Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21116/QRhv6NymfUavF8tkpXX_Ya6Q0dE.roa
File:                     QRhv6NymfUavF8tkpXX_Ya6Q0dE.roa (raw, json)
Hash identifier:          hq61m2XF/GpIUCBMm5+ipQbJDu4JP7mLH+wLVB17B20=
Subject key identifier:   41:18:6F:E8:DC:A6:7D:46:AF:17:CB:64:A5:75:FF:61:AE:90:D1:D1
Certificate issuer:       /CN=85FB862022BBE5CC40462FBFD8B6BB81135D65FD
Certificate serial:       39
Authority key identifier: 85:FB:86:20:22:BB:E5:CC:40:46:2F:BF:D8:B6:BB:81:13:5D:65:FD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hfuGICK75cxARi-_2La7gRNdZf0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/QRhv6NymfUavF8tkpXX_Ya6Q0dE.roa
Signing time:             Sun 30 Jun 2024 01:31:48 +0000
ROA not before:           Sun 30 Jun 2024 01:31:48 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     24296
IP address blocks:        154.34.0.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85FB862022BBE5CC40462FBFD8B6BB81135D65FD
        Validity
            Not Before: Jun 30 01:31:48 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=41186FE8DCA67D46AF17CB64A575FF61AE90D1D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:63:60:fb:6c:ef:f7:f2:75:ab:c9:c0:6f:50:
                    db:d8:3f:95:75:c4:79:f7:d6:d8:39:a8:3e:ee:b4:
                    cb:a6:a4:b4:6a:a3:b4:09:a4:ab:ec:a4:a9:d1:3a:
                    a6:13:e9:ad:dc:3f:88:3e:b6:00:c1:4c:6f:03:0e:
                    26:66:6a:03:55:3d:18:28:b0:05:3e:99:cf:91:33:
                    ff:b7:ba:67:af:b6:01:e4:95:7a:cd:c9:fa:9f:1b:
                    3e:43:2a:10:2b:48:41:02:99:50:79:fe:0a:da:4d:
                    2c:2d:df:f7:50:08:01:8f:66:00:92:f3:41:57:20:
                    9e:72:e3:69:4b:c1:20:0b:ed:c7:09:4f:db:a5:60:
                    ea:8c:04:58:d0:14:38:a9:48:e5:0f:3b:6d:b0:bc:
                    0c:a8:67:bc:e4:f2:31:34:ed:a9:b9:92:34:53:8e:
                    3e:e3:e5:35:b1:12:55:1d:43:00:16:71:bb:a3:83:
                    58:e2:81:5a:13:01:51:db:e3:1a:c2:f2:26:70:92:
                    0a:17:a9:1f:f0:c8:7a:ba:53:a4:40:64:1f:a2:54:
                    5b:71:c0:60:5e:b9:91:cb:ce:23:a8:93:1d:81:62:
                    0e:d9:3a:ab:c9:b9:76:29:47:83:c5:f0:84:41:8a:
                    7a:cd:b4:af:12:d5:33:48:b5:1d:f1:64:40:d3:bb:
                    df:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:18:6F:E8:DC:A6:7D:46:AF:17:CB:64:A5:75:FF:61:AE:90:D1:D1
            X509v3 Authority Key Identifier:
                keyid:85:FB:86:20:22:BB:E5:CC:40:46:2F:BF:D8:B6:BB:81:13:5D:65:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/hfuGICK75cxARi-_2La7gRNdZf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hfuGICK75cxARi-_2La7gRNdZf0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/QRhv6NymfUavF8tkpXX_Ya6Q0dE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.34.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2f:13:65:0e:c9:cf:72:98:b8:04:dc:29:2b:81:ed:ba:b5:9c:
         d2:a2:e9:6a:10:69:ec:b7:bd:bf:b1:85:8f:fc:59:09:da:0c:
         d7:32:5c:fc:cf:35:c0:65:50:e5:32:63:7d:e8:d5:c4:2c:fe:
         11:f2:f1:23:bc:7b:f7:54:56:f5:f8:d8:72:a0:2f:0d:03:26:
         36:83:c7:54:04:42:55:84:da:9a:60:59:3f:5e:15:38:f2:b6:
         db:1a:a0:fe:fe:6c:fe:8e:99:f7:cc:25:66:b4:05:95:47:df:
         7a:3c:13:1e:10:66:46:42:1a:96:21:68:c6:1b:74:c6:13:75:
         93:a5:b0:81:24:6a:78:7a:6c:98:56:3a:4a:e0:56:96:e7:92:
         c5:d4:c7:af:90:d8:52:ff:e8:3b:f9:04:da:bc:99:a9:1d:0f:
         94:f4:14:72:c0:b2:ec:e9:83:37:ea:37:91:50:44:8f:fa:b0:
         78:a7:b4:39:99:b7:39:90:2a:67:41:73:f5:09:5f:10:6f:e0:
         3f:31:f6:23:8b:3a:fb:6b:0f:74:da:af:22:27:54:19:63:82:
         b1:b7:3f:d7:78:aa:6c:bf:69:eb:06:ef:08:f2:a4:2f:e5:81:
         db:be:97:31:66:83:62:e0:08:ac:61:10:3a:94:14:0f:1c:83:
         97:81:85:11
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:11 2025 by rpki-client