Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_u7yOS3a-A91IIguciN3BLxfLno.roa
File:                     _u7yOS3a-A91IIguciN3BLxfLno.roa (raw, json)
Hash identifier:          2CtJj7DoaUl3nxgJa6n5EcwiRc11UwGJxWDWqFoSeBE=
Subject key identifier:   FE:EE:F2:39:2D:DA:F8:0F:75:20:88:2E:72:23:77:04:BC:5F:2E:7A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0433
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_u7yOS3a-A91IIguciN3BLxfLno.roa
Signing time:             Tue 06 Jun 2023 16:09:11 +0000
ROA not before:           Tue 06 Jun 2023 16:09:11 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.4.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1075 (0x433)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  6 16:09:11 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=FEEEF2392DDAF80F7520882E72237704BC5F2E7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f8:d7:17:f4:c5:0a:3e:fa:50:dc:6e:cf:fd:
                    8d:27:b5:d4:9d:c1:bf:5c:ee:23:a0:e5:8c:72:17:
                    36:e4:6f:83:3d:af:4a:23:d4:75:37:65:0b:55:7d:
                    80:7a:66:f5:99:69:b5:75:87:64:d1:58:1c:b0:75:
                    82:8b:97:a7:d7:ca:71:55:6c:8a:ba:99:d2:60:bb:
                    36:97:39:af:67:f6:a4:15:33:6d:32:99:e9:05:d0:
                    0b:6f:3c:84:da:c2:68:3e:4c:18:c1:1a:91:67:de:
                    5e:00:89:67:a8:f4:c1:f2:ac:e8:28:ae:a1:36:0c:
                    73:ba:fa:1a:78:53:9b:d5:3c:97:4c:b4:62:6d:b2:
                    e7:40:8f:eb:e2:4b:8d:23:51:f3:a0:db:50:39:46:
                    fc:f7:51:72:0f:f5:90:f5:01:50:56:68:e9:fc:c4:
                    1f:75:13:c1:90:2b:31:30:93:dc:9f:8a:0e:bd:5d:
                    52:f6:9f:e2:74:10:13:53:a0:cc:53:68:31:17:00:
                    da:46:f3:0d:6a:7c:a0:4f:f1:97:47:77:49:ae:7b:
                    fb:30:89:7a:28:37:e1:12:27:f2:a7:cc:1c:50:1c:
                    b9:34:30:04:de:74:ab:01:ac:04:38:6f:a0:15:45:
                    17:65:50:c3:6e:b0:6a:9f:53:5f:24:60:c5:5b:d6:
                    0c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:EE:F2:39:2D:DA:F8:0F:75:20:88:2E:72:23:77:04:BC:5F:2E:7A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_u7yOS3a-A91IIguciN3BLxfLno.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:ea:7d:03:2a:3e:88:62:9f:06:98:2e:f4:ba:61:1a:8b:71:
         73:b2:ec:02:18:1c:0c:7f:ba:33:8c:6f:74:5b:14:be:bd:7f:
         3c:19:6f:37:f9:6e:8e:ac:98:8b:52:d5:3e:d3:54:55:ab:1f:
         fb:62:8f:93:ec:51:c4:84:d6:d6:e1:8f:96:68:c9:46:29:38:
         7a:20:9b:5a:b0:66:ac:eb:cf:f1:1e:25:6a:77:bb:c2:7c:45:
         1f:a6:c3:4a:02:bb:3b:b2:94:67:77:14:ee:2f:8a:80:9a:96:
         0e:a6:e0:3d:bc:c6:cf:27:78:5b:29:17:87:bf:4f:7e:24:a9:
         ff:0a:ae:19:ff:be:e3:46:3e:a5:62:19:7e:48:a5:a0:04:5b:
         45:a0:88:7c:97:24:95:af:c2:15:04:de:95:7a:f5:c1:d8:43:
         bf:2b:89:bb:ea:58:63:b4:84:85:4f:48:b6:53:71:78:87:82:
         b4:aa:40:9d:7b:ea:fa:f8:2d:bf:82:f2:f1:c4:bc:4b:c7:cb:
         3d:89:d1:c5:8b:45:d2:a7:94:38:c3:6b:7e:19:88:f9:25:c4:
         3a:78:14:d7:1f:b0:d1:cc:2c:b7:2d:4d:fd:72:97:da:3d:62:
         59:00:9f:43:4d:40:34:8d:0a:5e:e2:47:d4:99:fa:f9:17:1f:
         e2:88:1d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:57 2025 by rpki-client