Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/B4127qpxhBOX3HQp1mK2ohJMSiI.roa
File:                     B4127qpxhBOX3HQp1mK2ohJMSiI.roa (raw, json)
Hash identifier:          nZfOQ9bWi/UENVz0rtEHqBeqRChjWCg5KKdam7pjlN0=
Subject key identifier:   07:8D:76:EE:AA:71:84:13:97:DC:74:29:D6:62:B6:A2:12:4C:4A:22
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       3C
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/B4127qpxhBOX3HQp1mK2ohJMSiI.roa
Signing time:             Fri 31 Jan 2025 01:33:32 +0000
ROA not before:           Fri 31 Jan 2025 01:33:32 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     7679
IP address blocks:        115.124.128.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Jan 31 01:33:32 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=078D76EEAA71841397DC7429D662B6A2124C4A22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:68:c1:7e:06:7b:31:7b:52:30:9d:a9:e7:dc:
                    8c:f8:27:d0:47:10:4b:3f:98:36:47:f7:37:af:f1:
                    7a:fc:b8:c0:d7:48:26:27:05:dd:65:59:2f:44:7c:
                    55:1e:cc:d8:db:4e:cd:45:a0:8e:e6:c1:e0:9d:d8:
                    1e:81:c0:be:78:b6:4c:f7:f1:6c:26:2c:db:07:29:
                    88:85:96:a7:09:14:97:64:c0:17:47:bd:81:98:f7:
                    3e:74:61:8a:4d:d7:ab:34:5f:15:28:f1:7c:de:4b:
                    79:56:6c:fb:01:da:38:d7:76:2b:f5:74:48:3c:65:
                    35:54:f3:9a:98:c9:91:76:fe:29:93:a6:39:04:43:
                    82:f8:ac:9d:50:88:e9:dd:e1:06:16:8a:95:88:f9:
                    45:ff:3c:a4:42:2f:e9:75:b1:e1:cd:8d:73:45:ef:
                    80:00:a6:4f:d4:44:61:17:22:25:ba:b8:8f:6b:7f:
                    9d:d4:49:c7:8c:30:88:dd:65:ef:f0:15:1f:7b:83:
                    e0:dd:c7:ea:59:30:4e:1a:40:d5:3f:c2:31:c0:54:
                    69:90:05:0a:55:77:c1:50:2a:4d:db:29:b0:36:93:
                    42:e6:1e:2b:4d:0d:b5:75:9d:b8:30:e6:03:1a:d5:
                    21:eb:1d:9c:d7:da:37:5b:a7:91:52:65:69:b5:5d:
                    f5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:8D:76:EE:AA:71:84:13:97:DC:74:29:D6:62:B6:A2:12:4C:4A:22
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/B4127qpxhBOX3HQp1mK2ohJMSiI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.124.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         bc:d9:80:73:59:a3:87:db:7c:37:82:5c:fa:f9:c5:ad:d8:f8:
         96:ef:1a:47:79:bf:86:7c:a8:58:73:14:24:d5:31:a4:f0:50:
         c6:04:15:bc:c2:6e:09:02:47:f2:20:6f:29:7a:c6:d6:5e:69:
         be:0b:c9:f6:94:7d:41:68:e4:af:73:be:60:6f:b8:18:73:b6:
         f1:0b:ae:29:74:05:1f:48:32:24:b5:0b:94:13:fc:31:5e:d8:
         cb:39:7a:20:18:c1:7a:08:41:28:f2:55:c3:ba:55:06:73:79:
         15:71:59:14:ee:76:c6:86:d8:64:de:3c:1e:b9:f3:6d:b8:a7:
         2c:83:9c:db:0a:ed:46:0d:8a:02:84:7c:94:b7:77:11:b7:0b:
         10:f3:58:cf:76:66:a4:e2:9e:60:02:36:ad:2b:91:18:e4:03:
         d8:4f:d0:58:96:eb:33:7d:b8:24:c1:c6:f6:1c:a4:fe:46:09:
         7d:3f:2f:d1:5e:38:8d:bc:6f:b8:d6:f8:20:10:33:3c:d7:4a:
         1c:4e:d5:7f:04:fe:58:21:00:6d:c0:8d:47:10:9e:0a:3d:1e:
         7b:a8:52:20:48:3c:82:a2:b4:3e:8a:62:65:ea:df:b6:4e:c4:
         11:c9:c1:c7:60:44:57:e0:6e:2d:45:96:5d:29:e0:89:ff:c1:
         d2:e0:7c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:28 2025 by rpki-client