Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20230/R784EVFuisPky6lo3e8XHGp9eZY.roa
File:                     R784EVFuisPky6lo3e8XHGp9eZY.roa (raw, json)
Hash identifier:          dqEBHzGvpEeGepuSGrfFlFJePbhWs+Uo5FoXReL2hO8=
Subject key identifier:   47:BF:38:11:51:6E:8A:C3:E4:CB:A9:68:DD:EF:17:1C:6A:7D:79:96
Certificate issuer:       /CN=4A7B8DE417916899DEAE9D9244FF51C2873FE5D8
Certificate serial:       12
Authority key identifier: 4A:7B:8D:E4:17:91:68:99:DE:AE:9D:92:44:FF:51:C2:87:3F:E5:D8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SnuN5BeRaJnerp2SRP9Rwoc_5dg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20230/R784EVFuisPky6lo3e8XHGp9eZY.roa
Signing time:             Fri 07 Mar 2025 15:03:39 +0000
ROA not before:           Fri 07 Mar 2025 15:03:39 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     15404
IP address blocks:        103.246.73.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A7B8DE417916899DEAE9D9244FF51C2873FE5D8
        Validity
            Not Before: Mar  7 15:03:39 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=47BF3811516E8AC3E4CBA968DDEF171C6A7D7996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:3c:4d:14:19:75:c2:4f:86:e6:bb:35:1a:9e:
                    36:93:74:ae:96:84:e2:ee:82:82:2d:00:3e:c5:ae:
                    c0:ba:20:89:e9:52:67:3f:b9:52:b3:33:b0:0d:e2:
                    16:c8:75:fc:87:b1:e8:7b:ce:50:a7:80:94:81:21:
                    5a:3e:0a:7d:32:1c:e1:79:07:21:17:a3:34:36:50:
                    37:e0:33:5a:98:34:f1:8b:92:a8:7a:f6:14:56:3b:
                    e3:88:80:a3:09:8a:4a:c8:c2:9d:d8:c1:f9:dc:22:
                    b4:65:49:1a:c2:96:e4:88:62:ae:2a:99:7a:83:65:
                    88:4e:8b:47:33:64:09:af:35:42:64:ba:00:0f:6a:
                    0c:62:d3:ff:57:a3:1f:1c:a5:22:58:7d:b7:a4:2a:
                    2d:38:53:af:1c:2b:05:cd:8d:53:3d:e2:30:5d:3e:
                    eb:2a:42:e7:10:97:32:b6:ce:04:92:ca:cf:11:e7:
                    03:d0:89:91:e4:a3:05:5b:3f:94:63:65:10:0d:c1:
                    91:ce:92:f8:d4:96:fa:c7:c4:a2:12:c0:81:8c:da:
                    4c:a3:6c:cd:c5:aa:54:a8:77:65:b0:a3:af:e2:05:
                    27:3a:7b:f6:74:a3:1f:b7:50:c2:39:e5:86:93:e9:
                    65:41:40:9a:0a:25:20:9a:b6:52:6a:a8:1c:5b:c8:
                    ea:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:BF:38:11:51:6E:8A:C3:E4:CB:A9:68:DD:EF:17:1C:6A:7D:79:96
            X509v3 Authority Key Identifier:
                keyid:4A:7B:8D:E4:17:91:68:99:DE:AE:9D:92:44:FF:51:C2:87:3F:E5:D8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20230/SnuN5BeRaJnerp2SRP9Rwoc_5dg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SnuN5BeRaJnerp2SRP9Rwoc_5dg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20230/R784EVFuisPky6lo3e8XHGp9eZY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:79:49:2f:de:3e:1a:73:7b:61:07:37:30:15:6c:bc:cc:29:
         ec:ba:13:d0:89:26:ec:af:0f:b5:54:f3:fb:14:fd:8b:e2:0f:
         0a:01:a7:4d:23:cf:86:fc:c3:7c:78:27:33:e6:57:a2:9b:19:
         39:6d:1c:3a:26:83:c8:f3:05:c3:bb:51:26:83:8a:13:d3:92:
         a2:b9:04:29:f5:6e:42:c7:05:81:56:0d:bd:56:f8:71:76:e2:
         38:ce:0e:11:7d:50:2b:b7:be:35:32:a4:11:d4:c8:c6:2d:35:
         c0:37:61:fb:68:3b:f5:11:de:69:65:cc:ae:3f:a2:93:c9:fe:
         b0:ec:50:63:45:33:bc:a5:45:2b:b3:23:8f:ca:c1:40:d3:c0:
         c0:3c:a1:91:61:69:b5:49:01:20:a4:dd:44:d4:26:c9:36:76:
         b7:ed:95:cc:8a:94:c7:be:42:3b:de:9c:96:20:5e:13:1a:ba:
         db:ea:46:8a:8d:35:59:3d:93:48:e9:c5:57:a1:ba:29:45:4a:
         c0:3f:1b:3f:f0:c1:b4:c2:64:86:fd:cd:58:7d:de:b8:6b:b6:
         80:df:ce:28:bb:39:90:c5:8c:37:a1:78:58:73:31:c8:f5:3e:
         bc:10:2a:f0:3f:75:9b:be:a3:99:cc:fd:18:3c:22:4f:fb:97:
         33:a9:f5:50
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:37 2025 by rpki-client