Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20213/xSfpPAV2SzMVSf4AMqdFRKcZXNM.roa
File:                     xSfpPAV2SzMVSf4AMqdFRKcZXNM.roa (raw, json)
Hash identifier:          0vg0J2o1UQE4kbXaq+log/oQvfz5VaUCwW151K71Ieo=
Subject key identifier:   C5:27:E9:3C:05:76:4B:33:15:49:FE:00:32:A7:45:44:A7:19:5C:D3
Certificate issuer:       /CN=589062195FD91BE2C085C32E048E7BDC87ABE3D8
Certificate serial:       10
Authority key identifier: 58:90:62:19:5F:D9:1B:E2:C0:85:C3:2E:04:8E:7B:DC:87:AB:E3:D8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WJBiGV_ZG-LAhcMuBI573Ier49g.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20213/xSfpPAV2SzMVSf4AMqdFRKcZXNM.roa
Signing time:             Sun 30 Jun 2024 01:32:58 +0000
ROA not before:           Sun 30 Jun 2024 01:32:58 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     63799
IP address blocks:        103.108.46.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=589062195FD91BE2C085C32E048E7BDC87ABE3D8
        Validity
            Not Before: Jun 30 01:32:58 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=C527E93C05764B331549FE0032A74544A7195CD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a1:8b:ba:ce:b5:cf:94:26:b7:63:c0:6d:af:
                    cc:77:44:1e:7e:99:ea:67:84:09:6b:16:3f:8a:fa:
                    44:90:33:bb:97:e4:9a:54:a8:d3:3a:73:94:34:fb:
                    cd:d7:90:5f:fd:51:84:8f:ad:c8:8a:d1:05:07:33:
                    37:0e:a3:a8:b1:ff:16:ca:0c:6a:b8:1b:91:60:6a:
                    df:ee:35:58:4e:43:c8:94:2b:c6:8b:86:b6:4c:67:
                    cf:8f:cd:b7:c9:76:bb:48:52:e6:bb:80:c5:1e:db:
                    cd:fb:75:69:13:e5:05:39:bd:14:52:8f:e5:f1:63:
                    28:76:c1:c1:1e:79:8b:cf:0e:51:1a:00:34:50:9d:
                    f3:56:52:a9:98:a3:a7:b5:a5:fe:65:0b:6d:6f:2e:
                    d8:1c:45:e7:32:08:1f:f3:c1:72:f1:10:be:35:a2:
                    c8:ab:fa:fc:8e:92:58:e8:b0:90:c2:91:b3:e2:d5:
                    e6:58:4e:49:46:08:a6:03:d2:cd:05:84:3b:fc:08:
                    7c:a8:dc:5f:fb:46:4b:17:ca:2f:05:66:0f:e6:d4:
                    0f:3c:c9:3e:dc:dc:44:fe:80:70:e6:2f:84:0d:43:
                    c9:09:b0:6e:9c:79:01:b9:cf:8e:5c:a7:e3:75:d2:
                    dd:dd:bb:a4:b2:f3:eb:48:2d:6a:bc:32:38:c8:38:
                    7f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:27:E9:3C:05:76:4B:33:15:49:FE:00:32:A7:45:44:A7:19:5C:D3
            X509v3 Authority Key Identifier:
                keyid:58:90:62:19:5F:D9:1B:E2:C0:85:C3:2E:04:8E:7B:DC:87:AB:E3:D8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20213/WJBiGV_ZG-LAhcMuBI573Ier49g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WJBiGV_ZG-LAhcMuBI573Ier49g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20213/xSfpPAV2SzMVSf4AMqdFRKcZXNM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:93:6f:3f:98:51:4e:60:ec:1f:8b:76:0e:ce:4d:9b:bb:2c:
         cb:d2:f4:97:3b:ed:ed:7e:74:f6:ad:0b:2f:59:5c:8c:fb:a9:
         b4:ce:40:d9:0f:49:16:34:94:b1:e9:22:a8:0e:eb:93:aa:8e:
         a7:bd:90:4d:2f:51:8b:de:df:1d:2a:51:ed:3f:8d:bc:db:3d:
         f9:97:81:cd:f3:04:f3:72:90:05:54:e6:81:f0:67:66:d9:96:
         a1:65:6e:5c:34:a0:8d:31:f2:57:02:d4:fd:a1:91:56:3a:0c:
         e6:41:ba:74:51:2b:fc:06:45:de:e6:13:f0:32:f4:df:2e:ca:
         57:70:a1:61:d2:88:51:52:f9:6d:49:aa:88:2e:6a:c8:ed:76:
         b0:93:f9:ea:b6:a4:8a:46:bd:87:96:9a:0d:22:1b:34:15:6f:
         f8:6f:c4:56:21:f5:a1:82:49:ae:08:3c:85:ed:12:a5:81:5b:
         7b:32:5d:1d:47:7e:6e:b8:f7:08:b1:b8:81:3b:61:38:31:b5:
         0e:12:61:fe:a0:1c:f7:99:ee:86:c2:a3:fc:c8:0f:26:74:69:
         7a:a6:ae:cd:a1:eb:c9:90:5c:e5:33:2b:96:3f:b1:ef:00:5f:
         11:f7:46:e1:6d:91:96:50:de:f1:55:7e:b6:18:96:3c:6e:63:
         39:58:73:09
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:54:10 2025 by rpki-client