Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/Ovgqti1BtCKzg9KTIlqXUGD50-8.roa
File:                     Ovgqti1BtCKzg9KTIlqXUGD50-8.roa (raw, json)
Hash identifier:          Pbmwafi9k9HDiybYFFgUPFMpK1MVABGc8JleWtSqURs=
Subject key identifier:   3A:F8:2A:B6:2D:41:B4:22:B3:83:D2:93:22:5A:97:50:60:F9:D3:EF
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       3E
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/Ovgqti1BtCKzg9KTIlqXUGD50-8.roa
Signing time:             Fri 31 Jan 2025 01:33:33 +0000
ROA not before:           Fri 31 Jan 2025 01:33:33 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     7679
IP address blocks:        119.47.32.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Jan 31 01:33:33 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=3AF82AB62D41B422B383D293225A975060F9D3EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:7e:0b:a6:15:57:2c:5d:d3:6d:a1:3b:ee:7f:
                    38:f7:56:de:eb:02:44:dd:bb:ff:ea:52:e6:09:a3:
                    7c:9c:0e:d7:32:a3:93:3d:45:4f:f7:7d:d0:a4:43:
                    d4:99:b0:97:4d:f6:c0:cd:e8:0b:53:10:76:4c:77:
                    30:dc:03:15:9a:df:fb:6a:c2:5c:43:02:c5:23:4e:
                    71:4b:b4:cd:b9:db:6a:ab:c7:22:2a:4d:cc:38:a0:
                    59:74:53:35:5b:bf:4b:dc:f3:f3:87:74:a8:37:50:
                    ae:75:2c:7d:97:1f:0c:5f:d6:59:d4:83:43:45:bc:
                    73:36:08:7d:9f:70:4b:5b:b2:4a:d8:4a:ab:58:90:
                    9a:7d:29:3c:04:c1:dc:cf:af:99:ec:6c:7c:9f:44:
                    73:5f:28:eb:19:66:22:2a:36:e0:99:20:7c:e5:d1:
                    7a:cc:f8:88:ab:e6:fb:2d:29:3a:99:60:aa:37:ac:
                    85:54:d0:a2:c3:53:d8:86:96:da:46:df:2b:e2:9c:
                    db:b0:a7:d9:8f:07:9f:77:06:05:97:3c:bf:41:39:
                    62:d9:93:e6:9d:78:c7:bc:86:e1:da:25:fe:6f:e8:
                    ae:7e:18:53:41:78:55:4f:27:e8:9a:7f:9c:cc:8e:
                    86:83:f0:81:98:9d:88:74:a1:08:c5:3e:58:e3:99:
                    c2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F8:2A:B6:2D:41:B4:22:B3:83:D2:93:22:5A:97:50:60:F9:D3:EF
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/Ovgqti1BtCKzg9KTIlqXUGD50-8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.47.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8a:c6:91:0d:8e:6b:64:f3:3b:b1:2b:d1:c8:db:51:85:6c:f5:
         79:c9:f2:80:6f:fd:aa:37:e3:18:a5:62:19:43:5f:b2:2f:83:
         65:d2:c9:0c:eb:a7:4c:ec:ef:49:ba:62:84:ad:ea:f1:27:b7:
         6c:62:e1:c5:a6:5c:b6:95:74:2f:59:c2:e8:6d:0f:87:7a:4a:
         a5:2a:38:d6:54:25:f8:a6:15:11:95:b0:37:a9:96:57:5b:bc:
         fb:bb:c9:84:6d:56:d1:3d:09:56:7d:42:bb:03:09:a8:1d:6a:
         f9:cf:67:fe:19:15:cc:e4:e3:32:e7:4c:4d:98:5c:9d:68:84:
         af:ec:6a:90:4f:b1:83:98:90:87:92:ef:e0:26:44:ac:f6:3b:
         7e:42:24:a4:77:56:c0:4a:12:3b:ac:d4:a3:55:d9:67:76:e2:
         40:5e:37:08:12:c4:41:d1:1a:06:68:7d:67:8b:f6:e0:8e:f1:
         bc:1c:0c:35:1c:92:de:33:17:53:a3:67:09:77:f1:5e:dc:85:
         62:61:6e:64:3d:91:77:70:3e:42:fb:61:6b:11:15:c8:e2:a9:
         68:88:82:61:ea:db:b7:dc:f9:3f:fb:24:8e:e1:d3:65:f5:85:
         0f:51:55:fd:f4:d5:e1:12:9c:da:71:70:17:41:84:d6:9d:b8:
         a6:6d:dd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:48:01 2025 by rpki-client