Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Tap6eEDOY0IHPfY59nAVnZ_XB48.roa
File:                     Tap6eEDOY0IHPfY59nAVnZ_XB48.roa (raw, json)
Hash identifier:          iZNwksNPlHgdq01P6nI2BZw7DRmMmBeXNSzEVtVcmM4=
Subject key identifier:   4D:AA:7A:78:40:CE:63:42:07:3D:F6:39:F6:70:15:9D:9F:D7:07:8F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       063E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Tap6eEDOY0IHPfY59nAVnZ_XB48.roa
Signing time:             Tue 30 Apr 2024 01:31:26 +0000
ROA not before:           Tue 30 Apr 2024 01:31:26 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        1.76.64.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1598 (0x63e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:31:26 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=4DAA7A7840CE6342073DF639F670159D9FD7078F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fa:a1:33:21:18:16:a2:07:97:b2:71:1b:8c:
                    80:7f:39:69:bc:76:8b:1f:3e:9a:4e:d7:b7:06:be:
                    b6:dc:51:d1:c0:02:4e:17:46:db:ac:8f:04:e3:57:
                    af:8f:ed:b8:4e:fa:8d:bb:08:40:74:5e:7e:ce:7e:
                    80:a5:e1:5b:b3:3a:fc:bd:46:96:b7:0c:81:dc:77:
                    59:c4:f1:21:90:f6:e6:c4:e3:c6:aa:79:14:85:96:
                    7e:3c:92:63:c0:72:86:db:18:3b:65:b8:dc:ac:9a:
                    c0:c1:54:5a:84:3e:56:d1:59:70:23:a7:42:c0:4b:
                    e1:45:5b:86:4a:4f:27:cc:4d:ab:b1:b7:4a:b4:67:
                    09:77:42:ef:53:1c:12:e2:f4:93:cc:8a:10:1c:c3:
                    8f:07:c1:a4:6a:cb:1b:72:99:bf:ff:64:78:d2:6c:
                    3c:1a:92:a4:46:df:1a:24:89:8e:f7:12:11:00:8f:
                    cb:15:02:62:51:18:84:b2:1f:ae:d6:a3:db:11:5e:
                    45:87:1e:a1:d4:67:72:a1:24:fb:00:d3:3c:07:7e:
                    a2:02:ed:82:0f:5b:a6:d7:52:2a:6b:50:98:49:3d:
                    e2:a5:ff:65:c4:0f:ae:f2:3e:c5:2b:3c:98:63:4b:
                    c2:81:1a:38:12:15:b7:eb:e7:04:9d:89:b8:21:c6:
                    e8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:AA:7A:78:40:CE:63:42:07:3D:F6:39:F6:70:15:9D:9F:D7:07:8F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Tap6eEDOY0IHPfY59nAVnZ_XB48.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.76.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1f:3a:dc:e0:4e:74:22:b5:0e:ba:24:74:dd:f4:5a:8a:ed:50:
         8c:34:4f:ae:d6:6b:2f:33:06:7b:8a:e3:23:dc:7d:80:03:8f:
         b4:3e:20:54:c9:b2:d9:47:35:14:16:d5:d7:f5:dd:53:89:28:
         9e:6a:b4:57:0f:30:51:38:80:e3:e7:52:8f:c9:7e:0d:96:bb:
         7f:ed:b9:ff:0d:0f:de:be:a8:f0:2c:ed:d5:2b:05:d7:c2:9f:
         71:55:5f:4a:a4:cd:bd:2f:77:f8:f6:f7:e8:82:09:92:f3:a8:
         ee:fd:3b:32:c5:40:81:de:91:7b:0b:23:9b:e9:2f:c5:30:59:
         39:c6:19:4d:f7:01:6e:61:c2:25:bc:dc:79:50:7b:b3:b2:b7:
         f6:00:bd:b9:3a:3e:46:aa:0d:3d:99:b7:71:a9:95:df:c0:73:
         33:f3:b8:23:9b:70:ee:5c:c2:08:4d:73:6b:72:23:d2:66:bc:
         7c:2e:3b:1a:75:53:07:47:30:4f:f2:99:d6:2e:ce:31:9c:84:
         d8:ac:1f:79:bf:2c:ea:5d:30:29:30:cf:df:9a:29:b6:36:56:
         ad:f7:73:60:57:e0:09:a9:f7:47:21:9c:d7:7a:83:5c:07:b4:
         79:83:5b:39:8b:7a:c3:01:88:f9:ae:7c:e1:d4:a1:2a:97:91:
         ce:e7:9f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:15 2025 by rpki-client