Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/54/vlptni1HDt-Xl36iHVf6fFU7Gw0.roa
File:                     vlptni1HDt-Xl36iHVf6fFU7Gw0.roa (raw, json)
Hash identifier:          5Wz/8xBm+YOJhbxpTRAIk8BDxADT0/Yorq8qtmbmXIY=
Subject key identifier:   BE:5A:6D:9E:2D:47:0E:DF:97:97:7E:A2:1D:57:FA:7C:55:3B:1B:0D
Certificate issuer:       /CN=5D8F48F99C5B0745B77F8BCA754E63885CADC418
Certificate serial:       03
Authority key identifier: 5D:8F:48:F9:9C:5B:07:45:B7:7F:8B:CA:75:4E:63:88:5C:AD:C4:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/vlptni1HDt-Xl36iHVf6fFU7Gw0.roa
Signing time:             Fri 15 Sep 2023 07:45:19 +0000
ROA not before:           Fri 15 Sep 2023 07:45:19 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     4695
IP address blocks:        202.231.128.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D8F48F99C5B0745B77F8BCA754E63885CADC418
        Validity
            Not Before: Sep 15 07:45:19 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=BE5A6D9E2D470EDF97977EA21D57FA7C553B1B0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:63:fd:05:a0:ea:c1:dd:bd:ee:0a:45:2c:e9:
                    b0:d9:f0:d3:6a:e8:5b:b4:4f:d0:5c:da:eb:0c:70:
                    b6:b9:f7:99:72:c9:16:d1:d2:ee:fc:c6:aa:2a:d8:
                    b4:52:00:30:30:98:d9:df:ca:ae:54:6c:fa:26:ef:
                    6e:c3:93:50:5b:d7:61:28:7d:d8:40:16:57:aa:ba:
                    58:87:d0:88:3c:f9:b9:cb:d6:bf:e6:06:54:7b:db:
                    22:63:ea:3f:55:f9:ad:be:5c:b5:8d:9c:84:64:65:
                    ed:93:37:de:c3:f1:b5:23:06:84:be:3e:08:90:77:
                    7d:e8:ae:de:1a:b0:48:8c:2d:cc:d9:3d:df:79:f6:
                    4c:d4:cb:7d:c0:44:7c:0d:76:a6:ca:96:10:e4:42:
                    2e:1d:e3:be:26:1d:86:51:aa:a4:ed:5e:28:37:bf:
                    cd:06:07:1b:ad:20:a6:ea:95:81:4d:f7:dc:19:77:
                    bd:62:34:a2:80:9b:6a:c2:d5:f0:5c:13:bd:88:76:
                    15:f0:b2:1d:db:ac:62:98:f8:6f:95:01:dc:99:ef:
                    f3:7a:ea:d6:70:aa:d8:f8:d3:3f:16:ba:28:bb:a3:
                    65:a0:77:96:2f:59:71:5c:e8:b0:cf:ed:16:b0:fe:
                    23:4e:3d:66:3e:e7:f7:86:d5:c3:f8:e0:09:8d:1d:
                    1a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5A:6D:9E:2D:47:0E:DF:97:97:7E:A2:1D:57:FA:7C:55:3B:1B:0D
            X509v3 Authority Key Identifier:
                keyid:5D:8F:48:F9:9C:5B:07:45:B7:7F:8B:CA:75:4E:63:88:5C:AD:C4:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/vlptni1HDt-Xl36iHVf6fFU7Gw0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.231.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         49:a9:7a:ba:b3:8e:0f:4a:b0:03:72:2c:e6:00:23:83:80:92:
         b2:d8:ca:63:eb:61:16:98:65:99:2b:06:b2:71:89:d1:89:fa:
         8d:39:ab:ce:1f:ea:e5:7b:f5:98:a8:fc:f2:f7:e5:13:1f:8d:
         36:00:42:61:99:6d:4b:bf:59:8a:27:bf:d0:03:c2:d0:f1:6a:
         b0:5b:c6:ab:2d:1d:de:dd:e8:31:fd:f9:cd:5f:04:a8:7b:da:
         00:2b:ee:1c:e2:62:c0:10:d7:72:27:8b:b3:8d:d0:eb:8a:50:
         b1:0a:a2:80:28:d9:3c:7b:40:81:74:d9:b4:63:de:42:a0:f1:
         27:70:b4:60:00:3a:8f:63:33:b3:b8:c5:9a:c5:fb:35:f5:ce:
         aa:78:17:ad:8e:19:4a:aa:c3:65:5e:a7:62:44:4f:ff:b1:2e:
         37:87:79:96:99:4b:5a:7b:ad:8a:37:77:fd:10:6b:cd:0a:ae:
         6c:72:39:0e:b3:0b:41:21:67:1f:c4:dc:13:5e:65:a6:95:32:
         ef:5a:10:1b:7b:db:64:a7:b1:e8:19:11:e2:4f:f9:86:ad:2f:
         a3:fa:8f:41:61:96:64:05:5e:2a:c4:a4:9f:30:db:7b:07:d5:
         96:a1:2e:f6:a8:32:0f:51:c1:bf:d0:46:09:b2:04:29:2d:41:
         de:e2:49:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:22:42 2025 by rpki-client