Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/hKtC3qe00y1xoPURGr_sFTr8tsY.roa
File:                     hKtC3qe00y1xoPURGr_sFTr8tsY.roa (raw, json)
Hash identifier:          t+YxviUShfr5Wk2hDIhbkt2Mn3M+Y188Kj0EttICYf4=
Subject key identifier:   84:AB:42:DE:A7:B4:D3:2D:71:A0:F5:11:1A:BF:EC:15:3A:FC:B6:C6
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       050F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hKtC3qe00y1xoPURGr_sFTr8tsY.roa
Signing time:             Thu 27 Jul 2023 16:52:12 +0000
ROA not before:           Thu 27 Jul 2023 16:52:12 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        49.105.15.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1295 (0x50f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:52:12 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=84AB42DEA7B4D32D71A0F5111ABFEC153AFCB6C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:53:f1:ad:18:f2:21:50:9f:c1:69:18:ed:06:
                    89:34:c7:8c:5c:1c:9f:0c:28:38:c8:22:e7:8a:4f:
                    dd:9c:f9:36:63:8e:d6:4a:f6:7d:d6:3d:a2:27:02:
                    86:e6:79:a5:ef:0d:44:5b:73:b0:1c:d4:54:5d:ea:
                    1b:ea:eb:d7:32:a2:8c:37:c9:c0:a7:9b:5a:38:d4:
                    bb:f3:d7:07:c1:b4:af:27:e7:4e:30:0f:9f:60:60:
                    68:0e:bf:67:29:7e:4d:c2:47:b9:b2:4d:ec:51:90:
                    0b:af:18:c5:34:90:73:ae:d1:c1:69:b7:43:4f:39:
                    92:2c:84:6c:c8:52:27:21:bb:0c:44:c3:db:c0:3d:
                    13:2f:c7:2e:09:24:f9:67:22:ba:f9:a9:c2:15:25:
                    89:36:37:9e:14:aa:c5:c4:3e:e5:b9:b6:ed:fd:1f:
                    15:3d:09:a5:7b:f4:bd:c5:b7:d1:de:5f:75:07:e9:
                    5b:4c:98:ff:fe:00:2a:1f:1e:91:76:03:63:f9:f1:
                    88:fb:89:e6:30:70:5b:b1:9e:a7:02:06:09:5e:9c:
                    65:07:79:52:b5:21:47:70:e3:aa:fd:6a:ee:63:93:
                    c5:18:f6:b4:cb:91:79:28:6c:b8:ee:ad:47:08:af:
                    8d:09:fa:3f:b9:19:45:bb:7e:70:23:ea:98:d9:8f:
                    39:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:AB:42:DE:A7:B4:D3:2D:71:A0:F5:11:1A:BF:EC:15:3A:FC:B6:C6
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hKtC3qe00y1xoPURGr_sFTr8tsY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:4b:fe:48:a3:ed:44:61:bc:e8:ca:f8:a3:78:ad:74:f0:f7:
         fd:54:37:10:6a:40:59:ce:5f:a3:82:bf:dd:65:ee:a0:79:54:
         c8:c4:15:41:dd:ea:8d:cc:3b:12:e8:78:de:c4:c6:ca:77:f8:
         52:14:7d:e7:62:91:5f:3e:92:6a:4e:90:2c:b2:52:39:8f:c6:
         ef:25:73:29:a4:35:d9:db:4f:ee:67:d7:8e:38:ac:51:99:30:
         c3:e7:70:74:d1:e8:10:d2:fc:da:81:d0:d9:6a:3f:8f:4d:4a:
         d7:2d:cb:dd:b0:ea:3d:e4:70:c3:13:f5:75:45:86:7c:8a:97:
         6e:d3:67:a6:18:1e:14:73:0f:6d:b7:68:ba:ef:75:ba:2a:d4:
         91:42:54:65:d2:86:e7:29:75:7e:cf:94:73:b7:58:b1:39:d0:
         10:14:54:d7:6c:a2:94:e3:e4:f5:92:3c:3a:0c:a7:7d:a5:6a:
         5d:7a:5c:b5:eb:12:c5:05:7e:70:5f:ed:0a:11:40:75:f6:22:
         84:2e:cd:0e:58:0e:24:19:2a:8f:5b:9e:b6:a5:95:bb:c8:df:
         b9:bf:6f:a6:8b:fc:bc:eb:f7:7e:56:81:a4:4c:6f:31:8f:97:
         54:32:ee:79:c5:0c:43:0f:f5:c4:a3:69:b8:fb:ad:d8:39:f9:
         66:6b:87:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:17 2025 by rpki-client