Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/9p5ae6-4oVy-scrrWC9bRSj-fes.roa
File:                     9p5ae6-4oVy-scrrWC9bRSj-fes.roa (raw, json)
Hash identifier:          YyzR2ehusdW55VP31ovjnWQ11NizOHKDvJNy5E4foDA=
Subject key identifier:   F6:9E:5A:7B:AF:B8:A1:5C:BE:B1:CA:EB:58:2F:5B:45:28:FE:7D:EB
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       02EE
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/9p5ae6-4oVy-scrrWC9bRSj-fes.roa
Signing time:             Fri 11 Oct 2024 01:16:51 +0000
ROA not before:           Fri 11 Oct 2024 01:16:51 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        49.242.0.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 750 (0x2ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Oct 11 01:16:51 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=F69E5A7BAFB8A15CBEB1CAEB582F5B4528FE7DEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:20:68:67:90:79:57:90:10:4a:00:42:05:62:
                    f2:60:e4:8d:62:4a:76:8f:9f:4d:e4:90:1e:ce:fe:
                    ac:0f:9e:b2:2e:30:eb:47:42:28:f0:c9:ea:ca:b5:
                    a7:e1:ed:61:6f:d6:e7:f3:45:48:c8:f0:54:09:c2:
                    9e:7a:8d:44:c3:56:e1:7f:53:54:43:ef:86:d2:00:
                    f8:86:91:30:c4:04:0d:89:d5:9d:82:96:95:56:45:
                    7e:cc:98:3a:bd:f4:33:82:00:7f:d3:19:88:2a:be:
                    bb:7d:f7:3d:ae:59:f0:f0:94:fb:76:e3:9b:41:07:
                    74:5f:1c:c8:7c:39:6e:53:c5:a5:2a:af:ae:d8:eb:
                    37:4d:dd:1d:df:a3:63:a1:93:52:36:96:e0:01:75:
                    2f:1c:97:d6:e7:3d:b6:76:fc:14:6d:9c:4b:24:c0:
                    aa:55:46:c0:cc:a5:ee:3d:3b:83:16:a1:f0:07:75:
                    8d:b2:d0:68:fc:84:54:6e:c9:77:58:fb:71:94:5a:
                    8d:4e:ba:cd:c6:72:7e:e6:ab:bc:4d:2c:fe:0b:bb:
                    37:53:7f:fd:7d:b2:d6:47:48:23:3e:7f:0f:b6:ab:
                    9f:3d:0f:41:a5:39:0b:75:ce:93:8f:e6:d4:92:f6:
                    98:ee:c0:e5:75:93:ba:d5:c0:d4:90:8e:2b:39:27:
                    9c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:9E:5A:7B:AF:B8:A1:5C:BE:B1:CA:EB:58:2F:5B:45:28:FE:7D:EB
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/9p5ae6-4oVy-scrrWC9bRSj-fes.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.242.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         76:a7:27:86:af:02:dc:1f:17:56:dc:dd:93:08:89:e3:7c:75:
         9f:bb:38:2d:bc:bb:bb:e9:a6:fc:fd:7d:25:68:bd:ec:1b:9b:
         55:bf:8c:06:13:e8:e9:53:57:54:e7:35:64:85:e7:4a:18:bf:
         4c:50:d7:6d:98:88:3c:98:98:4c:fc:35:2e:3a:b7:ab:c1:e8:
         62:bd:03:97:4b:00:3a:ef:e2:77:22:d4:ac:5d:f7:2d:ad:61:
         4b:b6:15:fc:76:7a:7b:a7:5f:15:d3:ee:e8:9f:ed:78:42:f4:
         23:0c:6e:7c:4f:80:c0:99:43:ac:b6:a7:5a:87:1a:f4:b4:8a:
         61:4b:31:d2:2b:76:7a:d4:5e:8b:dc:43:3d:53:35:60:e1:38:
         78:20:a6:69:ad:cb:f2:ee:4d:54:50:e4:38:ca:46:4d:ec:e0:
         7a:b7:c6:5e:a4:f4:d7:ea:b7:f0:b8:65:be:10:36:b8:e7:ab:
         2f:dd:74:ca:0c:8f:69:86:3e:fa:83:45:8d:af:07:2e:90:3d:
         06:ad:33:b1:40:d3:66:a4:ac:11:e9:6e:fd:ad:d0:bd:13:9f:
         d2:15:31:56:3d:af:e3:21:cc:a3:9d:55:9a:da:37:f7:ac:98:
         f5:c1:97:b4:c4:d9:ae:88:99:75:6c:f4:0b:71:f1:80:17:a1:
         6f:b3:e9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:18:48 2025 by rpki-client