Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/373/xxTWlYR_Z62WtPsyv0dfqPHc1DE.roa
File:                     xxTWlYR_Z62WtPsyv0dfqPHc1DE.roa (raw, json)
Hash identifier:          spVEtP+D3XWec/HAbkPh+mpoLmrh55m4KHUiKrvAOYw=
Subject key identifier:   C7:14:D6:95:84:7F:67:AD:96:B4:FB:32:BF:47:5F:A8:F1:DC:D4:31
Certificate issuer:       /CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
Certificate serial:       32
Authority key identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/xxTWlYR_Z62WtPsyv0dfqPHc1DE.roa
Signing time:             Sun 30 Jun 2024 01:32:31 +0000
ROA not before:           Sun 30 Jun 2024 01:32:31 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9615
IP address blocks:        202.224.112.0/20 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
        Validity
            Not Before: Jun 30 01:32:31 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=C714D695847F67AD96B4FB32BF475FA8F1DCD431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a9:8f:a5:51:0b:68:7b:b9:d4:3f:48:bd:3d:
                    f4:78:fa:d7:28:c0:3d:c0:48:9c:cb:b6:ec:69:14:
                    7e:60:49:5a:fb:50:e6:94:63:f3:af:80:4a:7e:3d:
                    9c:19:4f:88:5d:12:0c:db:0e:e8:e0:cc:92:f8:ca:
                    83:5c:cb:5e:e0:40:77:73:ee:a3:6d:ec:63:7f:ae:
                    ff:7f:d5:a0:49:28:55:c4:1c:db:ee:fe:4b:c7:dd:
                    9a:4b:62:48:7c:13:2e:03:23:31:05:32:1d:26:4e:
                    fb:4b:66:16:78:09:54:94:95:bc:c1:44:93:75:88:
                    cd:90:e6:a3:64:de:a3:c7:28:f3:a1:43:8b:c3:21:
                    07:75:e8:1c:99:52:70:ea:8e:d1:1d:1a:fa:79:91:
                    2b:89:d9:e4:14:c1:b1:fc:7c:e7:c8:33:53:13:5c:
                    1b:c3:8d:df:2f:1a:4a:9a:ed:78:fd:78:ae:48:3e:
                    10:03:2a:d8:fe:7f:42:45:a6:fd:09:d9:30:4d:29:
                    6c:3b:9e:e5:1d:96:41:ae:d6:eb:f2:91:b0:76:57:
                    15:03:7e:87:28:57:e6:54:c2:48:ce:ac:bd:26:54:
                    91:e0:31:39:e7:3f:35:72:96:d3:b7:7a:44:0e:17:
                    50:3d:eb:0a:a9:14:c4:ad:d2:3d:55:4a:a9:99:84:
                    b9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:14:D6:95:84:7F:67:AD:96:B4:FB:32:BF:47:5F:A8:F1:DC:D4:31
            X509v3 Authority Key Identifier:
                keyid:89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/xxTWlYR_Z62WtPsyv0dfqPHc1DE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.224.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         aa:6e:fc:00:b5:6e:2c:02:46:4c:ce:d4:3d:10:b3:d4:ac:cd:
         9e:99:96:7e:21:9c:0d:ad:47:d6:8b:a6:31:6e:37:1a:0a:85:
         c4:5a:ae:3b:f2:53:09:f9:dc:9e:e2:77:77:c4:45:44:4b:6b:
         1d:b8:55:1b:36:1b:b9:5d:19:e5:dd:e9:a7:5f:ad:82:ab:0a:
         f9:a4:bf:ce:8e:ab:47:3c:6b:68:14:ed:c9:1f:04:50:4f:f6:
         5a:50:2f:72:ea:d3:37:e6:d5:01:34:cb:04:4d:08:03:39:48:
         c4:f9:99:58:92:92:e4:0d:84:4d:3f:13:dd:01:d4:9c:e3:ff:
         27:45:c4:34:ec:6f:e3:9d:b5:16:d8:0d:75:ff:4e:d5:1f:a4:
         1e:a9:85:88:5d:83:a6:32:d6:8e:73:80:cc:79:ac:50:6f:e8:
         93:c5:ce:02:10:6f:d8:fb:c7:a8:ef:bd:2c:46:6d:66:32:1f:
         15:05:6f:08:6d:37:e1:c2:c1:5d:29:9b:cb:cc:a4:24:36:9a:
         aa:28:c4:ea:74:9e:e7:b7:69:7d:f1:d5:c5:7a:5e:8d:e3:c8:
         f5:3c:f2:05:44:28:33:a5:af:cf:cc:94:c1:ae:bd:44:9d:b9:
         5c:07:e3:b8:f7:f6:d0:c7:de:34:58:1a:26:2e:cf:72:61:b0:
         81:dd:fc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:16 2025 by rpki-client