Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/wAbU0Biwal5q7-t9Nnvnt1bdJH8.roa
File:                     wAbU0Biwal5q7-t9Nnvnt1bdJH8.roa (raw, json)
Hash identifier:          yqCo9eap2A3HqqLEEKHpQFxTbfM9gFH4IFrjBniKvMU=
Subject key identifier:   C0:06:D4:D0:18:B0:6A:5E:6A:EF:EB:7D:36:7B:E7:B7:56:DD:24:7F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0770
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wAbU0Biwal5q7-t9Nnvnt1bdJH8.roa
Signing time:             Tue 30 Apr 2024 02:01:46 +0000
ROA not before:           Tue 30 Apr 2024 02:01:46 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.98.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1904 (0x770)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:01:46 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=C006D4D018B06A5E6AEFEB7D367BE7B756DD247F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5f:6c:56:68:e8:70:20:1d:e3:ab:77:77:82:
                    05:51:8c:a5:d4:98:f1:c8:74:78:f2:57:fd:e7:24:
                    42:4b:83:64:e2:f5:e3:5c:60:2d:5c:3f:db:49:b7:
                    05:f6:c4:ed:50:a1:5a:4d:b7:bd:d0:db:4a:e7:3f:
                    4c:d5:2c:e1:25:61:14:b8:82:ac:a1:fb:97:f9:f8:
                    2a:13:ef:60:e8:f0:68:58:ed:6f:26:5a:8b:3d:23:
                    e9:a8:3c:fc:f2:c1:67:ef:ca:69:da:be:23:10:35:
                    ca:55:98:ee:65:39:bf:5b:49:f9:5f:02:61:a9:89:
                    e4:0c:86:4f:b1:7b:79:cc:8c:a2:85:5e:99:39:8f:
                    23:c2:df:49:ae:92:ff:a5:cc:94:c6:c8:10:60:df:
                    76:e6:b0:96:e5:cf:13:73:4c:c3:84:6a:6b:81:81:
                    28:7b:a0:b0:85:91:18:96:e8:6f:f0:62:54:e9:29:
                    9c:d7:f1:39:21:be:f0:ae:a0:40:ff:57:41:a7:1d:
                    84:6f:71:29:3d:14:04:66:4e:06:6a:bd:76:15:6c:
                    8f:51:d7:3c:a6:d7:1b:d0:70:40:75:95:a4:b8:12:
                    5f:80:a6:dd:5b:a9:f0:55:0c:9f:97:7b:59:b3:99:
                    05:ab:e9:94:53:6c:ea:85:5a:3f:a2:60:f1:83:03:
                    be:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:06:D4:D0:18:B0:6A:5E:6A:EF:EB:7D:36:7B:E7:B7:56:DD:24:7F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wAbU0Biwal5q7-t9Nnvnt1bdJH8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:3e:31:c9:df:54:c2:09:b3:1a:8e:2a:90:3b:68:a1:a0:22:
         8f:bf:12:66:76:6c:ac:46:e7:5a:04:f2:4a:03:b7:9c:b3:ae:
         e7:cb:e8:22:f1:df:40:6f:05:bb:98:27:fd:29:af:f5:80:27:
         f2:c5:c1:42:b2:8f:89:a9:6b:01:bf:a5:67:46:33:cc:c1:b8:
         53:d1:c8:8d:3e:38:c1:07:cc:9d:c6:61:40:f1:f4:df:40:f5:
         18:e6:ae:33:29:12:ab:69:85:f8:2b:2d:f1:37:1f:cc:13:ee:
         37:c6:53:5d:8a:9a:76:8e:d3:af:dd:97:19:81:e9:8d:57:d4:
         45:fb:a4:20:c0:e1:d3:f7:1d:07:17:d8:58:33:58:64:aa:00:
         16:ce:4c:1f:6c:c4:e1:2c:3d:f8:93:6a:95:dd:59:cb:4b:ca:
         9c:f0:5c:72:fc:5a:20:47:83:43:d7:b1:d4:87:1d:c1:d5:1e:
         a4:2f:55:59:22:5c:52:37:20:65:4b:e1:f4:04:a1:42:67:66:
         f9:68:1a:f3:ee:8b:24:26:09:f7:4a:4c:2e:09:56:e5:89:39:
         28:58:4c:01:a3:be:99:39:fc:58:f3:04:ff:86:73:10:22:2e:
         7c:5a:42:08:39:50:a2:b8:24:20:88:97:86:06:0f:49:a1:1a:
         02:3f:c1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:47:46 2025 by rpki-client