Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/WilISCDa7kNktAliK2ekx90cg5Q.roa
File:                     WilISCDa7kNktAliK2ekx90cg5Q.roa (raw, json)
Hash identifier:          w06XMmNDafDdmYTo48PtKpdkrkwKp0wheCC5NWWTO7Y=
Subject key identifier:   5A:29:48:48:20:DA:EE:43:64:B4:09:62:2B:67:A4:C7:DD:1C:83:94
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       AC
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/WilISCDa7kNktAliK2ekx90cg5Q.roa
Signing time:             Sat 30 Nov 2024 01:31:24 +0000
ROA not before:           Sat 30 Nov 2024 01:31:24 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     9351
IP address blocks:        61.125.144.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172 (0xac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Nov 30 01:31:24 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=5A29484820DAEE4364B409622B67A4C7DD1C8394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ea:2a:37:96:b3:c2:3d:fa:37:89:dd:f2:e2:
                    0c:e0:5a:9e:cf:37:c7:72:62:38:9a:b6:d9:b0:e7:
                    0b:e0:09:ef:43:ac:da:d0:02:6b:82:f3:8e:13:6e:
                    75:8a:5e:1a:fd:72:5e:23:f3:0c:39:c5:42:69:12:
                    d3:8e:24:4c:c9:a2:ad:25:b9:a3:c6:f2:92:8c:6b:
                    f5:48:ce:aa:93:0f:e2:e2:a0:0f:af:89:a5:7b:6a:
                    dc:ff:51:f9:25:d5:c2:b5:87:3a:c0:bc:4b:1f:9e:
                    80:e4:0a:4d:13:fa:50:fb:fc:d3:10:65:f2:5c:4c:
                    e9:9d:d1:3e:db:b7:8d:d6:f0:6b:aa:a2:29:13:31:
                    82:92:e1:ad:58:22:46:6a:1e:b0:6a:c7:43:0b:e7:
                    53:a3:e6:6f:e6:2d:75:d6:93:da:dc:e0:71:db:d0:
                    5c:40:8a:3b:00:6c:8e:13:45:3c:cd:16:0d:1f:e2:
                    22:1d:06:50:bc:d9:d8:48:54:66:02:ab:7b:f7:46:
                    96:01:a7:79:52:b5:06:f8:a5:ed:df:aa:6e:d7:33:
                    a4:a1:7b:01:fb:ac:e9:53:21:87:b5:ab:49:15:6f:
                    9f:15:ce:67:53:91:4c:8f:4a:f0:52:e3:a4:2f:fd:
                    3b:1f:d3:6a:b4:da:0e:e5:de:24:5d:9a:e2:f6:d6:
                    81:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:29:48:48:20:DA:EE:43:64:B4:09:62:2B:67:A4:C7:DD:1C:83:94
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/WilISCDa7kNktAliK2ekx90cg5Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.125.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         84:91:18:a7:54:18:5b:19:92:43:f3:5f:1a:94:f6:e8:5a:b0:
         ce:e7:9e:8a:79:f6:d7:2e:aa:37:d6:6f:cd:4a:27:98:7a:5c:
         4e:66:27:e6:93:3c:9a:67:bb:51:b2:64:ac:95:ff:b4:eb:73:
         fe:ee:1a:a5:d8:a8:25:21:3b:63:14:e6:25:8a:e1:3c:5b:c0:
         b5:3c:3e:c2:17:45:3e:77:39:d6:fa:72:36:39:07:d4:92:5c:
         eb:e3:69:9f:d5:0f:77:ec:87:77:6c:8c:5a:a7:02:36:c6:cb:
         2d:12:e1:a3:cc:47:4b:54:06:79:0c:9b:38:d2:94:bd:06:34:
         ad:34:94:2b:92:cd:66:49:9b:c0:3a:7f:e4:ff:d0:a6:6a:ea:
         04:d7:d3:7d:ea:f4:2b:19:30:d3:d5:7d:33:5a:00:d3:cf:e6:
         96:fa:eb:cc:90:02:ce:9a:c3:c4:3e:1c:d9:9a:4a:ca:6f:3d:
         58:05:ac:3d:78:00:b4:86:de:74:01:be:46:ed:59:76:8b:df:
         97:9d:80:94:65:f2:f3:e0:b0:83:c8:58:9b:44:d6:8f:d5:00:
         24:be:b8:41:44:f0:51:06:38:e0:f6:e4:27:dc:f0:b4:aa:7b:
         24:40:3b:64:6b:77:11:d4:a6:60:e2:9f:ee:d1:ff:22:7d:fa:
         1f:9b:56:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:45:54 2025 by rpki-client