Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/e1GcF57yLeXTavXfEpO0DtIRGcA.roa
File:                     e1GcF57yLeXTavXfEpO0DtIRGcA.roa (raw, json)
Hash identifier:          7cgATMTxZTQFWa2tFebnQt24vreEMZcyc4CQCtBRH/U=
Subject key identifier:   7B:51:9C:17:9E:F2:2D:E5:D3:6A:F5:DF:12:93:B4:0E:D2:11:19:C0
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       09BC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/e1GcF57yLeXTavXfEpO0DtIRGcA.roa
Signing time:             Sun 30 Jun 2024 01:38:25 +0000
ROA not before:           Sun 30 Jun 2024 01:38:25 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        49.103.24.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2492 (0x9bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:38:25 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=7B519C179EF22DE5D36AF5DF1293B40ED21119C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:41:ab:2f:3e:8b:94:b5:f9:79:82:dc:a8:e8:
                    e9:20:50:4b:9a:58:aa:91:5e:2c:f7:29:e6:03:04:
                    df:44:a3:83:85:9f:68:f2:20:9f:b0:67:a6:d7:86:
                    0d:a6:b8:95:1a:70:8f:9c:b0:80:67:88:18:72:bb:
                    87:8c:a3:07:16:a1:d5:b4:4a:16:f8:12:78:a6:2a:
                    4c:bd:d1:ac:51:99:6d:76:74:34:2a:9b:e7:d1:ec:
                    a3:80:ce:9b:25:be:3d:99:2a:b5:9c:6d:81:c3:84:
                    67:ad:b2:58:16:63:da:58:cf:a6:38:c0:c5:5d:fa:
                    8a:d9:b3:4c:56:a4:d5:d3:a1:ae:f2:27:f0:fe:52:
                    82:10:cc:5f:8a:ee:87:fb:14:32:24:8b:39:19:7f:
                    e5:19:50:e1:93:7a:c9:32:d1:e7:8a:65:ea:3a:d0:
                    4b:32:aa:67:0a:20:f2:7d:dc:ab:86:d0:85:35:67:
                    90:36:d3:a9:e1:fc:d0:ca:09:1a:d8:be:b7:50:7b:
                    e3:e4:e5:8b:c5:fe:96:18:e2:69:c3:59:6e:5f:a1:
                    ea:d9:d5:ad:eb:8a:6d:2d:a8:cd:8a:02:40:52:2b:
                    6e:bf:c0:c2:04:ae:cb:b7:7c:3d:ab:34:b4:a0:04:
                    3d:23:f3:30:f7:38:20:15:76:82:fd:b5:25:cd:33:
                    60:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:51:9C:17:9E:F2:2D:E5:D3:6A:F5:DF:12:93:B4:0E:D2:11:19:C0
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/e1GcF57yLeXTavXfEpO0DtIRGcA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.103.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:34:ce:cd:bf:af:f6:bd:3b:f8:bb:fc:8f:88:99:48:44:67:
         c9:55:78:9b:fd:61:42:f5:ae:00:39:c2:36:f2:fa:00:34:7b:
         97:42:80:99:b6:cd:d3:d7:1b:df:f9:9e:71:1b:a6:df:4d:f7:
         23:93:22:ca:12:5f:7f:e7:a2:21:b4:8b:b6:6b:2e:c4:cd:40:
         db:0d:4b:3b:71:a5:d6:ae:f6:d5:3f:92:ee:35:9a:29:a6:92:
         a5:52:e7:0d:a8:f1:fe:1e:5b:02:32:62:b0:06:a9:74:4b:12:
         42:04:9c:86:df:b8:03:eb:e8:e4:aa:ff:96:70:fa:0a:83:99:
         47:a5:90:c0:f6:2f:64:01:d2:70:e4:dc:91:e4:b3:6a:40:c0:
         d7:04:84:30:91:0e:c7:97:0a:0c:0e:8b:a9:d4:cd:e0:fa:00:
         dc:36:62:b3:5a:4a:ae:3a:b8:7a:b9:d0:f1:f8:12:a2:25:5c:
         b5:39:75:49:ff:40:5e:54:85:31:ba:ca:aa:2b:9c:69:d7:b8:
         2c:39:2f:cc:67:2c:40:1f:b6:b6:fd:75:b7:d2:37:75:21:26:
         15:6b:00:d1:68:8b:db:b4:82:3a:1e:6e:da:46:58:d0:16:95:
         95:34:86:7d:0f:f6:80:8d:47:ce:8f:52:7b:44:da:73:e9:c3:
         d0:6d:6a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:07 2025 by rpki-client