Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/4r2j-13FZyZ_VMlUlichipLe4tc.roa
File:                     4r2j-13FZyZ_VMlUlichipLe4tc.roa (raw, json)
Hash identifier:          CpQF+ImUqjHakG6bVZUZeSGG+uERoWQ9WtFXX50wVHg=
Subject key identifier:   E2:BD:A3:FB:5D:C5:67:26:7F:54:C9:54:96:27:21:8A:92:DE:E2:D7
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       A9
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/4r2j-13FZyZ_VMlUlichipLe4tc.roa
Signing time:             Sat 30 Nov 2024 01:31:23 +0000
ROA not before:           Sat 30 Nov 2024 01:31:23 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     9351
IP address blocks:        122.152.32.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Nov 30 01:31:23 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=E2BDA3FB5DC567267F54C9549627218A92DEE2D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:16:63:36:a7:47:c5:1e:b0:bc:2f:79:ab:d4:
                    a3:59:94:06:c0:9e:12:45:2a:ce:80:5e:eb:17:1e:
                    e1:89:8e:f8:f0:d5:8b:4f:af:86:2c:1f:8f:ed:d9:
                    76:30:e9:a3:b2:6f:b2:7e:88:87:60:03:17:87:65:
                    28:46:93:9e:e4:7f:ae:80:c2:53:0f:1c:45:bf:7e:
                    56:81:21:31:36:c6:40:9a:84:64:9a:fe:75:68:02:
                    c4:8b:c1:bb:8e:b8:be:49:6e:c3:f9:44:5f:39:b2:
                    16:f4:e2:3d:e6:e8:6a:4b:da:fb:f0:b8:62:fc:e5:
                    5b:2c:0f:bd:24:80:14:20:4c:66:78:ee:3c:0f:e2:
                    8f:bb:e6:61:cb:96:9a:d4:1d:c6:49:d6:a6:0c:79:
                    e4:2c:a4:ab:bd:31:e5:f7:21:f1:a3:7a:d3:48:df:
                    6a:fc:47:ab:6d:93:79:e0:9a:c8:ed:5f:6d:db:1e:
                    70:a4:59:50:bc:4a:6c:8c:a0:b6:7e:c5:ae:a6:c7:
                    60:e8:eb:11:0b:63:77:86:74:0b:bd:90:b9:05:3c:
                    39:9b:68:e1:4d:c7:00:8c:a4:96:49:37:e4:1a:98:
                    cb:13:c9:26:f3:eb:33:0f:57:af:b1:05:0d:f3:c5:
                    84:d6:6c:70:f0:7b:4b:c4:bf:77:fe:49:e3:e4:7d:
                    51:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:BD:A3:FB:5D:C5:67:26:7F:54:C9:54:96:27:21:8A:92:DE:E2:D7
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/4r2j-13FZyZ_VMlUlichipLe4tc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.152.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         38:f1:48:3b:5b:5b:75:ab:41:fb:60:88:e2:0d:cb:ea:c2:22:
         5f:2d:8b:f2:81:36:28:72:c7:00:05:9d:20:8e:28:91:37:6b:
         0d:fc:a2:28:37:a4:1e:d1:0b:58:46:a6:b6:1b:a2:25:52:ff:
         d6:48:ef:4a:d8:c9:6d:8b:cd:83:58:01:f2:c0:1b:15:c5:36:
         bf:bc:a7:5a:77:68:33:cd:da:05:0d:77:14:e2:ac:98:a1:8c:
         fc:a3:00:88:2f:06:14:84:a8:fc:5a:b5:6c:97:37:50:8c:4e:
         a2:27:14:a9:5b:9f:76:04:30:0a:bb:ac:a4:71:0c:24:38:60:
         88:9f:7d:ce:1c:4e:b4:71:ff:a5:fb:20:40:4c:62:41:15:e0:
         8f:af:89:8c:45:9a:63:02:c3:0b:9d:86:99:49:c3:b9:72:7c:
         bd:4a:5e:d3:eb:2b:d3:8e:43:75:be:bb:18:c2:4a:97:a7:7e:
         e1:18:af:a7:8a:16:43:32:cb:f6:63:70:77:4f:80:16:b9:31:
         66:30:f1:75:c3:a6:da:7c:b7:9d:c6:e3:64:9c:1c:a2:4e:9c:
         94:72:94:ae:a9:75:db:02:94:5c:d0:ed:b2:23:4c:b6:a5:0a:
         99:20:d9:d6:b6:ba:b4:c9:8d:73:8f:34:cc:dd:c9:fa:1a:04:
         ed:2d:82:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:11 2025 by rpki-client