Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20217/n_R6b4HCX_zCEgZilKIOIgmFf5o.roa
File:                     n_R6b4HCX_zCEgZilKIOIgmFf5o.roa (raw, json)
Hash identifier:          nrS79tWPlmrdpccEshvZ/HoDSipMUwX7a1txS7gH11I=
Subject key identifier:   9F:F4:7A:6F:81:C2:5F:FC:C2:12:06:62:94:A2:0E:22:09:85:7F:9A
Certificate issuer:       /CN=446C65B7AF917AFFA74F6B09E437AC0F3653741D
Certificate serial:       1D
Authority key identifier: 44:6C:65:B7:AF:91:7A:FF:A7:4F:6B:09:E4:37:AC:0F:36:53:74:1D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RGxlt6-Rev-nT2sJ5DesDzZTdB0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/n_R6b4HCX_zCEgZilKIOIgmFf5o.roa
Signing time:             Sat 01 Mar 2025 01:29:15 +0000
ROA not before:           Sat 01 Mar 2025 01:29:15 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     59098
IP address blocks:        103.149.4.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=446C65B7AF917AFFA74F6B09E437AC0F3653741D
        Validity
            Not Before: Mar  1 01:29:15 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=9FF47A6F81C25FFCC212066294A20E2209857F9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0e:e1:3b:ab:61:5b:63:40:6e:af:f3:94:4a:
                    7f:f0:d4:0c:17:fa:a1:67:60:02:97:fd:87:c0:8c:
                    23:90:00:84:aa:cc:be:94:af:95:35:a9:2f:22:e0:
                    38:a5:1a:8c:77:6b:f8:3a:08:49:a0:b6:19:29:19:
                    56:6a:96:6e:3a:b1:79:61:ac:13:8e:cd:84:4b:4d:
                    ef:05:3b:2b:e1:69:da:77:ad:66:c1:8d:1e:48:2c:
                    eb:8b:97:f2:bf:31:ce:a5:4f:81:f1:10:e8:c7:5f:
                    05:83:85:3d:fc:a7:84:d8:e1:6c:bb:d5:60:5d:08:
                    00:2b:8e:8b:01:3e:9c:84:6b:f0:9d:9e:e1:30:48:
                    7a:76:69:23:94:aa:56:15:c8:4d:6f:35:23:82:ed:
                    a4:b6:7b:10:bc:d8:12:3d:54:66:1a:13:2d:bd:20:
                    38:b3:f5:a3:82:12:85:6c:ec:f3:32:ec:21:c5:30:
                    c2:dc:ac:0d:27:98:b6:44:67:67:7c:19:0f:52:b1:
                    53:89:42:cf:c6:f9:5f:f2:74:0b:c8:19:ee:6f:8e:
                    ea:46:4a:2e:04:25:8e:2a:8a:a5:b2:a4:c4:a0:e2:
                    ad:4a:cf:72:c4:64:7f:50:92:22:d8:86:78:f2:56:
                    1c:b5:72:3b:94:c0:d8:be:d5:43:f2:e9:3f:0b:79:
                    da:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F4:7A:6F:81:C2:5F:FC:C2:12:06:62:94:A2:0E:22:09:85:7F:9A
            X509v3 Authority Key Identifier:
                keyid:44:6C:65:B7:AF:91:7A:FF:A7:4F:6B:09:E4:37:AC:0F:36:53:74:1D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/RGxlt6-Rev-nT2sJ5DesDzZTdB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RGxlt6-Rev-nT2sJ5DesDzZTdB0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/n_R6b4HCX_zCEgZilKIOIgmFf5o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:62:94:67:8d:18:5f:b3:11:f4:bb:0d:17:f0:ac:0d:fc:b0:
         be:41:12:08:58:6e:b2:a0:1f:be:f9:eb:14:f4:b9:73:36:bd:
         30:d0:d9:73:a8:3c:0c:89:e6:1c:2f:a7:41:d9:c7:ae:4f:81:
         a7:4a:38:b5:9e:07:9f:3a:6a:9c:e1:b9:7d:01:d6:f5:fa:61:
         2c:5c:e7:0e:7b:ff:49:bf:1a:aa:f1:f3:8d:a5:43:7d:7b:0f:
         ee:05:ca:59:b7:52:84:78:67:ee:0a:cc:4e:6b:e4:7f:07:d4:
         49:9a:be:5f:a1:a8:d3:6f:16:f1:d7:5d:a6:0e:30:94:63:8b:
         72:97:ec:f0:eb:e8:0b:83:ef:b2:eb:4e:99:f0:46:c8:4d:0d:
         ec:58:1b:37:07:85:73:6d:99:ba:f9:d2:f4:81:88:ff:c8:76:
         7f:f8:34:76:e5:0e:9a:6e:0a:91:82:07:9d:97:df:3e:f9:e1:
         d9:e0:21:eb:c9:e4:2f:4d:96:c2:03:11:eb:79:ad:21:23:a1:
         ce:ec:45:87:d2:bf:0c:9b:e6:f7:c4:a9:14:32:d0:18:df:df:
         de:7d:d1:aa:e2:6e:2b:67:a9:a0:34:cb:59:23:1e:a5:1f:29:
         bc:07:8c:9c:16:e2:d0:ca:a8:ee:2c:4a:0a:98:34:51:b9:47:
         88:ec:a6:53
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:32:31 2025 by rpki-client