Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/ZGUEwVdTnAfId83yqJrmNRgmPIA.roa
File:                     ZGUEwVdTnAfId83yqJrmNRgmPIA.roa (raw, json)
Hash identifier:          48Jl9ye1iH+Myc1MNOjd8i5m7IXfzClOk5+C017AE+Q=
Subject key identifier:   64:65:04:C1:57:53:9C:07:C8:77:CD:F2:A8:9A:E6:35:18:26:3C:80
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       39
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/ZGUEwVdTnAfId83yqJrmNRgmPIA.roa
Signing time:             Fri 31 Jan 2025 01:33:31 +0000
ROA not before:           Fri 31 Jan 2025 01:33:31 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     7679
IP address blocks:        103.2.4.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Jan 31 01:33:31 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=646504C157539C07C877CDF2A89AE63518263C80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a0:1f:a2:4c:5a:21:3e:4a:46:3c:18:9c:19:
                    37:63:67:32:b3:6e:c3:e5:1d:65:bf:40:0b:d8:75:
                    08:67:68:8c:63:61:70:a7:b8:75:0c:26:73:c0:42:
                    58:24:b6:a5:b7:17:2f:38:90:5c:4d:be:03:c6:19:
                    90:34:d8:05:e2:8b:52:65:6f:32:bf:12:b4:5a:0e:
                    16:a9:73:ab:75:71:c5:42:c5:f2:19:0b:36:c1:57:
                    2e:0b:c6:d6:cb:0d:71:18:34:78:e9:98:30:bb:0f:
                    25:40:f5:e0:e9:ff:b8:57:40:2c:d8:a6:92:00:da:
                    7c:68:be:d7:dc:a1:45:53:43:47:0e:98:f8:2d:5a:
                    8e:e1:6b:78:ee:a5:78:94:34:07:8a:76:f5:12:38:
                    e6:ad:cb:ad:77:b3:1f:47:4d:df:ac:20:80:63:b4:
                    9f:c4:0d:f2:33:4a:e5:16:28:35:c0:6d:47:0a:58:
                    3f:76:eb:60:96:81:75:bb:15:c0:41:9c:fa:a9:eb:
                    81:79:e5:45:b5:8e:98:d4:fb:ca:05:46:6d:c6:c6:
                    c0:81:33:ab:5a:af:7a:c5:a1:00:2b:e8:bb:61:a6:
                    bf:1e:7a:4c:40:14:aa:df:7c:cd:8d:b4:a1:dd:58:
                    30:85:fe:da:ca:cf:cf:7d:72:cc:5b:e0:01:c6:46:
                    7a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:65:04:C1:57:53:9C:07:C8:77:CD:F2:A8:9A:E6:35:18:26:3C:80
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/ZGUEwVdTnAfId83yqJrmNRgmPIA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:2e:4a:68:72:52:bc:51:d4:57:8b:c0:00:a7:f0:23:e7:b0:
         07:43:fe:a2:7d:aa:b7:3f:69:5d:41:dd:4a:1c:3a:8e:8f:39:
         61:43:9a:ee:5b:4d:32:dd:b5:5d:74:19:92:15:a5:c4:f9:d8:
         86:d5:45:00:4c:09:10:5d:6a:0f:26:5b:09:5c:1a:ee:f9:06:
         d8:bd:09:07:07:43:5a:9d:f4:56:23:3d:d3:2f:06:f7:33:75:
         4f:c2:8e:47:b6:8e:96:38:e7:f0:94:f1:9e:c1:7a:60:d7:1e:
         7e:ab:a9:bd:ec:70:7b:a5:34:d4:f9:69:75:50:6d:fc:7d:a3:
         53:fa:40:c0:27:53:33:b2:97:1a:65:f1:9e:ef:3b:75:eb:e1:
         de:bb:5f:d7:40:44:fc:f6:7e:52:0f:f0:77:ca:f3:ae:e8:0a:
         e3:4f:9a:23:c7:59:de:b4:51:37:8a:33:2d:13:69:1c:cf:f0:
         bf:d7:02:97:35:6e:ee:f8:5a:b6:e7:b7:45:14:13:df:d1:d9:
         99:13:5a:32:ec:f6:68:4e:54:e7:33:a1:da:33:14:af:d1:3c:
         dd:bb:ca:5b:6e:88:8e:2c:a2:1f:20:db:55:a4:cd:fe:0c:50:
         b4:9c:4d:33:5c:6c:ad:0b:e4:66:93:3f:5f:3b:ad:bd:2f:31:
         fe:d1:46:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:45:48 2025 by rpki-client