Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/tvgnG0wNMAHV3EFVH72oCqB1b6I.roa
File:                     tvgnG0wNMAHV3EFVH72oCqB1b6I.roa (raw, json)
Hash identifier:          qD8nE+uI3EebAcGHrXKFdemOxwYZnYO1/8znqlCZ4ig=
Subject key identifier:   B6:F8:27:1B:4C:0D:30:01:D5:DC:41:55:1F:BD:A8:0A:A0:75:6F:A2
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       02FC
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/tvgnG0wNMAHV3EFVH72oCqB1b6I.roa
Signing time:             Thu 17 Oct 2024 01:37:08 +0000
ROA not before:           Thu 17 Oct 2024 01:37:08 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     10013
IP address blocks:        110.74.121.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 764 (0x2fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Oct 17 01:37:08 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=B6F8271B4C0D3001D5DC41551FBDA80AA0756FA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:57:78:68:a4:8d:a1:3b:64:be:38:7c:62:b3:
                    b7:46:03:99:8c:64:66:44:63:15:6f:b0:c5:18:35:
                    77:a2:60:87:0c:3f:a2:57:9a:54:52:cd:de:a4:03:
                    66:0a:70:b3:34:d3:5c:0b:56:45:de:7e:31:1e:72:
                    67:d8:42:9a:37:9e:97:3f:b6:77:4b:c0:43:e0:6a:
                    ac:83:9a:b8:25:08:8e:98:7e:57:81:78:c8:e5:b6:
                    db:42:c4:0b:93:43:fa:08:fe:79:0f:d0:be:94:98:
                    6a:ab:08:2b:0d:01:04:f2:18:01:e4:76:ed:61:c1:
                    2a:c5:71:3f:5f:e7:0b:d1:88:0c:11:47:e5:94:2c:
                    e2:95:e3:12:7b:3f:40:58:bc:2e:e3:52:ad:35:6e:
                    07:c3:af:a9:b5:57:2a:7c:47:bb:89:35:0d:cc:69:
                    67:f1:7d:21:98:58:07:f5:ae:5d:8e:52:6b:cf:7e:
                    6a:2f:88:c9:48:fe:50:ab:7a:fc:7d:69:29:7f:e6:
                    f9:21:51:66:35:5c:e8:40:a5:7a:5e:cb:55:49:0d:
                    0f:82:3c:0e:2b:97:ab:44:34:f3:71:fd:2b:c5:07:
                    aa:ec:b2:63:4b:26:a2:2c:76:19:ad:8e:98:c1:64:
                    f6:0d:68:29:30:f1:0f:97:6f:77:18:41:0b:43:3f:
                    f3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F8:27:1B:4C:0D:30:01:D5:DC:41:55:1F:BD:A8:0A:A0:75:6F:A2
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/tvgnG0wNMAHV3EFVH72oCqB1b6I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.74.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:0e:a5:44:85:39:13:7b:2b:b3:7b:c1:21:11:a6:8d:e1:04:
         36:ad:78:99:35:ed:c3:96:32:41:28:27:7a:4b:9d:f7:8c:d1:
         7d:9c:18:f6:4c:8a:90:2a:9b:0d:35:75:92:f9:ec:f5:ac:76:
         73:50:1c:f1:8a:21:cd:34:73:45:da:e0:21:47:07:27:37:a7:
         44:88:0a:30:ba:c8:b4:18:40:60:70:c6:64:a3:52:62:43:92:
         1b:0a:b8:80:39:17:f9:44:50:4a:aa:9f:bb:0a:29:0b:b6:c3:
         25:f8:63:8d:37:70:c8:72:11:4a:17:8a:1d:09:fd:e6:35:eb:
         b6:09:c4:a0:1e:a7:e9:8c:c7:f9:0f:38:26:78:09:c6:1e:c3:
         99:fe:f5:17:4f:37:3b:5b:b5:8e:c6:00:7a:a3:88:8c:de:be:
         0c:55:17:3f:17:52:dd:86:7d:0b:1b:2e:b9:da:8e:44:c3:28:
         df:b0:01:6b:14:9c:dd:84:d8:ca:c5:10:85:ed:00:5e:5d:6e:
         70:56:97:47:80:26:38:c9:10:a9:4b:7f:62:8f:6e:54:b9:82:
         ac:a2:51:7f:48:ea:18:b1:4e:37:69:a6:6c:4f:1c:51:65:f4:
         91:6d:ce:04:c2:62:37:ca:9d:d8:ee:f3:be:63:f7:4b:09:41:
         00:31:0e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:47:47 2025 by rpki-client