Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/T3k3dt8N2EJ96JuOkd-cSXFHSno.roa
File:                     T3k3dt8N2EJ96JuOkd-cSXFHSno.roa (raw, json)
Hash identifier:          AIE6ahHOccbI8HS7ssZL+vl04snO4PWJdpdL+BSovSM=
Subject key identifier:   4F:79:37:76:DF:0D:D8:42:7D:E8:9B:8E:91:DF:9C:49:71:47:4A:7A
Certificate issuer:       /CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Certificate serial:       69
Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/T3k3dt8N2EJ96JuOkd-cSXFHSno.roa
Signing time:             Sat 01 Mar 2025 01:28:07 +0000
ROA not before:           Sat 01 Mar 2025 01:28:07 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     131934
IP address blocks:        61.245.208.0/20 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318
        Validity
            Not Before: Mar  1 01:28:07 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=4F793776DF0DD8427DE89B8E91DF9C4971474A7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5e:66:64:44:ba:d2:f7:ce:8f:1a:8a:ba:c8:
                    49:79:af:91:0e:80:80:73:5c:4e:41:36:7a:25:3c:
                    51:da:97:90:a0:00:59:e6:45:90:f3:7b:6b:bb:8b:
                    e3:5d:d1:6c:56:c8:bb:87:20:4d:39:f3:45:ab:34:
                    9e:b9:80:7f:3f:43:28:8b:fe:05:3f:4d:e6:a7:6b:
                    df:8e:20:1a:6a:22:00:e4:92:d2:44:cf:1a:82:38:
                    08:54:8b:65:02:13:c3:38:93:af:4f:90:48:fa:de:
                    7a:d5:f7:11:1a:d7:71:3b:74:0b:72:f9:41:2a:0f:
                    65:50:c9:ea:ed:92:28:10:ec:06:92:ea:bf:ba:83:
                    06:af:b8:4b:d4:bb:15:47:55:c1:c4:bb:64:62:87:
                    33:58:f3:a4:1a:17:f9:5d:aa:90:83:70:6f:a0:ab:
                    4d:d7:5d:c9:16:49:04:d8:ad:1c:64:9a:48:bd:ce:
                    92:ce:63:fd:de:a8:d6:8d:a2:df:f5:04:4f:8d:2c:
                    83:4a:f6:0f:87:9d:b3:67:9a:05:16:da:04:df:be:
                    93:4f:a3:07:5e:23:78:24:e1:e6:be:d0:ff:c5:7c:
                    26:41:a6:e0:52:8f:0b:0f:91:a3:a0:50:2b:6e:d0:
                    b6:52:9d:a7:56:8d:76:85:f5:39:44:42:96:42:1c:
                    54:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:79:37:76:DF:0D:D8:42:7D:E8:9B:8E:91:DF:9C:49:71:47:4A:7A
            X509v3 Authority Key Identifier:
                keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/T3k3dt8N2EJ96JuOkd-cSXFHSno.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.245.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2b:5f:50:e3:89:3f:61:17:d1:94:86:a4:4b:b7:04:11:c2:a8:
         88:9c:9b:24:68:58:5b:fd:e5:58:e1:ba:62:ac:08:0d:e2:43:
         2e:29:5a:48:9e:ea:4b:1c:9c:35:b0:82:d9:12:2e:5c:75:c4:
         af:e5:cc:56:a8:1c:94:b6:8f:7a:8d:57:77:73:32:e5:2d:37:
         21:5a:7d:cf:c9:81:e4:62:93:54:22:96:48:77:be:36:df:f1:
         e7:b4:4f:82:b7:1d:3c:46:86:00:d1:d3:82:c3:c5:3d:e6:52:
         d0:3e:4d:67:a7:81:ee:77:45:73:db:e5:ce:ad:9d:68:8a:c2:
         af:98:d2:42:02:74:50:10:5d:56:b3:73:3a:45:39:8f:8f:b1:
         eb:0d:9c:80:9d:6b:2f:7d:52:71:3f:15:cd:60:da:a2:bc:88:
         36:3b:61:00:3e:ea:bc:04:5b:ee:c5:75:37:a3:53:1a:73:9b:
         c8:d1:9a:a1:47:eb:e1:ee:14:f2:a8:6d:9f:46:7d:47:1a:dc:
         b5:c5:50:ea:4a:2d:d7:d6:e3:ff:82:e5:36:f8:2c:b4:4f:a3:
         fd:b5:b1:1d:68:e1:65:81:d7:6f:75:dc:c7:8a:45:17:74:b6:
         8d:45:ce:40:30:b4:ff:93:f0:2a:75:11:51:6e:3a:42:be:2f:
         5e:66:ab:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:06 2025 by rpki-client