Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/BCjF8AozRtXF-GmQgpPXEwbV6sI.roa
File:                     BCjF8AozRtXF-GmQgpPXEwbV6sI.roa (raw, json)
Hash identifier:          OSjLZI3EODCObxAw/jyhZUzynrFQLhQ2YceW2ntIx7g=
Subject key identifier:   04:28:C5:F0:0A:33:46:D5:C5:F8:69:90:82:93:D7:13:06:D5:EA:C2
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       067E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BCjF8AozRtXF-GmQgpPXEwbV6sI.roa
Signing time:             Tue 30 Apr 2024 01:38:01 +0000
ROA not before:           Tue 30 Apr 2024 01:38:01 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        183.75.198.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1662 (0x67e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:38:01 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=0428C5F00A3346D5C5F869908293D71306D5EAC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:35:f5:c5:48:08:69:c4:d6:2d:3a:e6:ed:21:
                    d3:33:9a:64:c0:bb:e8:1c:13:5e:dd:6b:ed:c9:62:
                    09:53:e9:d3:73:5e:6a:32:ec:42:12:6b:e7:7f:97:
                    82:86:27:17:17:10:0a:7f:0e:6a:ed:c7:9d:8c:65:
                    76:00:1c:00:03:81:13:ab:03:09:9d:28:d5:d5:70:
                    ce:bf:07:f0:c6:7d:96:67:45:ee:4b:6f:d5:6b:90:
                    d7:30:a1:59:f3:06:47:ab:b0:d0:c9:c5:1c:10:7a:
                    8e:c0:ce:ce:d6:ab:27:bf:aa:f0:65:de:ea:41:74:
                    ef:56:5e:d9:d2:40:42:c5:40:11:74:b7:ce:f5:8f:
                    56:37:c5:21:15:92:f0:a8:b7:b7:6f:21:6d:d7:d3:
                    ca:07:48:4b:1a:8e:25:21:a0:e4:cb:86:c6:4e:9d:
                    c6:43:78:8e:cd:45:24:a4:b8:ed:80:8d:11:25:b8:
                    55:77:2e:4d:44:ed:5b:68:84:4c:21:99:30:19:af:
                    99:ce:6a:e4:73:a6:47:16:69:66:41:8e:6f:29:bd:
                    28:08:95:cc:b2:b5:46:d3:96:07:47:7c:57:da:0c:
                    3b:98:d9:78:f0:8b:19:95:3d:50:0f:4b:28:d3:52:
                    81:a1:d5:58:0f:61:a2:4f:f5:e5:f9:89:34:fc:5f:
                    29:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:28:C5:F0:0A:33:46:D5:C5:F8:69:90:82:93:D7:13:06:D5:EA:C2
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BCjF8AozRtXF-GmQgpPXEwbV6sI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.75.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:61:0c:ba:38:c0:09:ef:47:45:8c:fa:ad:65:55:5d:3d:e0:
         22:6f:09:29:96:b9:5a:af:75:60:43:f6:ba:fe:5e:ef:9d:f9:
         09:43:68:2d:1a:81:81:94:5d:75:03:26:b7:8b:c0:78:16:73:
         94:51:a6:d2:54:d3:18:72:65:e2:08:34:9f:44:15:ae:84:da:
         1c:f5:b4:2b:76:61:db:29:af:82:c1:08:95:c3:c2:4c:82:3a:
         fd:1f:dc:69:da:23:4f:c2:a0:d3:ef:0d:93:94:a1:3d:a9:3e:
         46:c9:89:f5:67:24:44:42:87:63:4d:51:f8:81:d2:cb:c3:61:
         b7:c6:1e:e4:25:72:50:c9:c4:c0:0a:ed:c3:0b:74:b7:52:5e:
         81:28:33:e1:e8:7f:93:2e:27:67:76:5d:41:3e:d2:50:49:a8:
         36:99:1d:bd:82:f6:7f:cf:74:d3:10:b1:a9:92:86:b3:61:88:
         35:7c:d8:b5:4d:bb:5b:26:fc:c7:bc:b1:4b:d7:17:be:bc:1f:
         83:c5:e4:e3:8b:cb:3a:69:fd:26:83:9e:bc:04:97:60:58:80:
         98:02:c1:8c:56:d7:ef:f9:08:23:c9:fc:6f:8c:00:14:1f:95:
         e7:e0:9d:91:ce:ee:5f:80:06:b9:68:76:cc:79:14:fe:3c:31:
         c0:56:69:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:30 2025 by rpki-client