:7f:4a:
                    50:30:da:5d:ef:a2:45:12:54:e3:1f:25:59:55:18:
                    87:93:a7:96:eb:3d:85:b0:82:de:17:e3:28:14:04:
                    21:dc:40:74:61:f6:bd:ce:f9:76:c8:96:14:f7:18:
                    a8:eb:30:57:c2:34:b0:9c:69:a7:f7:c4:57:85:d7:
                    9e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:44:94:AD:CA:AA:3A:46:39:62:BD:5A:E2:A5:4B:88:F7:16:8C:43
            X509v3 Authority Key Identifier:
                keyid:8D:57:B3:B8:DB:31:85:98:B6:6F:4D:D6:61:8C:B1:9A:08:56:5F:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVezuNsxhZi2b03WYYyxmghWX_0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/LUSUrcqqOkY5Yr1a4qVLiPcWjEM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:c9:68:36:90:ab:1b:8e:50:af:de:f3:47:93:d1:11:f7:98:
         e6:94:41:25:8a:7f:14:24:a4:54:8b:1d:c9:53:fc:da:99:b4:
         f8:a1:93:d6:b7:7e:54:17:54:a7:9e:6f:88:9e:fb:4a:e0:da:
         6b:a4:3d:f1:c3:dc:56:5b:9e:ce:96:23:1c:b4:f4:f4:df:1d:
         a9:f3:b6:01:52:f6:e5:59:3d:e8:e0:08:22:32:34:b6:57:88:
         c0:7c:a5:24:a3:79:3c:61:09:23:2f:b0:2b:71:0f:9b:93:86:
         87:0c:cc:c3:dc:77:d7:69:8f:12:8a:61:5b:90:d1:6c:0e:2a:
         12:a0:24:31:64:62:ae:59:62:fa:79:2c:b2:e5:30:ca:7b:2c:
         e4:a5:34:4e:96:72:94:2e:41:1c:d0:90:d5:0a:56:61:ee:32:
         61:16:66:d5:62:9d:93:f1:82:af:d0:b6:90:ce:1f:97:cf:d3:
         6b:f4:c6:9a:cd:14:6b:83:ed:70:a2:99:cf:f8:25:ed:a2:e8:
         a5:d5:f6:41:a8:59:77:f6:a7:51:6a:2b:8a:c4:a4:cc:3f:93:
         b3:3b:8f:50:a6:28:51:a7:79:6c:b3:f4:1d:53:a9:6e:65:44:
         12:b5:af:9d:4c:79:bd:ce:c6:bc:8f:c6:c1:25:7f:8b:f6:ce:
         e9:ae:1f:ca
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:10:54 2025 by rpki-client