Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZfRq4nwfwnpRORdF3fKRzWMHBgM.roa
File:                     ZfRq4nwfwnpRORdF3fKRzWMHBgM.roa (raw, json)
Hash identifier:          FuSEJGlzgGwYgs5PsMYDFoqPEC0gQptFosF8FMVad64=
Subject key identifier:   65:F4:6A:E2:7C:1F:C2:7A:51:39:17:45:DD:F2:91:CD:63:07:06:03
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       03EC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZfRq4nwfwnpRORdF3fKRzWMHBgM.roa
Signing time:             Tue 06 Jun 2023 16:03:46 +0000
ROA not before:           Tue 06 Jun 2023 16:03:46 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.171.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1004 (0x3ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  6 16:03:46 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=65F46AE27C1FC27A51391745DDF291CD63070603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8a:6f:37:26:b3:15:0c:70:4b:f9:d1:1c:87:
                    4b:56:8b:7d:8c:0e:4a:dc:a2:0b:50:9d:5b:b1:ce:
                    14:95:1e:42:8b:57:01:02:ac:66:c3:64:e9:73:5b:
                    bf:33:28:23:36:93:69:c3:93:a3:30:12:cd:0f:0e:
                    59:e3:af:7b:38:0f:08:d6:31:e8:bc:23:fb:63:e9:
                    21:18:f9:22:78:dc:51:7f:35:9f:37:db:5f:e2:ee:
                    9d:ab:71:9e:09:34:cc:2e:d0:11:d8:74:86:14:f5:
                    42:35:ba:25:99:72:c9:55:17:15:cc:f1:6d:25:a3:
                    41:48:3c:55:ca:45:8f:49:2f:49:7e:90:a6:e8:04:
                    e3:11:09:07:2d:a2:23:68:29:17:c3:98:c4:38:c3:
                    2c:56:87:b0:de:03:e2:94:fa:e1:1f:26:7c:45:7a:
                    03:5a:27:8f:9a:ec:03:be:a1:46:b7:63:52:99:f0:
                    9b:d9:4b:d1:aa:58:ea:44:6b:c2:d3:a7:9b:ff:0e:
                    28:c6:aa:cb:07:1e:87:d4:df:f9:25:3e:6a:b9:66:
                    f4:dd:e6:41:fb:fc:e8:ff:02:71:dd:4d:25:09:7d:
                    7e:17:1b:b0:9e:ad:da:0a:52:26:e6:9c:2f:27:3c:
                    e1:2b:8b:04:e6:5a:b7:d2:38:c4:fc:28:7a:8c:ad:
                    fd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F4:6A:E2:7C:1F:C2:7A:51:39:17:45:DD:F2:91:CD:63:07:06:03
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZfRq4nwfwnpRORdF3fKRzWMHBgM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:e9:a4:8b:d4:12:11:23:4f:90:dd:9b:bb:80:39:b6:35:cc:
         db:b0:83:7d:fb:d3:7e:7c:75:37:f6:72:8a:a6:87:c0:09:42:
         3a:ec:35:83:72:6d:56:2c:e9:1b:c7:0d:01:02:14:42:e7:00:
         3e:36:71:f4:c4:b2:a8:7f:54:ff:77:72:44:ef:5d:a3:cc:d5:
         19:f5:19:b7:de:28:7f:3d:8e:15:44:6a:28:6f:25:86:3d:e0:
         48:e4:17:90:0c:6f:7a:5e:01:09:42:b5:e1:a6:6e:d2:1f:05:
         57:cb:e3:0f:f1:4a:cd:aa:2e:4e:2c:fb:8f:17:29:05:e9:0d:
         21:f4:50:fb:95:80:ae:0f:e6:1d:88:ba:99:b3:fa:28:e8:2b:
         02:7f:a0:b2:91:bf:e7:18:14:30:1d:c8:be:e1:8e:d6:2b:77:
         65:92:15:08:55:7a:2d:e2:95:d9:b7:44:c5:3c:eb:5e:02:5d:
         4b:99:62:dc:88:5d:8b:4f:5b:48:f1:95:28:7c:de:ad:1a:07:
         28:fb:f1:71:85:2e:d5:16:32:95:f2:6f:bd:c8:33:75:65:bf:
         f0:65:4a:b3:d6:bd:f1:65:9b:c9:2f:f3:a4:7e:c6:29:0d:9e:
         6e:db:4c:56:4e:31:d0:76:4d:3a:4b:0e:ef:e8:00:47:9c:d5:
         0f:f5:2b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:18 2025 by rpki-client