Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20217/_Rx8iobyIfuMU5JELH42rgZncpQ.roa
File:                     _Rx8iobyIfuMU5JELH42rgZncpQ.roa (raw, json)
Hash identifier:          zZ+wp/3ld2mBbvb9b6eCdqlURWJ1EIhoy3iEZjjCQYs=
Subject key identifier:   FD:1C:7C:8A:86:F2:21:FB:8C:53:92:44:2C:7E:36:AE:06:67:72:94
Certificate issuer:       /CN=446C65B7AF917AFFA74F6B09E437AC0F3653741D
Certificate serial:       1C
Authority key identifier: 44:6C:65:B7:AF:91:7A:FF:A7:4F:6B:09:E4:37:AC:0F:36:53:74:1D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RGxlt6-Rev-nT2sJ5DesDzZTdB0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/_Rx8iobyIfuMU5JELH42rgZncpQ.roa
Signing time:             Sat 01 Mar 2025 01:29:15 +0000
ROA not before:           Sat 01 Mar 2025 01:29:15 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     150362
IP address blocks:        103.149.4.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=446C65B7AF917AFFA74F6B09E437AC0F3653741D
        Validity
            Not Before: Mar  1 01:29:15 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=FD1C7C8A86F221FB8C5392442C7E36AE06677294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:83:f9:6e:c9:f1:17:36:67:3b:d6:77:b5:f3:
                    6d:88:cf:29:84:a5:8e:97:5a:a5:60:91:6b:c4:1a:
                    68:cd:c6:4d:cc:41:c8:c0:cb:33:8b:0f:7c:c8:43:
                    2e:08:f7:08:a4:8b:4f:c2:11:e3:2d:ed:af:d6:9e:
                    55:05:77:6c:92:37:62:01:fd:4c:01:9e:fa:74:7c:
                    48:4f:a3:91:1b:c5:05:ad:c8:9d:1c:93:fd:ec:c9:
                    2c:2f:c6:e2:5a:63:76:25:97:f6:3b:62:aa:30:07:
                    be:5c:56:8b:97:fe:a9:76:d6:da:fb:87:c7:4c:08:
                    46:aa:f5:e6:3b:3e:d9:1b:0b:62:83:3d:0a:11:d4:
                    42:41:72:b9:bc:55:73:c1:71:c5:51:a3:da:ce:23:
                    d7:f9:74:92:fd:04:ee:10:dd:08:bc:80:0d:6a:50:
                    7e:4e:cf:55:57:29:12:02:d4:86:f1:7c:b3:ec:32:
                    ef:9e:d9:83:12:96:ea:f0:e0:00:a0:73:bd:bc:52:
                    b2:e0:29:22:90:50:d9:fe:f5:41:fd:9f:eb:89:e9:
                    53:10:ca:d8:8a:22:ee:0b:4c:ce:ea:5a:ab:dc:69:
                    93:9d:72:6d:3a:c7:bf:e9:d7:80:ef:11:9e:aa:1e:
                    ac:fb:fe:4e:cf:43:b2:38:b7:d3:65:7d:f3:32:fd:
                    86:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:1C:7C:8A:86:F2:21:FB:8C:53:92:44:2C:7E:36:AE:06:67:72:94
            X509v3 Authority Key Identifier:
                keyid:44:6C:65:B7:AF:91:7A:FF:A7:4F:6B:09:E4:37:AC:0F:36:53:74:1D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/RGxlt6-Rev-nT2sJ5DesDzZTdB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RGxlt6-Rev-nT2sJ5DesDzZTdB0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/_Rx8iobyIfuMU5JELH42rgZncpQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:9d:2e:59:58:ae:d8:ef:92:82:3f:85:df:0f:73:00:21:ec:
         b0:23:41:09:ed:ba:f6:ed:b0:40:57:2d:cc:4e:57:5a:e0:1f:
         51:d9:fd:9a:2e:1c:f5:ad:9d:2a:9c:46:c7:37:5e:8e:0a:67:
         51:0e:8d:29:40:3c:62:d5:2e:07:a2:13:49:13:ae:a4:47:70:
         9e:12:4f:ab:d9:fc:d8:b3:38:65:26:86:ca:0f:86:0e:bb:c3:
         32:b5:d2:86:74:ef:e0:19:91:c9:5f:e7:41:6f:79:60:80:99:
         ae:9f:0d:61:83:a0:77:59:03:31:34:da:3d:80:05:72:b9:bb:
         87:4b:70:56:ee:94:1b:a7:d0:bd:de:c8:57:ed:1e:13:b0:59:
         47:5a:99:f4:49:83:e8:7e:46:62:c1:a9:d9:1e:51:3b:b6:03:
         44:a9:4b:fc:20:b9:4b:80:5d:e5:03:93:d1:0f:fe:a7:dc:ae:
         47:a4:e1:a2:fd:be:f3:3b:04:5c:99:fd:39:09:0d:41:d3:c4:
         d9:5b:12:70:71:bf:19:f1:81:ef:a8:c8:16:e0:19:d1:db:d5:
         61:9e:27:95:9d:f6:62:e0:35:68:75:2a:ca:23:b2:87:82:87:
         02:73:9d:e9:57:81:00:33:cb:b1:d5:42:4f:64:36:a9:74:70:
         77:1a:fc:ad
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:16 2025 by rpki-client