Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DCtfnXU4SdSak4lALKTJTuP3BGU.roa
File:                     DCtfnXU4SdSak4lALKTJTuP3BGU.roa (raw, json)
Hash identifier:          0zAHrO0fMj9BTezFWsmTM39INhi4N342Q+VmheRdXig=
Subject key identifier:   0C:2B:5F:9D:75:38:49:D4:9A:93:89:40:2C:A4:C9:4E:E3:F7:04:65
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0446
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DCtfnXU4SdSak4lALKTJTuP3BGU.roa
Signing time:             Thu 27 Jul 2023 16:43:10 +0000
ROA not before:           Thu 27 Jul 2023 16:43:10 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        49.105.89.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1094 (0x446)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:43:10 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=0C2B5F9D753849D49A9389402CA4C94EE3F70465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8d:20:87:cf:9b:55:3b:23:a5:a6:53:be:06:
                    89:5d:2b:f6:b4:81:33:1c:65:b2:c8:db:18:45:2f:
                    e6:44:fb:0c:c9:5d:6c:62:4f:9c:41:14:26:a4:f7:
                    f5:5e:1c:d2:3b:00:5d:5a:c9:35:48:4c:c4:55:5d:
                    f9:ef:6f:16:7d:ea:1c:9f:fb:1c:72:2f:92:89:8f:
                    c7:13:f2:d7:6e:84:66:1e:c7:3f:8e:ef:ce:4e:0b:
                    31:de:1c:c7:b6:b4:bc:ca:75:90:dd:91:4f:c1:df:
                    ab:cf:4e:64:92:15:a0:18:5d:57:76:30:9b:92:4a:
                    e4:29:ef:16:07:e6:ec:75:d9:50:2e:73:ef:31:23:
                    79:6c:35:1b:b3:c7:00:7b:50:48:90:07:d7:2b:79:
                    51:a4:bd:12:41:a8:ec:d2:b5:a0:4f:5e:13:43:14:
                    23:4f:49:f3:cc:39:4c:aa:ae:4a:bc:eb:e4:77:b4:
                    01:63:9f:98:19:e2:03:62:c5:da:0d:2a:86:6e:da:
                    ea:32:11:cf:ce:d5:89:a7:1a:f1:1c:af:a2:d6:0b:
                    f3:66:d4:d2:eb:60:6a:fa:f3:79:33:24:84:fe:0b:
                    2c:5c:de:19:f0:11:ec:f5:fc:84:e1:e1:46:97:00:
                    31:7d:67:61:d7:33:7b:a9:24:8a:54:51:7a:e1:58:
                    8a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:2B:5F:9D:75:38:49:D4:9A:93:89:40:2C:A4:C9:4E:E3:F7:04:65
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DCtfnXU4SdSak4lALKTJTuP3BGU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         da:26:82:f5:93:73:e5:b9:de:83:13:1a:52:09:9b:42:10:e6:
         46:26:25:06:6f:c5:d4:62:ea:9c:9f:cb:ed:77:47:ca:ec:96:
         e4:8e:12:c5:5e:a9:e0:b6:b2:33:72:33:74:c7:29:d0:5a:bc:
         fd:13:61:9c:ab:00:e3:18:09:ac:92:01:29:4e:db:38:72:21:
         ef:a4:5d:a8:51:94:3b:99:b4:16:06:8e:4e:c6:93:e7:16:b7:
         a4:ce:55:83:25:b8:2c:02:95:69:77:15:c5:24:63:a8:e2:99:
         0a:fd:72:0e:3f:b1:59:34:4d:05:23:94:33:fd:db:99:ae:4c:
         4e:8e:f6:ea:4a:21:35:65:9a:0d:74:79:c2:56:08:2b:7e:1c:
         d5:7f:1d:d0:ae:73:02:11:93:5d:4d:95:66:53:6b:e5:43:ed:
         15:1c:1f:25:ee:7d:b0:0c:3d:8b:e5:9a:8f:b3:9f:e3:49:e9:
         a5:6f:d4:c8:39:25:90:fe:1e:1e:28:72:c0:a0:0b:d9:75:4e:
         39:33:ab:0f:84:37:ed:14:fc:64:13:4e:43:14:8d:3f:5f:de:
         8c:7e:ba:5a:72:69:64:10:0f:69:c0:4f:9a:12:da:ac:e2:b2:
         28:04:1c:80:0b:5b:31:b7:73:24:d8:36:69:b8:19:79:30:41:
         e6:b1:4d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:53 2025 by rpki-client