Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/yeUOVRInA4kk6xshrgTClZLd83U.roa
File:                     yeUOVRInA4kk6xshrgTClZLd83U.roa (raw, json)
Hash identifier:          XNLiqy3uEQsXEJeQEdiWKYvLjkkgZSsQg8PEHh6HQRA=
Subject key identifier:   C9:E5:0E:55:12:27:03:89:24:EB:1B:21:AE:04:C2:95:92:DD:F3:75
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       099E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yeUOVRInA4kk6xshrgTClZLd83U.roa
Signing time:             Sun 30 Jun 2024 01:38:12 +0000
ROA not before:           Sun 30 Jun 2024 01:38:12 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        110.160.128.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2462 (0x99e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:38:12 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=C9E50E551227038924EB1B21AE04C29592DDF375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:66:a2:03:19:42:52:86:8b:c3:c2:c7:f5:63:
                    be:bb:24:5a:28:ff:31:2f:18:eb:cd:b5:9a:d6:de:
                    79:fa:54:02:a2:0b:f3:8b:71:e6:fc:66:2c:ca:61:
                    fe:18:43:55:cc:94:9f:36:ee:cb:6e:29:41:a6:44:
                    09:d7:8d:d4:f3:d2:30:4b:bb:c0:32:c5:a4:2e:6a:
                    77:d3:02:da:c5:b4:6d:25:ca:78:8a:67:eb:10:c4:
                    d9:c8:8f:42:ad:94:94:a7:74:94:cf:a3:b8:96:c6:
                    b7:00:80:98:1d:78:d0:b7:95:06:9d:38:56:80:e1:
                    53:3b:3f:da:1b:6c:33:c0:ca:b3:cf:b2:06:2d:e2:
                    52:9d:53:ae:1e:a7:6d:ab:62:c5:ed:72:97:54:dc:
                    36:16:23:06:2b:41:cf:d2:f8:40:86:c0:4a:dc:97:
                    f6:ca:59:24:1d:cf:26:55:65:b1:8a:59:0b:f2:cb:
                    4c:e4:9f:69:5a:2d:43:7d:4e:1f:59:d9:ac:76:a2:
                    6e:f0:7f:de:b4:9b:20:a6:02:83:af:50:85:b1:67:
                    33:ea:5e:7e:42:b6:ff:82:29:ea:02:f9:89:b7:6a:
                    22:eb:46:4a:72:93:34:3c:d6:cd:68:53:39:1b:cd:
                    31:9f:d4:ba:c5:4d:4f:2e:93:a3:99:4f:8a:a7:99:
                    de:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E5:0E:55:12:27:03:89:24:EB:1B:21:AE:04:C2:95:92:DD:F3:75
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yeUOVRInA4kk6xshrgTClZLd83U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.160.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         00:b3:41:f7:a0:c0:34:5a:92:5c:5a:3b:83:0c:d7:d5:31:da:
         68:14:83:0b:27:61:bd:e8:c7:ce:b5:c8:2f:b0:2e:27:f7:bf:
         57:05:6b:d3:28:93:22:69:3c:86:60:8c:bd:d5:09:c4:04:93:
         45:90:4e:00:0f:44:a0:ff:3f:a3:d9:f4:f9:34:45:bb:b3:6a:
         d7:85:af:b1:4e:57:57:f7:ed:22:dd:24:fc:b1:a2:2a:00:b1:
         8b:ac:8f:58:7e:71:c8:80:51:ea:dc:20:ad:27:5b:2e:70:68:
         8a:05:2d:57:e8:8a:a6:c5:7b:4c:84:21:c2:d3:33:07:0d:15:
         3e:61:eb:57:8e:68:c0:55:99:18:fe:12:c7:63:3f:0e:58:71:
         bd:63:9f:e3:17:93:34:a8:94:9f:ea:36:03:7f:7a:ee:74:b1:
         1f:29:dc:e3:6c:f4:bf:58:42:c3:04:9a:b4:ce:64:37:aa:71:
         7e:aa:40:df:24:54:06:91:d6:21:91:bc:16:39:89:19:d8:96:
         28:ef:a9:de:72:f3:07:a6:6b:82:af:66:cb:19:19:c4:b4:5f:
         4f:82:cc:82:90:d8:6b:dc:e3:fb:0a:f5:a9:fc:f4:69:2d:87:
         a9:b0:ce:40:b7:5f:f2:dd:c1:26:cb:42:70:5d:7a:dc:96:24:
         75:30:2f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:42 2025 by rpki-client