Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/kqiAokXIWhw9FeyLQKpn-k_C1bc.roa
File:                     kqiAokXIWhw9FeyLQKpn-k_C1bc.roa (raw, json)
Hash identifier:          lC788Bp+P/8wbfEfAXNgVbM5v/57DtWRWHwD7tt7Jyo=
Subject key identifier:   92:A8:80:A2:45:C8:5A:1C:3D:15:EC:8B:40:AA:67:FA:4F:C2:D5:B7
Certificate issuer:       /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial:       98
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/kqiAokXIWhw9FeyLQKpn-k_C1bc.roa
Signing time:             Thu 31 Oct 2024 01:29:37 +0000
ROA not before:           Thu 31 Oct 2024 01:29:37 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     7521
IP address blocks:        113.192.20.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
        Validity
            Not Before: Oct 31 01:29:37 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=92A880A245C85A1C3D15EC8B40AA67FA4FC2D5B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8d:79:7f:6f:8a:1c:fd:7e:ba:f5:fc:14:79:
                    7b:7d:38:a2:61:a8:06:2c:a9:eb:ed:f0:a9:9b:68:
                    03:30:8d:87:f8:e1:48:e9:5d:4d:03:bc:a2:cb:38:
                    c8:a1:85:c3:a0:dd:99:26:18:6b:d4:01:82:f1:5d:
                    bf:92:cf:12:03:4b:da:8e:e0:90:9d:55:bd:0e:e9:
                    83:52:6d:56:22:43:38:6c:76:d7:db:a3:62:ea:8b:
                    3b:ad:91:76:b2:bb:79:b5:e6:af:43:57:d1:29:10:
                    6d:73:57:dc:c6:57:f5:53:ca:b2:1b:3f:82:a2:d0:
                    78:d1:6f:6a:c1:f7:73:1a:5c:7e:30:0a:b2:ee:0b:
                    ad:f7:d7:42:ff:b3:4e:ef:f8:28:20:4c:13:cf:d5:
                    b2:b3:3c:0b:71:33:d8:53:2e:df:65:4c:ce:b4:25:
                    5e:75:4e:d4:4f:52:0e:2d:bc:cf:c0:3a:47:99:73:
                    64:fb:b7:ff:d2:75:42:4f:07:d7:dd:4f:05:f9:2e:
                    21:8d:d4:8c:a4:89:13:9f:04:68:b8:fd:dd:f0:87:
                    b6:4d:0c:66:3a:5c:4f:05:94:19:6d:51:ae:49:e3:
                    80:57:ee:10:06:60:cb:41:1a:bb:b4:a4:e0:95:9d:
                    e1:e8:ad:d0:87:04:71:1f:8a:0d:99:7c:fe:60:63:
                    76:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A8:80:A2:45:C8:5A:1C:3D:15:EC:8B:40:AA:67:FA:4F:C2:D5:B7
            X509v3 Authority Key Identifier:
                keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/kqiAokXIWhw9FeyLQKpn-k_C1bc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.192.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:e4:5a:3e:ce:a5:06:b9:d2:82:0b:83:07:02:6a:2f:f1:40:
         49:0d:f5:e4:5f:5a:7d:e7:67:af:ec:a1:63:e6:72:a1:2b:7e:
         79:12:db:ab:97:63:7f:22:ee:ad:9f:01:cf:d8:48:78:f2:03:
         51:2d:e6:1a:0f:ee:f6:34:31:e4:27:a8:72:be:af:b4:1b:a2:
         2e:f8:8f:4b:0b:7b:2f:32:95:26:d4:3e:a7:78:f4:34:04:d8:
         23:8f:1f:6a:26:54:24:82:56:8a:d3:fd:5a:40:ec:12:f4:9d:
         fc:57:07:ec:28:4d:df:e4:98:73:52:27:f3:af:1d:32:c8:a2:
         3c:92:89:47:8b:dc:58:1e:06:0d:fe:4d:a0:0f:03:e5:8d:f6:
         94:9a:20:81:ec:71:f2:b2:73:98:05:cd:bb:38:16:4e:08:2d:
         76:ac:db:63:05:a0:6d:6d:65:e7:2b:1c:f8:fd:06:7a:ec:eb:
         19:75:41:d9:82:d8:ba:34:8d:7e:d2:91:fe:b2:85:33:1c:68:
         3e:63:9e:b8:bb:05:d7:9b:b4:a1:22:cb:6c:8d:3b:80:4a:60:
         4b:06:eb:d0:b8:69:25:3e:51:bc:4d:54:47:61:cf:c5:b3:97:
         db:2b:56:b8:f6:74:7c:bc:8a:ca:d1:32:99:7c:af:a5:e2:a7:
         48:d4:86:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:55 2025 by rpki-client