Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/465/x99gtkF1Slw7OyJSETRzHBGeIU0.roa
File:                     x99gtkF1Slw7OyJSETRzHBGeIU0.roa (raw, json)
Hash identifier:          5A1zwkbr7sK6lbiXV6uoPxdNVlyEvl/mE0dmxr48Zz4=
Subject key identifier:   C7:DF:60:B6:41:75:4A:5C:3B:3B:22:52:11:34:73:1C:11:9E:21:4D
Certificate issuer:       /CN=47A27188E214C396304497DB571B23F93EBFBDC6
Certificate serial:       5F
Authority key identifier: 47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/x99gtkF1Slw7OyJSETRzHBGeIU0.roa
Signing time:             Sat 30 Nov 2024 01:28:50 +0000
ROA not before:           Sat 30 Nov 2024 01:28:50 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     10011
IP address blocks:        61.121.224.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A27188E214C396304497DB571B23F93EBFBDC6
        Validity
            Not Before: Nov 30 01:28:50 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=C7DF60B641754A5C3B3B22521134731C119E214D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7c:56:81:65:43:04:8d:77:98:ad:1d:73:ba:
                    3e:10:a4:20:81:77:07:f9:6a:02:72:61:ed:9b:c3:
                    66:12:c7:40:b0:40:e3:23:78:96:1c:9f:9c:62:d7:
                    c7:2b:32:d3:e4:0c:69:60:42:6d:0d:65:8a:60:2c:
                    65:e5:1d:0b:08:f2:83:bd:f7:ab:25:99:b1:97:75:
                    99:d7:92:ee:47:8d:d8:de:bb:83:94:eb:16:fc:5c:
                    23:82:0e:41:ad:fc:68:11:e1:f5:c4:7e:74:24:27:
                    e2:da:55:d6:28:40:93:fa:5d:d0:b1:c5:db:cc:e0:
                    ba:29:9b:c4:db:98:9a:40:2d:b2:b6:67:73:bd:4f:
                    18:84:9f:87:b6:36:29:97:cf:e5:f5:06:fb:03:0f:
                    cc:b0:27:1e:81:4f:d0:66:0f:e4:34:7b:84:f1:42:
                    d4:a9:1a:72:ee:5c:c2:96:8c:26:ec:f1:a7:bc:57:
                    56:39:29:df:6f:e2:8b:74:f5:4b:61:ec:a2:c9:a4:
                    a4:be:28:4a:54:e8:08:50:8a:b2:16:a7:4e:10:d8:
                    4a:70:c8:ec:b9:38:e3:22:71:ac:ca:60:29:1a:2b:
                    f1:1d:19:0c:c2:a8:a9:e3:5e:0c:93:15:60:df:8e:
                    40:fc:c8:3a:da:47:dd:89:ad:49:c5:5c:62:b6:c8:
                    59:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:DF:60:B6:41:75:4A:5C:3B:3B:22:52:11:34:73:1C:11:9E:21:4D
            X509v3 Authority Key Identifier:
                keyid:47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/x99gtkF1Slw7OyJSETRzHBGeIU0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.121.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         80:f4:cf:1f:58:c0:82:27:38:6b:b9:d1:22:6f:70:0c:d1:50:
         20:b4:a2:be:35:91:c6:41:5a:d2:a4:67:4e:89:cb:76:ba:06:
         fb:6a:b3:a5:8d:5a:a8:9a:d2:1b:92:2c:06:8d:69:74:0d:56:
         55:30:7f:13:9f:1e:e5:f6:55:db:b5:5d:74:c6:8e:ca:cc:35:
         08:64:ba:db:c2:63:43:51:03:7a:cd:44:15:e7:ad:90:c4:75:
         e9:9b:84:1c:59:51:1e:f5:ee:4b:4b:9e:31:5f:02:4a:48:21:
         60:07:4a:c2:57:ad:09:83:97:aa:a2:fa:d8:04:3c:9b:ba:ac:
         0b:24:9f:3c:5f:fc:e2:3c:97:87:4e:4f:8a:28:d6:3d:c1:e9:
         0b:9a:63:18:61:a5:b1:8e:1c:96:a4:63:d2:5e:f0:cc:02:b2:
         d0:02:88:08:9d:18:df:f5:6d:44:8a:da:04:2b:7f:6c:ed:c6:
         89:fe:5f:ef:b0:b3:19:87:1f:5f:25:48:8c:19:b0:14:fa:43:
         89:58:52:2e:61:fc:55:89:d3:74:c8:dc:cd:55:ba:bd:98:e6:
         7e:6b:cb:f2:85:95:15:52:95:a5:a3:fd:3a:ef:14:24:ac:15:
         3c:e2:8f:82:51:49:62:a9:a7:a0:5e:51:6e:e5:93:bb:3b:53:
         da:c6:ee:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:07:19 2025 by rpki-client