Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/CkLYDJI93MQmxbIIxYyUxEn2Prk.roa
File:                     CkLYDJI93MQmxbIIxYyUxEn2Prk.roa (raw, json)
Hash identifier:          OE1yvOQTTJ89y3E4eFebhvp49fxPGUx2x7jATSjR76E=
Subject key identifier:   0A:42:D8:0C:92:3D:DC:C4:26:C5:B2:08:C5:8C:94:C4:49:F6:3E:B9
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       48
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/CkLYDJI93MQmxbIIxYyUxEn2Prk.roa
Signing time:             Fri 31 Jan 2025 01:33:37 +0000
ROA not before:           Fri 31 Jan 2025 01:33:37 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     7679
IP address blocks:        203.114.192.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Jan 31 01:33:37 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=0A42D80C923DDCC426C5B208C58C94C449F63EB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c9:d7:3f:40:86:e5:f9:ab:46:cf:0f:31:32:
                    8d:6d:15:fd:cd:7a:64:0d:22:2d:ac:db:fc:c3:d6:
                    ed:5b:f4:f7:71:2d:e9:32:35:91:8e:b5:d5:ea:10:
                    c3:49:6f:0a:33:f0:ac:3a:e6:64:29:43:73:f7:ee:
                    25:7e:b2:d9:a0:c8:4b:80:09:66:bd:3c:44:b2:14:
                    69:34:cd:69:45:40:58:2b:bd:7c:a4:19:67:8d:ea:
                    95:e8:f7:89:b1:a0:15:0e:69:18:00:ee:3c:4c:7b:
                    d6:f3:3e:f1:8b:22:25:c8:c5:12:eb:b0:9c:16:04:
                    d4:4c:74:5c:78:ff:9f:14:d4:b7:f2:5b:32:74:9e:
                    8a:30:7a:e6:ad:76:44:7e:76:e5:10:a5:da:32:f8:
                    12:8f:03:aa:67:32:ae:70:f2:81:75:29:12:be:ca:
                    61:09:ce:2f:54:41:f7:78:65:cf:4f:d8:6f:ae:ad:
                    d3:ba:11:46:12:ed:94:a6:79:00:da:34:d1:7a:05:
                    2a:23:af:8b:f5:e1:c5:12:f6:44:fb:a2:a3:21:6d:
                    b5:c8:77:76:ef:39:6f:40:cc:9b:36:36:a1:da:c7:
                    d3:61:3e:f7:8f:1c:ca:e4:df:71:d1:37:56:73:d6:
                    76:30:c8:17:d9:76:23:c3:55:0a:f8:5c:2b:bf:ec:
                    ba:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:42:D8:0C:92:3D:DC:C4:26:C5:B2:08:C5:8C:94:C4:49:F6:3E:B9
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/CkLYDJI93MQmxbIIxYyUxEn2Prk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.114.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         bd:ab:2a:eb:ef:81:53:55:d4:2a:5f:2e:4f:91:55:a9:13:a8:
         b3:6c:26:82:10:9b:db:88:b4:2b:36:5f:bb:7a:81:d1:1f:35:
         cd:72:b7:ef:52:b1:e4:95:b3:56:fa:60:36:7c:68:16:43:2f:
         f4:15:b9:a8:da:41:00:24:0a:57:93:ae:ea:51:fa:2a:d8:d2:
         a8:0b:6e:ce:33:de:a7:47:dd:06:2c:3a:0f:5b:21:a5:f0:ac:
         bf:bf:68:e0:6b:9d:8f:16:36:a4:b2:ac:82:76:85:91:ba:45:
         ca:ad:7d:ad:ec:2b:16:e4:de:2d:64:ec:8d:bd:66:a8:6a:5c:
         50:e4:88:c7:72:d5:1a:94:c0:6c:43:d4:df:27:12:1c:01:a8:
         ce:83:d8:a7:01:e1:72:31:86:ed:bd:4d:b0:f2:bc:83:f0:0c:
         27:ff:1f:f1:31:bb:12:1d:92:5a:c3:11:29:85:40:eb:a8:05:
         e1:10:e9:0d:8b:73:76:2a:c3:f8:5d:b4:b5:55:4b:89:5f:d4:
         0f:89:ea:c7:d3:33:8e:6d:ea:4c:22:ea:d0:0d:61:be:23:51:
         0b:da:e1:c6:57:c3:a5:3f:8b:7b:1f:55:8a:e9:9a:6f:8f:84:
         3e:13:b0:19:d9:07:9d:b3:f0:ea:33:dc:b4:2b:d2:ce:f8:ff:
         7c:82:b7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:43 2025 by rpki-client