Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ObCkf6arU0tTemrCZe_WRK0CRq4.roa
File:                     ObCkf6arU0tTemrCZe_WRK0CRq4.roa (raw, json)
Hash identifier:          yNsAE4/cECFcCtMoI2iq8s87v9hcIapQR5FXhmYmWj4=
Subject key identifier:   39:B0:A4:7F:A6:AB:53:4B:53:7A:6A:C2:65:EF:D6:44:AD:02:46:AE
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       031E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ObCkf6arU0tTemrCZe_WRK0CRq4.roa
Signing time:             Thu 01 Jun 2023 16:05:36 +0000
ROA not before:           Thu 01 Jun 2023 16:05:36 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.4.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 798 (0x31e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 16:05:36 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=39B0A47FA6AB534B537A6AC265EFD644AD0246AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:7e:d5:50:53:cc:42:f5:72:f1:72:f2:be:10:
                    ba:54:63:c8:64:0f:2b:9b:ca:23:8d:7c:47:f7:21:
                    3d:51:34:b4:d4:49:a8:80:2e:53:f4:41:30:7f:8a:
                    29:bf:1d:6c:de:c2:5a:15:15:d7:54:53:28:4d:f0:
                    55:ce:ea:8f:6a:c9:9a:74:e3:6a:07:00:bb:24:34:
                    5e:95:2a:f8:be:3b:6a:f5:d6:7b:d4:ca:0f:ef:9b:
                    d1:67:26:d9:89:ae:25:5a:de:d4:21:f3:28:25:15:
                    6e:ef:7d:69:5a:f4:cb:bf:5c:e9:62:66:1f:cf:8a:
                    04:f6:7f:3f:36:d7:52:fc:de:8e:fa:56:13:29:da:
                    2e:a3:61:19:f4:cc:31:f1:7f:c1:12:b5:70:54:ef:
                    34:be:70:92:70:93:cd:f0:eb:1b:d9:92:d6:ca:3b:
                    0e:e8:be:8e:e9:26:c2:b5:80:d6:f0:d1:8b:99:4d:
                    d0:f3:6f:26:f1:06:87:34:97:a3:d1:7a:ab:f7:64:
                    56:c9:db:3f:b6:9a:c6:68:bc:1f:35:6d:bd:9e:90:
                    1c:4f:4a:de:38:8c:80:9d:dd:d9:19:89:23:4f:43:
                    a5:6b:1d:94:55:aa:90:c9:5f:c4:3c:54:74:76:b4:
                    29:76:9f:a9:5f:77:b5:13:69:5c:74:04:34:5b:54:
                    08:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B0:A4:7F:A6:AB:53:4B:53:7A:6A:C2:65:EF:D6:44:AD:02:46:AE
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ObCkf6arU0tTemrCZe_WRK0CRq4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c4:e5:eb:42:1b:66:8b:a0:75:4b:57:a5:2a:fb:31:a8:cc:db:
         44:ab:aa:b8:ec:76:0b:94:22:1b:26:e6:4b:0e:b3:c8:ff:cb:
         6c:33:3b:57:43:ff:be:59:a8:a6:dd:1a:16:1c:00:bf:9c:93:
         55:f7:4a:1b:31:6c:6e:c2:51:62:20:83:bf:28:4c:42:e2:85:
         99:06:81:29:81:df:e1:72:c9:8d:6b:6b:fa:eb:12:95:8e:73:
         28:62:2b:7b:f5:fa:a6:b5:e2:bc:d3:f5:46:d5:72:ff:42:d7:
         93:d0:f3:d6:b3:d1:e3:ec:8e:ae:7a:ef:c0:4c:4f:18:fc:cc:
         0d:eb:8e:68:c8:9e:ea:66:ee:59:80:ba:1b:25:ad:c8:01:28:
         5a:f2:57:03:f8:9f:62:96:c4:de:9f:86:19:df:6a:35:f4:65:
         bc:69:07:c9:c6:48:c9:73:41:4f:0d:9e:58:ea:7e:0a:a7:ca:
         ea:b7:5d:33:ba:3b:41:bd:0a:b1:96:de:28:4d:d0:88:1e:2a:
         fc:1d:b7:1b:99:59:13:16:36:25:36:dc:01:9d:cc:d4:f0:14:
         54:2b:b5:0f:42:5e:23:c8:25:a3:26:b8:8c:cc:5e:7b:6f:69:
         14:1d:0f:e1:14:1a:a7:1d:fd:e9:9d:63:27:f2:af:2a:96:6b:
         3e:d6:47:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:16 2025 by rpki-client