Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3OHrwYBZLJVYhvFeH5U-sNV3qB8.roa
File:                     3OHrwYBZLJVYhvFeH5U-sNV3qB8.roa (raw, json)
Hash identifier:          /uJ9AFSeheMl0/lgdJVPMwc6V7bNmgw/qhHyqx/NMMk=
Subject key identifier:   DC:E1:EB:C1:80:59:2C:95:58:86:F1:5E:1F:95:3E:B0:D5:77:A8:1F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       04BF
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3OHrwYBZLJVYhvFeH5U-sNV3qB8.roa
Signing time:             Thu 27 Jul 2023 16:48:14 +0000
ROA not before:           Thu 27 Jul 2023 16:48:14 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        49.102.156.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1215 (0x4bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:48:14 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=DCE1EBC180592C955886F15E1F953EB0D577A81F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9f:4d:8c:17:50:9d:8c:e4:db:db:18:db:39:
                    c0:1c:98:82:14:ad:b5:51:24:b2:a2:0d:42:66:76:
                    21:0b:d7:c2:b8:5b:33:c8:00:04:ac:e1:6f:66:f7:
                    9c:d9:a9:16:35:57:ed:27:da:8f:2a:80:4f:4f:90:
                    17:92:90:1b:3e:24:f0:ea:b7:90:69:bf:29:92:31:
                    a4:50:56:38:fc:28:0e:b5:06:97:29:1b:ae:d2:40:
                    7d:71:3f:95:c5:67:f2:f7:d7:f4:21:a0:b9:8b:c5:
                    f4:a3:54:c8:04:16:d5:4d:a5:df:af:a7:fc:14:23:
                    b2:ad:36:0d:33:1f:4a:1e:94:80:8c:5a:ed:66:bc:
                    37:a1:03:21:6c:fe:4b:b1:ce:81:13:7a:c7:68:38:
                    12:fb:32:e8:35:e4:a2:41:a7:30:dd:ef:0e:4e:ab:
                    a2:06:c8:65:64:1e:55:d7:55:1a:1b:3b:c9:95:bb:
                    d0:a6:b5:ae:61:53:eb:f9:45:6c:e0:00:a9:6e:a2:
                    86:bb:47:f2:8b:c3:cc:12:b9:f3:ac:96:43:d3:38:
                    84:1b:ec:ad:44:fb:7a:60:d7:bd:86:da:61:d7:a6:
                    1b:9a:9d:8a:02:fb:b8:de:19:37:25:a9:c1:9c:06:
                    72:13:d8:d9:bc:7b:27:c1:0a:db:7f:36:89:cd:ea:
                    c6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E1:EB:C1:80:59:2C:95:58:86:F1:5E:1F:95:3E:B0:D5:77:A8:1F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3OHrwYBZLJVYhvFeH5U-sNV3qB8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.102.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:ef:7f:fd:e1:3d:4c:73:3c:de:7b:f7:6c:58:b9:e7:d4:de:
         f1:10:3d:2f:8f:74:8f:10:f4:8b:89:45:0f:ed:c5:c9:3a:7b:
         cd:6c:48:b7:97:23:ea:71:57:9f:80:04:ff:77:4d:b9:c0:1b:
         fa:bb:b8:c4:11:56:cc:45:5a:16:2c:36:8a:57:68:e1:c7:01:
         b9:00:a4:13:d4:c4:d2:a8:de:98:02:95:53:30:ac:c1:98:1e:
         ab:1b:21:4a:ea:18:f0:82:57:18:86:60:ec:e2:8b:17:ea:01:
         92:1c:bd:bf:61:52:95:db:6e:43:7e:d1:40:9f:26:2a:a4:88:
         a9:4f:24:b9:13:d0:9d:98:20:52:3a:5d:a9:d2:57:2c:d8:6d:
         ba:a1:24:19:aa:f4:96:55:f3:1f:cb:dd:7a:b7:f8:74:ff:85:
         c3:84:25:43:cb:a8:dc:8e:58:f8:a8:49:1d:8e:e5:a7:bf:89:
         bd:32:64:7f:c5:25:de:d6:1e:3d:7e:8c:32:06:96:aa:df:96:
         03:39:36:03:81:ed:70:c2:55:6f:ac:e7:23:ac:1b:02:a9:4c:
         7b:21:a7:14:b9:96:d6:bb:b7:35:e7:0d:69:23:f8:a6:f7:19:
         37:79:13:9d:66:a0:20:9d:fb:13:df:0e:16:56:1d:74:f7:fb:
         1a:a6:c0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:09 2025 by rpki-client