Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/JBg3NKXfdyOWOxUwCUq9K80SYxw.roa
File:                     JBg3NKXfdyOWOxUwCUq9K80SYxw.roa (raw, json)
Hash identifier:          VFzKHqG26NQP2jvwPlFhG0N89LUFrI2I4lrmVIPxHUs=
Subject key identifier:   24:18:37:34:A5:DF:77:23:96:3B:15:30:09:4A:BD:2B:CD:12:63:1C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0B44
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JBg3NKXfdyOWOxUwCUq9K80SYxw.roa
Signing time:             Thu 06 Mar 2025 07:08:36 +0000
ROA not before:           Thu 06 Mar 2025 07:08:36 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        1.75.136.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2884 (0xb44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  6 07:08:36 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=24183734A5DF7723963B1530094ABD2BCD12631C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7f:3f:f3:79:7c:23:84:39:74:6a:ba:73:ad:
                    2c:75:8e:2a:79:35:9c:41:1a:c2:46:51:f6:1e:3d:
                    7d:58:7c:fd:35:ee:18:a5:c7:65:ef:95:3b:94:6a:
                    3a:07:ad:e1:8f:c2:ce:6e:bf:f9:4e:79:05:4c:72:
                    b1:6c:d4:1b:e9:78:45:73:7d:5f:54:28:32:f2:ab:
                    ee:f5:25:4c:39:a8:60:54:49:42:20:dc:e7:b7:b3:
                    6a:52:d7:fb:f0:58:de:4d:2b:6f:08:71:b7:86:f7:
                    2a:fe:f7:ba:11:24:78:ea:21:41:fc:81:8a:ab:2b:
                    d0:d5:ec:32:ad:c1:b7:c9:67:72:17:45:a4:d9:17:
                    73:ec:94:7b:77:66:b1:ad:47:9b:58:43:17:5c:1f:
                    41:fd:b4:a9:06:7e:2d:44:ec:5e:4e:6c:1f:6f:02:
                    b1:65:d4:22:df:9d:d2:84:ae:c6:89:8d:99:f6:c6:
                    28:52:fc:63:d7:94:8a:ea:da:fe:50:b6:d4:99:57:
                    f8:13:a2:a7:d8:e7:fc:32:99:78:11:64:89:66:b1:
                    f0:63:5a:34:ea:be:7c:ba:88:d8:bc:e7:f0:02:05:
                    e2:7b:14:f3:f2:99:9c:e2:ab:77:ca:31:21:1e:be:
                    40:05:11:24:ce:03:74:5f:e0:cd:14:f4:c5:52:4d:
                    ed:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:18:37:34:A5:DF:77:23:96:3B:15:30:09:4A:BD:2B:CD:12:63:1C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JBg3NKXfdyOWOxUwCUq9K80SYxw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         37:ea:f9:55:0d:3f:84:50:a1:8c:3f:9b:b8:28:c6:7c:25:ad:
         69:b6:60:6c:05:75:7b:72:54:fc:5c:70:ef:7f:83:0f:5b:7c:
         05:4d:5b:88:15:00:f6:95:b3:f3:93:6e:31:1e:0a:da:35:47:
         a0:8f:22:ee:eb:f8:88:aa:6b:86:91:cd:d8:ff:89:41:88:95:
         43:e1:11:0e:cb:13:74:bd:1c:3f:16:d4:ce:ac:01:d9:e5:af:
         46:0d:a2:84:63:3d:3c:e0:ac:64:5e:0e:1f:46:94:fe:56:8a:
         9e:16:fd:82:ff:5a:aa:bc:7a:91:03:c9:d0:46:ef:90:e0:eb:
         9d:77:a7:2d:e4:3a:8a:72:7d:e3:0e:97:74:23:f4:39:e4:a2:
         1b:85:0e:44:98:5c:37:c1:8d:e6:ff:2b:ac:b8:25:73:6b:23:
         db:16:f6:8e:e9:ca:64:d7:3f:b9:79:39:d4:49:3c:ac:e7:0b:
         f6:d3:d4:e2:35:0d:fc:06:67:71:f1:6e:f9:d8:54:fc:00:f6:
         db:ae:90:7a:62:90:c9:3e:9d:3e:66:61:89:5b:2e:86:c8:fd:
         07:c9:a5:ec:97:eb:01:8b:2c:0f:a5:31:ba:58:38:89:1d:fd:
         56:be:f1:d5:d7:37:f9:58:99:fb:8f:2d:2d:05:ea:b8:a6:f8:
         27:29:44:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:37:38 2025 by rpki-client