Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/daMk8Q7fGLca0Fu2uF8O749982g.roa
File:                     daMk8Q7fGLca0Fu2uF8O749982g.roa (raw, json)
Hash identifier:          jKlRk4TOlJThMiLjGRMkSUjvaolklYVHgm1kGbtElpE=
Subject key identifier:   75:A3:24:F1:0E:DF:18:B7:1A:D0:5B:B6:B8:5F:0E:EF:8F:7D:F3:68
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       09F4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/daMk8Q7fGLca0Fu2uF8O749982g.roa
Signing time:             Sun 30 Jun 2024 01:42:26 +0000
ROA not before:           Sun 30 Jun 2024 01:42:26 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        49.106.192.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2548 (0x9f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:42:26 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=75A324F10EDF18B71AD05BB6B85F0EEF8F7DF368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:14:3d:24:3e:05:fa:41:7d:d7:c5:42:e0:26:
                    34:a1:f4:ad:c8:9f:59:8c:c3:3f:7c:fd:8c:05:6f:
                    bd:a4:e9:25:7d:8a:37:bb:71:f7:58:7f:35:62:ac:
                    34:41:48:d2:55:ef:c2:14:04:da:2b:ba:da:7d:ab:
                    f4:45:e3:4e:44:34:5f:e8:db:3f:b2:9b:c0:c5:6f:
                    8c:54:1e:fc:78:d2:4d:8f:7b:3b:24:fa:55:f4:98:
                    20:79:25:1b:0d:69:a7:bf:0c:bc:ae:86:09:8a:3a:
                    5c:ce:15:4b:d1:a6:c9:bf:ff:5f:c2:f6:07:64:c7:
                    f0:08:8b:1c:2b:62:cf:17:ae:21:39:84:63:d5:c5:
                    99:aa:29:cb:3c:94:63:28:bd:cd:62:db:8a:4a:15:
                    f7:91:bc:40:ad:75:2b:61:37:90:6b:c7:3e:ad:71:
                    df:44:34:9d:5c:0f:d1:3a:b9:68:2b:74:d2:04:cf:
                    eb:66:d8:90:9d:66:3c:6b:d3:b0:f3:4a:a4:bd:ae:
                    e4:32:ad:66:10:95:94:44:f1:b5:a8:aa:26:bb:5b:
                    f5:ab:3f:d3:ff:97:42:41:24:32:eb:d1:27:96:1e:
                    b0:2f:04:4e:d4:fd:a8:10:87:86:fc:47:6f:bf:15:
                    7e:bf:26:49:18:44:4f:35:bf:59:2b:af:6d:85:eb:
                    a9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A3:24:F1:0E:DF:18:B7:1A:D0:5B:B6:B8:5F:0E:EF:8F:7D:F3:68
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/daMk8Q7fGLca0Fu2uF8O749982g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:82:29:52:72:49:41:75:af:a3:b5:f0:2a:17:2f:ff:b0:c1:
         53:bc:89:df:ca:77:a7:53:f1:66:85:ec:2b:d2:ff:3c:f3:a3:
         85:cd:bd:e2:7d:1f:a2:3e:9c:03:fa:2c:e0:a0:7e:34:df:b1:
         08:59:02:e9:ab:4f:cb:76:cb:bc:22:77:27:e6:89:65:ca:c3:
         a6:04:aa:57:56:92:32:8b:75:4c:f3:3b:39:56:ce:a0:34:a6:
         a0:f9:da:a7:22:a2:95:a9:98:2c:00:4d:a5:fb:1e:c4:75:9e:
         44:79:0c:a2:3b:e0:ad:9f:a8:c6:70:82:de:4b:12:ae:9c:12:
         b5:08:ab:a0:89:ad:be:04:2c:23:48:1f:f9:92:85:52:d5:a6:
         6a:d8:39:28:d4:c8:99:c7:73:47:27:13:8a:ee:fc:e3:98:0b:
         83:94:f5:a2:dd:1f:a5:48:a7:49:35:a3:ff:94:7b:e9:94:19:
         cf:10:5b:57:74:f6:e4:85:f8:5a:e7:f2:cd:3f:7a:7a:7e:03:
         53:41:6b:3f:60:f3:53:1e:61:7f:19:48:90:4c:11:6b:71:00:
         a5:1b:ca:24:76:bd:f2:2d:31:a8:d0:15:b9:53:57:77:b2:5d:
         ab:02:3b:37:bd:77:5c:36:15:31:e0:c6:7d:3f:2d:59:99:4b:
         f3:45:fe:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:58:00 2025 by rpki-client