Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39067/kZsKPMAk9cBQfBmx6ScgdjJy8MY.roa
File:                     kZsKPMAk9cBQfBmx6ScgdjJy8MY.roa (raw, json)
Hash identifier:          J8oHA522ZuTtI5QDuMEs2D9e5piuMp7Rz4DY3A9raFo=
Subject key identifier:   91:9B:0A:3C:C0:24:F5:C0:50:7C:19:B1:E9:27:20:76:32:72:F0:C6
Certificate issuer:       /CN=88EDBD88734B8DBB3586A6D059B8A657BFB3A218
Certificate serial:       11
Authority key identifier: 88:ED:BD:88:73:4B:8D:BB:35:86:A6:D0:59:B8:A6:57:BF:B3:A2:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iO29iHNLjbs1hqbQWbimV7-zohg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39067/kZsKPMAk9cBQfBmx6ScgdjJy8MY.roa
Signing time:             Sat 26 Oct 2024 12:13:03 +0000
ROA not before:           Sat 26 Oct 2024 12:13:03 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     63806
IP address blocks:        2001:df3:14c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88EDBD88734B8DBB3586A6D059B8A657BFB3A218
        Validity
            Not Before: Oct 26 12:13:03 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=919B0A3CC024F5C0507C19B1E92720763272F0C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e6:41:0e:e5:8d:59:ec:76:c6:21:42:91:2d:
                    6a:46:b6:ea:e4:44:a0:c0:2d:84:87:46:e6:22:fc:
                    ff:94:66:05:c5:78:f7:a3:af:8f:11:6b:0c:ee:1d:
                    87:b7:9c:da:19:bb:0b:47:96:c7:a5:97:01:fa:b8:
                    1f:0e:ef:70:e2:bc:6d:72:d6:02:8e:0f:6d:53:da:
                    8e:09:d4:e0:ab:2b:6c:00:cb:f8:05:3d:8a:cc:47:
                    ce:af:3e:d5:e2:31:ff:f4:6c:45:5e:ef:47:06:ae:
                    a0:51:a6:e5:22:fb:ac:33:cf:17:f2:db:1a:69:3b:
                    51:3a:89:71:15:8e:5d:41:52:b6:3a:1a:6a:61:a5:
                    7e:0a:5f:a8:7d:35:fc:1c:3d:c4:4c:e1:b1:55:d0:
                    33:5d:05:bc:2c:79:0d:2c:28:f2:3e:51:f4:06:21:
                    69:b9:00:a7:af:93:3c:99:bc:40:07:a8:74:d3:55:
                    27:bb:79:5d:3b:d0:e2:c6:72:0f:ea:7c:5a:b3:84:
                    c9:63:6f:f8:42:a2:f6:84:22:c9:0e:a2:bc:c8:d6:
                    64:d0:32:32:f4:aa:6c:64:69:ed:5e:f6:af:a0:87:
                    fb:1d:60:70:a9:ba:29:56:9e:3b:9e:9d:bb:27:45:
                    7c:23:e8:39:9e:3a:fd:47:07:dc:c2:83:24:6e:04:
                    d6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9B:0A:3C:C0:24:F5:C0:50:7C:19:B1:E9:27:20:76:32:72:F0:C6
            X509v3 Authority Key Identifier:
                keyid:88:ED:BD:88:73:4B:8D:BB:35:86:A6:D0:59:B8:A6:57:BF:B3:A2:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39067/iO29iHNLjbs1hqbQWbimV7-zohg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iO29iHNLjbs1hqbQWbimV7-zohg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39067/kZsKPMAk9cBQfBmx6ScgdjJy8MY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:14c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:9a:2b:f9:a8:17:18:54:42:51:1c:c2:a4:bb:06:cc:00:97:
         00:bd:77:14:c5:be:5e:e1:74:b8:f7:ed:b7:ef:b7:2d:b0:a2:
         6e:f2:95:46:c6:9b:44:0b:e8:c5:a3:b3:72:72:24:50:80:4a:
         5a:1f:50:5c:d0:11:17:9c:63:24:56:eb:b0:0a:e6:5d:77:fa:
         2f:09:8c:86:ca:f1:37:0f:f4:24:8e:a6:00:02:21:bc:40:d7:
         63:99:68:5c:4e:a7:32:4d:9c:62:d1:48:16:e6:22:33:12:c8:
         79:a2:28:ed:34:3d:25:54:4f:d6:19:a8:64:56:9d:b4:8b:13:
         fc:82:e0:00:2e:eb:79:ac:b4:bb:47:e7:1e:8f:09:24:c5:66:
         72:5d:74:96:9b:3a:e2:86:e2:79:1f:b6:97:6e:0b:93:a9:d3:
         09:29:bf:b4:ea:05:8a:78:fb:a5:97:c1:0a:5e:a6:80:4e:2c:
         ab:4a:65:65:bd:93:42:c7:6e:d4:d1:6f:95:68:66:c0:3c:c1:
         02:32:28:37:32:7d:90:bb:9c:0a:87:b9:df:5a:7b:70:a1:20:
         c1:47:b6:25:ca:ee:22:cd:9a:b6:c0:0b:76:29:6e:db:9b:7d:
         eb:3c:51:5a:5c:23:04:a5:18:6b:0b:2e:63:1b:05:30:36:44:
         74:a8:19:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:34 2025 by rpki-client