Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GeakLWAk-Mj0M0iGT27LzyEiQ4o.roa
File:                     GeakLWAk-Mj0M0iGT27LzyEiQ4o.roa (raw, json)
Hash identifier:          4ksAIyiZZKGJV8VsaTzbSfKOBrITw4ZGikPnhb/DdUA=
Subject key identifier:   19:E6:A4:2D:60:24:F8:C8:F4:33:48:86:4F:6E:CB:CF:21:22:43:8A
Certificate issuer:       /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial:       30
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GeakLWAk-Mj0M0iGT27LzyEiQ4o.roa
Signing time:             Thu 27 Jul 2023 17:00:16 +0000
ROA not before:           Thu 27 Jul 2023 17:00:16 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        146.160.0.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
        Validity
            Not Before: Jul 27 17:00:16 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=19E6A42D6024F8C8F43348864F6ECBCF2122438A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e0:ea:69:67:6f:18:ab:50:b8:1a:c6:5b:2a:
                    1f:68:0b:62:52:e2:ea:60:59:2a:0b:3f:f0:c5:8a:
                    cd:12:e1:2a:07:78:8d:7e:ab:a7:e0:ea:c3:4a:e5:
                    0b:52:22:9f:bc:3f:1d:82:18:fa:e5:7b:86:8f:e9:
                    72:44:cc:45:f7:5c:53:61:22:48:dc:48:95:d9:c7:
                    43:06:18:d1:45:2e:ec:67:b4:04:e1:a6:da:cc:1f:
                    c3:10:7f:05:91:1e:b2:e4:f2:8a:07:4a:33:02:49:
                    76:18:27:03:69:45:a6:b3:e5:81:15:4c:3c:da:86:
                    da:49:bb:95:38:24:a2:e0:64:49:49:ab:d2:60:58:
                    37:aa:86:2c:bb:b4:0e:fb:c8:8e:52:d3:9f:7b:09:
                    e9:5e:fa:57:89:e5:38:e6:73:6c:f8:71:43:d5:76:
                    2b:db:7c:b3:08:c2:dd:34:af:a9:94:a5:fe:df:a5:
                    64:59:24:e4:59:fe:16:93:c5:02:92:e3:34:72:ea:
                    1c:25:a0:0f:b0:4f:af:01:26:a7:ff:76:f0:06:ae:
                    d5:60:7d:e7:a2:6e:05:e3:38:64:46:a3:1b:b7:58:
                    72:c6:b7:46:2b:d2:b9:f4:d3:79:c2:51:04:90:49:
                    90:43:42:11:05:7e:67:7d:9f:c8:4b:c7:7a:f8:25:
                    3d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E6:A4:2D:60:24:F8:C8:F4:33:48:86:4F:6E:CB:CF:21:22:43:8A
            X509v3 Authority Key Identifier:
                keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GeakLWAk-Mj0M0iGT27LzyEiQ4o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.160.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b1:23:9b:1d:d8:48:0c:4a:0e:66:fa:32:96:bd:f2:fc:ad:9a:
         ee:59:6a:c7:66:27:fc:e0:77:69:46:b2:4d:51:99:a7:68:11:
         f1:f5:96:16:dc:5d:6d:5e:af:93:a9:5d:bd:60:51:0f:dc:b0:
         7a:44:af:23:5a:fc:c1:c4:14:7d:d3:d9:25:f1:3e:ed:1a:a7:
         16:07:6a:f5:32:7f:d8:1c:25:af:dd:0d:54:aa:ee:44:1c:18:
         bd:23:82:93:b6:e2:13:dc:e1:c7:2c:c7:10:4c:4d:aa:39:3f:
         5f:2d:c9:d2:d9:2d:11:5c:c1:d7:45:9d:f3:7a:42:09:47:1b:
         97:7c:be:af:37:de:49:1c:32:ad:b6:c6:57:b6:06:4f:34:70:
         41:9d:d3:56:62:5f:bf:2e:a3:64:19:4f:3a:63:e4:e4:dd:e6:
         57:95:6b:e1:71:21:7b:c3:dc:1b:d7:60:6d:ec:bf:64:5e:7c:
         e1:06:2b:69:6f:4c:a6:11:de:44:1b:09:cb:0f:ef:1b:65:b1:
         8a:c4:7e:9f:61:41:0b:a9:80:62:19:06:15:f4:f5:66:00:a4:
         7a:eb:f7:47:4b:b2:96:a0:b9:8c:ab:76:0e:20:db:17:03:f5:
         2c:10:fb:31:ab:f9:ed:39:5c:65:ea:81:fd:1d:a6:61:65:9f:
         d0:57:69:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:35 2025 by rpki-client