Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5le3Ng1OjU6vOmejVXVq7nGINzk.roa
File:                     5le3Ng1OjU6vOmejVXVq7nGINzk.roa (raw, json)
Hash identifier:          bEtDhu35eGlghv6GNopux0ismq4zFORsUYYRo9/mW5w=
Subject key identifier:   E6:57:B7:36:0D:4E:8D:4E:AF:3A:67:A3:55:75:6A:EE:71:88:37:39
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       093F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5le3Ng1OjU6vOmejVXVq7nGINzk.roa
Signing time:             Sun 30 Jun 2024 01:29:28 +0000
ROA not before:           Sun 30 Jun 2024 01:29:28 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        211.14.114.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2367 (0x93f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:29:28 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=E657B7360D4E8D4EAF3A67A355756AEE71883739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0d:e6:95:b6:7d:b1:e5:cf:58:6b:e8:33:25:
                    50:2a:0f:2b:35:91:54:f0:12:88:f6:31:c9:29:14:
                    61:58:2b:c8:83:19:4f:53:57:7b:9a:a1:ac:54:49:
                    f0:69:58:69:ac:a4:62:ef:97:c8:8e:86:35:47:04:
                    b5:6a:b5:ac:91:56:13:96:1a:26:f5:d1:77:a4:08:
                    80:d6:72:23:76:a7:7e:7a:7c:af:6e:ca:1e:d4:fd:
                    ec:6f:b5:09:8a:b7:53:9a:76:ba:96:de:14:b9:41:
                    e2:70:0a:28:70:4c:e7:77:e8:4a:2e:ee:24:d0:2a:
                    a1:e5:40:83:15:6c:5d:b8:85:4f:04:b1:a2:af:bc:
                    fd:24:96:d4:1e:a0:fa:eb:56:65:d5:61:b2:67:e3:
                    dc:78:06:ca:84:4f:d3:42:b0:41:bc:c4:fc:12:f6:
                    96:d6:bb:66:a4:f9:f8:79:56:1c:fc:14:c5:f7:ae:
                    67:cf:d1:dc:bd:21:0a:4f:86:48:4c:3f:6a:35:0a:
                    74:af:b8:51:76:c1:2e:5b:8d:d4:b2:c3:fc:a6:f9:
                    31:3f:de:9b:1f:75:42:e2:f1:de:39:74:bb:f2:64:
                    8f:62:b3:f6:bd:e7:27:13:0e:e2:01:bc:a6:91:15:
                    fb:cd:e8:da:4d:5f:e2:1b:01:05:90:e6:2f:dd:0d:
                    3f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:57:B7:36:0D:4E:8D:4E:AF:3A:67:A3:55:75:6A:EE:71:88:37:39
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5le3Ng1OjU6vOmejVXVq7nGINzk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:39:89:1f:d9:10:17:c3:98:41:5b:86:07:82:a1:13:6e:11:
         d5:42:36:7b:33:72:0d:95:ef:e8:33:78:14:e2:74:1d:c3:a2:
         66:db:dc:57:40:43:be:b6:5c:92:17:24:c6:57:92:03:f6:4a:
         fd:35:f4:b1:f0:f3:6a:a5:8a:99:4f:9e:6d:d8:47:7b:7e:13:
         89:a7:ed:2f:fd:1f:31:a8:96:0d:f6:4e:3f:d7:e7:c7:85:57:
         9a:cd:65:15:5f:ca:d0:94:d1:4d:1c:ab:c1:72:3d:78:1e:71:
         f1:f1:59:2c:c4:d3:30:1e:03:5c:eb:e0:b0:9d:1b:d7:3b:c0:
         dc:57:e0:0c:65:90:c4:e0:c1:d6:03:86:6e:66:53:0d:b1:1f:
         77:03:e1:01:f5:8a:db:30:ae:94:35:c6:9d:55:4d:57:91:47:
         7d:58:51:2c:de:66:2a:2c:1d:cb:46:34:2a:56:f4:ac:72:4e:
         c5:84:a3:54:2b:b1:92:8d:1f:e7:28:36:f9:fb:31:cc:e2:dd:
         a9:45:fe:3d:4c:4a:e7:e9:a7:72:39:29:25:03:b3:f7:58:45:
         75:c6:ac:b7:2c:ac:18:6c:25:04:2c:8b:49:02:20:8d:98:0a:
         45:2b:4a:b7:c7:c4:6e:1e:b8:64:9e:10:34:0f:21:f6:3e:9f:
         ad:89:55:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:30:30 2025 by rpki-client