Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/nyqrlVVYroxsFci6mB1jMl9tRUE.roa
File:                     nyqrlVVYroxsFci6mB1jMl9tRUE.roa (raw, json)
Hash identifier:          Gk3+FuZNLHzkoz/xReIFUOHX86jkb0MmzXTi08gKJvw=
Subject key identifier:   9F:2A:AB:95:55:58:AE:8C:6C:15:C8:BA:98:1D:63:32:5F:6D:45:41
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       49
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/nyqrlVVYroxsFci6mB1jMl9tRUE.roa
Signing time:             Fri 31 Jan 2025 01:33:37 +0000
ROA not before:           Fri 31 Jan 2025 01:33:37 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     7679
IP address blocks:        203.135.192.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Jan 31 01:33:37 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=9F2AAB955558AE8C6C15C8BA981D63325F6D4541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6f:4d:98:b7:c0:d3:44:6a:61:4a:cf:0e:00:
                    35:fe:88:3a:e2:23:4e:a7:b3:d8:c4:30:d3:17:43:
                    ad:2f:a0:20:f7:71:0f:15:c9:b2:e7:43:8a:30:3c:
                    aa:02:dc:ce:ef:a3:11:76:6e:a6:b1:da:c6:9a:16:
                    f5:34:1e:26:6a:22:da:12:ef:7b:25:e5:6b:61:6f:
                    19:09:02:96:dc:6c:97:a9:c2:75:47:64:bd:81:3d:
                    d8:85:d6:ac:32:c2:5e:20:81:c4:f0:4b:89:83:e0:
                    11:75:33:5e:53:58:c7:ae:67:ea:0f:e4:f9:13:6c:
                    74:06:13:d6:cf:b3:c9:16:04:d1:bd:85:10:ca:50:
                    85:14:e1:82:dc:ee:cc:46:1d:16:ec:6e:8e:3a:9e:
                    00:47:0b:7f:2b:c2:67:17:eb:d4:d8:f2:43:c6:f8:
                    6a:ce:33:c2:7e:e5:69:be:29:74:87:b1:15:34:7a:
                    3a:c4:9f:68:8c:fc:a6:c3:4a:86:46:ee:fb:b2:20:
                    49:27:5a:4c:c1:9c:da:6e:e1:fa:60:96:81:1d:59:
                    5b:be:09:fe:e1:56:ff:03:6e:97:30:b2:84:9e:9c:
                    e7:74:14:31:ec:9a:71:ea:06:ae:b8:9c:1c:25:3f:
                    2c:ce:7c:b9:67:54:34:1f:c9:02:0a:58:8f:f8:48:
                    f4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:2A:AB:95:55:58:AE:8C:6C:15:C8:BA:98:1D:63:32:5F:6D:45:41
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/nyqrlVVYroxsFci6mB1jMl9tRUE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.135.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ca:63:0f:72:f6:3f:6f:15:5c:3e:f3:4f:89:de:5a:3d:31:f5:
         42:12:af:31:65:86:56:2f:67:02:8b:7c:e4:f3:29:76:39:d0:
         6a:47:f0:dd:35:49:1f:68:cc:d3:13:cd:c0:ef:7e:90:e7:e6:
         7a:93:7b:e4:3b:7b:dd:98:90:55:16:e0:8f:ff:9a:e9:3c:7c:
         04:f8:62:27:f1:08:31:eb:ba:79:92:8e:c2:22:4e:74:14:7b:
         dd:98:c1:59:43:91:9e:80:06:d4:e3:54:67:46:0b:0f:c3:bb:
         92:0d:00:c3:94:ca:80:0b:70:24:69:96:55:1d:1f:32:8d:46:
         8f:09:46:8f:04:e5:84:1f:8e:49:d3:0f:db:48:0c:a3:c6:57:
         ff:e1:ef:1c:8f:cd:17:b8:0b:4f:02:8e:31:42:b2:09:80:51:
         b4:07:d1:56:53:ae:62:8e:e8:7b:68:cc:fa:af:95:ad:52:80:
         3e:37:bf:e6:23:06:e9:84:9b:88:20:ae:3f:98:f9:b8:a4:da:
         ba:e7:06:87:4c:c9:8e:01:ed:9a:8a:95:2f:87:ae:81:92:7c:
         92:e1:c6:1d:1d:5b:17:c3:e5:4d:75:20:9b:0a:86:d6:12:5b:
         00:54:f9:b5:e1:86:a8:9e:6d:da:de:a4:c2:cf:97:4b:ec:79:
         74:5a:bf:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:41:38 2025 by rpki-client