Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/CSfnftx7z1HK_hy4T6fS6ugevD8.roa
File:                     CSfnftx7z1HK_hy4T6fS6ugevD8.roa (raw, json)
Hash identifier:          BZQVATzXhyiODOu58GYW4HOVPhH9yO2K1q6/IQrQAL8=
Subject key identifier:   09:27:E7:7E:DC:7B:CF:51:CA:FE:1C:B8:4F:A7:D2:EA:E8:1E:BC:3F
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       6F
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/CSfnftx7z1HK_hy4T6fS6ugevD8.roa
Signing time:             Sat 30 Nov 2024 01:31:47 +0000
ROA not before:           Sat 30 Nov 2024 01:31:47 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     17676
IP address blocks:        61.193.160.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: Nov 30 01:31:47 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=0927E77EDC7BCF51CAFE1CB84FA7D2EAE81EBC3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:87:2d:23:6a:c3:0e:e2:e7:3b:3f:98:05:65:
                    37:c5:6e:3a:00:18:23:de:0e:0e:7a:0c:01:48:f7:
                    e1:53:d4:c3:f8:0f:03:26:5b:e3:fc:d3:1c:3a:8a:
                    77:3a:7b:97:03:6b:0e:9e:f3:44:dd:69:1c:f0:26:
                    bc:04:49:2d:6e:1a:3d:44:36:f6:7d:7e:f4:03:63:
                    24:09:36:38:36:99:8a:2f:40:03:68:22:6b:c1:ad:
                    45:c0:81:d0:08:49:2d:71:80:52:63:e3:6d:90:9f:
                    23:d2:f0:d6:b8:be:2c:ff:c8:d9:bf:40:9a:c6:00:
                    80:d4:13:b9:44:36:cc:19:2e:a0:73:5a:5d:5d:f7:
                    04:e1:55:1d:23:8b:3d:d5:e8:2f:05:24:6a:df:b5:
                    38:dc:15:05:cd:59:b6:9b:7e:d4:6e:f2:ea:fe:4b:
                    e7:a2:6c:dd:09:1f:c5:45:2b:79:5b:4e:07:fe:49:
                    ff:ea:93:42:e4:07:64:2e:2a:b2:83:c1:d5:22:2b:
                    fd:ba:80:e8:9e:5f:c3:25:76:af:78:bb:e3:d0:e5:
                    2e:d4:a1:04:c4:00:9a:82:1f:1d:bd:97:62:3f:4f:
                    ac:d4:e3:7c:6e:a2:cf:fa:9f:1f:bb:6d:44:e7:ea:
                    96:cf:be:73:9a:9b:5e:62:19:10:fc:49:c3:94:09:
                    8f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:27:E7:7E:DC:7B:CF:51:CA:FE:1C:B8:4F:A7:D2:EA:E8:1E:BC:3F
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/CSfnftx7z1HK_hy4T6fS6ugevD8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.193.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         29:d2:9e:cc:7a:42:9e:2c:17:1b:f8:a5:61:37:db:15:a4:c0:
         0f:4d:3d:8f:7b:d6:a2:b9:3a:81:fc:44:46:e7:d2:dd:14:0c:
         42:ff:6d:b6:f4:43:cc:b9:e4:e3:a9:f4:ed:92:84:ab:13:02:
         37:d3:60:17:ae:fa:a4:21:7b:89:13:d7:6a:e9:64:da:69:cc:
         0a:44:f8:77:c9:3a:f6:6e:0b:95:fb:6f:74:cc:80:c1:d0:b6:
         99:52:96:af:e3:b7:1c:ab:47:4c:95:ca:2b:d9:8d:e8:0d:1a:
         d2:57:44:53:69:a9:ac:aa:87:dd:f5:d6:8c:72:9a:9d:99:0e:
         6f:c3:5b:49:ae:30:77:92:d7:05:96:6a:f5:9c:f1:2b:c0:6c:
         c1:dc:c3:59:04:04:b5:ab:49:ea:1f:ee:51:b1:60:9f:d5:9c:
         4f:6e:d8:64:ae:c5:9e:ea:f7:f5:c8:18:38:8e:be:55:40:88:
         6f:15:56:4f:58:45:c2:3e:5c:f4:81:13:e0:f4:4a:e8:4d:5f:
         a3:4b:94:58:03:70:7b:1b:7e:48:2a:ea:fe:b3:f2:1b:dc:9a:
         9b:a8:c8:c5:d2:e3:bc:d3:b9:e2:cd:16:8e:29:2d:95:92:32:
         c9:fa:8a:ad:4a:b5:44:b4:2e:cc:71:5e:ec:0e:2e:69:cb:b9:
         8f:12:88:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:29 2025 by rpki-client