Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/437/FgYvKB6ijJHCMQi11uIO5ImiOd4.roa
File:                     FgYvKB6ijJHCMQi11uIO5ImiOd4.roa (raw, json)
Hash identifier:          mbD7nCQojI8ujhx4woLw7QoF/zG0KIol58Gq+dc6vMo=
Subject key identifier:   16:06:2F:28:1E:A2:8C:91:C2:31:08:B5:D6:E2:0E:E4:89:A2:39:DE
Certificate issuer:       /CN=2542A4C353C9060DE2F169EE4E257F7ABDC5D17B
Certificate serial:       02
Authority key identifier: 25:42:A4:C3:53:C9:06:0D:E2:F1:69:EE:4E:25:7F:7A:BD:C5:D1:7B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JUKkw1PJBg3i8WnuTiV_er3F0Xs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/437/FgYvKB6ijJHCMQi11uIO5ImiOd4.roa
Signing time:             Tue 03 Sep 2024 08:19:51 +0000
ROA not before:           Tue 03 Sep 2024 08:19:51 +0000
ROA not after:            Wed 03 Sep 2025 08:12:07 +0000
asID:                     137462
IP address blocks:        103.113.168.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2542A4C353C9060DE2F169EE4E257F7ABDC5D17B
        Validity
            Not Before: Sep  3 08:19:51 2024 GMT
            Not After : Sep  3 08:12:07 2025 GMT
        Subject: CN=16062F281EA28C91C23108B5D6E20EE489A239DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:eb:ca:2f:d8:10:92:83:6c:d2:ea:19:e1:74:
                    e2:73:e4:08:61:2c:02:c9:eb:ce:df:0e:26:c0:47:
                    5e:60:61:79:a7:f1:8c:eb:2a:f4:70:aa:0a:34:62:
                    3e:8c:e5:68:3d:d9:69:c5:3e:da:11:78:95:ec:b6:
                    a0:9e:e7:88:9a:60:45:f8:94:b6:da:ef:47:a8:2e:
                    f0:e9:36:15:b9:77:a7:08:6f:74:23:2e:d5:eb:b3:
                    f5:8d:36:e3:0e:0b:69:db:f3:50:c1:84:da:19:e4:
                    fe:f2:eb:18:aa:19:ce:19:82:12:39:82:43:7c:20:
                    e5:90:e4:c1:ff:7c:8c:af:17:d1:7d:7d:ea:be:38:
                    63:08:ca:3c:b5:b1:32:52:39:04:4e:0d:cc:79:a0:
                    48:d5:6c:47:fa:28:84:1d:15:fb:b9:ac:0b:3d:5d:
                    ca:9a:60:e4:d0:3e:ae:7c:82:f1:47:c2:88:47:88:
                    a6:ef:8a:b5:5a:c7:2b:0a:9a:18:6b:e8:20:7e:f1:
                    c4:cc:6a:64:09:2b:cd:1d:25:45:09:67:4f:70:15:
                    31:0d:06:90:f6:16:3d:72:0e:7a:2d:45:9c:69:88:
                    bd:49:95:d9:ca:5c:44:68:6c:4d:49:7a:3a:45:06:
                    a3:81:c9:30:d3:29:70:d8:42:7f:cd:7b:20:e6:dc:
                    39:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:06:2F:28:1E:A2:8C:91:C2:31:08:B5:D6:E2:0E:E4:89:A2:39:DE
            X509v3 Authority Key Identifier:
                keyid:25:42:A4:C3:53:C9:06:0D:E2:F1:69:EE:4E:25:7F:7A:BD:C5:D1:7B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/437/JUKkw1PJBg3i8WnuTiV_er3F0Xs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JUKkw1PJBg3i8WnuTiV_er3F0Xs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/437/FgYvKB6ijJHCMQi11uIO5ImiOd4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:4d:61:7c:cc:a6:f0:c6:f7:76:c9:b8:2e:63:2f:b4:3a:c4:
         b7:06:0b:6e:ec:ba:b9:a0:25:a7:a7:40:42:10:64:58:dd:8e:
         83:53:a7:ad:04:e1:c8:88:30:62:cc:b4:e6:60:0a:99:16:03:
         ab:4b:2c:a3:85:c6:88:2d:49:58:35:26:3f:6a:79:f5:97:91:
         aa:2b:62:bc:bf:4b:41:58:ed:f0:27:a4:0f:0a:42:52:eb:ed:
         3d:75:7c:2e:1e:1b:5a:3b:2d:22:3c:db:5f:f2:fe:c8:87:6e:
         b1:8c:79:aa:0b:13:02:44:1f:af:c8:35:42:be:1d:f6:64:a2:
         f2:fa:e4:5a:28:c0:01:52:d2:4a:e5:67:b3:0b:c8:8a:73:8c:
         20:6a:54:fb:63:4e:68:48:bd:ea:c8:e9:de:7b:0b:ac:e7:47:
         be:71:82:0c:16:d2:7c:c0:6f:d5:0e:49:8a:78:36:b2:b1:1b:
         5e:98:9c:7e:97:91:aa:3c:25:6a:72:34:b1:eb:a4:74:8a:4e:
         e6:39:68:8b:5a:66:eb:00:7b:6a:87:2e:8c:2e:79:62:e5:8a:
         27:ec:80:59:35:92:b5:af:f7:05:8a:21:05:17:dc:0f:eb:c6:
         61:82:67:36:8e:b9:cb:78:a3:2d:e7:18:c3:15:67:e3:be:5f:
         1d:a9:21:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:51:57 2025 by rpki-client