Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/L09ZrpKhcCP0ze1UiW0wl4PRxZM.roa
File:                     L09ZrpKhcCP0ze1UiW0wl4PRxZM.roa (raw, json)
Hash identifier:          Nl41omeq7sxrxVMQTJdvq4bevX+FxukH07LXvsUsTiQ=
Subject key identifier:   2F:4F:59:AE:92:A1:70:23:F4:CD:ED:54:89:6D:30:97:83:D1:C5:93
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       47
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/L09ZrpKhcCP0ze1UiW0wl4PRxZM.roa
Signing time:             Fri 31 Jan 2025 01:33:37 +0000
ROA not before:           Fri 31 Jan 2025 01:33:37 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     7679
IP address blocks:        202.226.224.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Jan 31 01:33:37 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=2F4F59AE92A17023F4CDED54896D309783D1C593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8b:25:0f:1b:7a:08:ba:a7:a0:55:03:fa:48:
                    83:2a:26:0a:0a:65:a7:e8:0c:a9:d0:ca:df:f2:a0:
                    68:7f:90:d4:ec:1b:57:79:39:a4:54:8e:d2:80:b9:
                    f3:97:79:32:38:98:6a:0d:52:f6:f2:81:d1:ea:45:
                    11:04:a2:31:3d:0e:3b:b3:61:d5:24:ca:03:bc:ea:
                    91:9c:1b:7f:c3:c7:91:8d:21:0a:41:0d:6c:16:7d:
                    19:a6:6b:a3:c9:5a:77:19:73:8a:f1:b5:5e:8b:55:
                    3c:c5:ea:c1:c1:57:de:49:4e:0c:f3:58:5f:16:b2:
                    6b:54:bd:e3:fc:f7:ab:f3:f4:b9:3a:89:6d:96:0f:
                    bd:60:11:d5:6d:5a:a1:ad:c5:02:f7:de:f8:82:db:
                    e4:1b:1b:cb:49:b8:5e:e3:7a:64:dc:74:af:64:a1:
                    55:ae:93:07:f6:16:80:cc:09:6f:82:dd:da:53:35:
                    39:03:ab:9b:47:db:72:2b:2d:3b:8f:0c:e7:3d:43:
                    21:cc:a5:28:99:42:6a:9a:ba:fb:8c:0a:34:48:af:
                    19:18:eb:3e:90:aa:63:51:de:8b:1f:c8:9f:66:8c:
                    6f:d7:8b:a6:e9:cc:a0:1d:19:a6:a7:47:3e:e3:8b:
                    7a:ed:93:d5:39:ea:1c:67:6c:b8:07:ec:0b:f6:29:
                    c3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:4F:59:AE:92:A1:70:23:F4:CD:ED:54:89:6D:30:97:83:D1:C5:93
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/L09ZrpKhcCP0ze1UiW0wl4PRxZM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.226.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         79:8f:0d:e9:71:8e:7b:1e:7e:1e:8d:fb:29:29:84:81:21:75:
         6b:27:d1:96:d1:da:62:26:5e:49:1c:22:cc:ff:87:60:95:c9:
         28:3b:92:ba:c4:34:30:f8:ab:10:10:e6:c0:24:9f:3e:1f:ac:
         94:f8:86:44:68:f5:ec:81:45:53:17:9f:f0:be:6e:9e:55:ec:
         56:f4:b4:25:ff:ab:70:e6:9e:3d:94:34:60:ed:f3:d8:96:92:
         73:d3:64:6c:a3:50:22:75:bc:44:27:3f:12:ed:f5:be:64:8d:
         63:d9:48:ce:9e:ce:07:bb:c0:c8:fe:fa:95:b3:a8:b5:41:ea:
         07:ec:02:f5:9a:94:0e:5b:73:db:1c:ca:c8:5e:24:c3:a6:04:
         8e:99:4f:6c:08:38:ed:d2:8f:f1:46:43:32:37:a4:4e:fc:27:
         e9:9d:49:67:39:48:4e:5a:de:0e:d8:a7:4e:e0:09:50:b4:a0:
         fb:53:68:72:8f:ad:8f:85:30:fb:e2:d5:23:44:3e:f5:5e:e1:
         ab:36:eb:11:be:81:66:cb:96:61:12:a0:36:29:32:6e:0c:06:
         ff:6e:b1:98:6c:46:ad:e7:4e:86:12:03:87:58:31:02:b9:fd:
         8c:d2:0a:89:77:b4:c0:a1:2b:12:b9:8a:49:c4:05:4c:b8:ca:
         57:a1:8b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:41 2025 by rpki-client