Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/t8hhpUpAf99b-L4ywigQbHZTX0g.roa
File:                     t8hhpUpAf99b-L4ywigQbHZTX0g.roa (raw, json)
Hash identifier:          emDwPeenoTMJajo5wA/sfqEH6L6e235p81fEcbdSfkQ=
Subject key identifier:   B7:C8:61:A5:4A:40:7F:DF:5B:F8:BE:32:C2:28:10:6C:76:53:5F:48
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       8A
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/t8hhpUpAf99b-L4ywigQbHZTX0g.roa
Signing time:             Sat 30 Nov 2024 01:29:24 +0000
ROA not before:           Sat 30 Nov 2024 01:29:24 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     4685
IP address blocks:        221.113.64.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Nov 30 01:29:24 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=B7C861A54A407FDF5BF8BE32C228106C76535F48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ac:86:05:f8:9f:ec:d0:9e:03:d3:e6:3d:b6:
                    fd:92:f7:fd:37:a2:48:92:83:74:da:00:09:c6:40:
                    37:c5:94:d9:da:99:9c:d2:cc:5c:d2:09:60:05:08:
                    97:af:7e:c0:40:0f:f5:b0:69:84:43:0f:b0:b9:ba:
                    31:87:2d:76:41:6f:23:7f:7b:08:ef:59:5f:00:e4:
                    b2:93:38:69:4e:eb:f7:e0:7f:3f:74:2c:49:c8:7a:
                    af:39:d4:e5:fd:9d:ee:5f:d8:bf:e6:08:25:c5:bc:
                    79:e1:7a:47:d9:7d:53:e2:e1:81:87:ea:37:5a:af:
                    43:fc:1b:78:68:7e:17:36:2f:81:12:53:96:63:c2:
                    e8:df:e4:f2:9f:16:51:88:51:72:2d:b2:36:6b:fc:
                    30:e3:71:44:2e:c3:36:e0:cf:3a:22:d8:df:9a:8e:
                    01:9f:96:e3:f4:96:09:af:eb:ba:5b:b7:17:8d:63:
                    83:c8:5d:10:2c:c3:7b:78:71:56:82:c3:fe:e4:ef:
                    a8:b8:05:75:47:ee:9d:68:7f:5c:be:42:fc:f2:d6:
                    bb:13:fe:34:f2:32:94:e9:fe:5f:2e:f3:6c:62:4e:
                    59:3a:19:6e:90:2f:89:25:e4:21:65:09:9a:75:a6:
                    6b:6a:c2:4e:f8:40:a0:14:62:ad:b5:b5:98:81:90:
                    04:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C8:61:A5:4A:40:7F:DF:5B:F8:BE:32:C2:28:10:6C:76:53:5F:48
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/t8hhpUpAf99b-L4ywigQbHZTX0g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  221.113.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         37:92:dc:b0:1f:b3:17:8b:ad:88:82:a3:51:89:1d:c1:94:6d:
         81:e4:be:49:7e:6b:8a:c9:3c:e1:27:0d:3f:50:77:6a:8f:84:
         af:0e:c7:0a:30:eb:b6:cf:b9:3e:8c:46:6a:0a:76:e0:c8:7f:
         e6:9b:f7:d6:00:8b:c2:19:5f:b9:d0:c9:7c:7c:5d:61:9a:b0:
         33:95:99:b2:39:67:20:e4:db:1d:70:fb:92:08:4c:bf:f7:1b:
         44:0d:dc:0d:da:d7:6b:1b:2f:69:be:69:68:1f:83:5c:78:eb:
         1d:03:6d:44:36:7b:2d:8e:24:eb:a8:9e:51:ee:33:45:94:83:
         02:2c:9b:60:cc:8f:b5:a0:0f:84:ce:61:73:f2:e2:e2:04:4e:
         06:a3:45:0c:2a:e1:0c:d5:aa:eb:a5:d6:48:29:62:40:d0:b9:
         95:5c:a3:75:84:85:40:3c:0b:6d:9f:ec:d1:69:10:b4:2c:e8:
         43:ef:ab:1b:9c:02:86:ca:c9:ee:54:2a:36:bf:bd:8f:73:f3:
         8d:a7:38:96:3c:3a:f4:87:44:c3:84:46:52:d8:54:5e:74:2d:
         2d:f2:84:58:23:4b:21:04:bc:f0:e9:1d:9d:5f:37:ab:40:98:
         c7:9e:74:fd:17:fb:3c:9a:34:76:50:89:11:50:4f:9d:0c:1e:
         01:bf:75:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:49 2025 by rpki-client