Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/556/vj8_6eLLzfGVSYcteLmCbjhTJQ0.roa
File:                     vj8_6eLLzfGVSYcteLmCbjhTJQ0.roa (raw, json)
Hash identifier:          7dDT4/JgVDxSAtpy2B0R1Lg1+NcUWOvw+rC23Uhe1Vc=
Subject key identifier:   BE:3F:3F:E9:E2:CB:CD:F1:95:49:87:2D:78:B9:82:6E:38:53:25:0D
Certificate issuer:       /CN=5B940BB63134F9E9F2FE124FCD86E307EBF8B253
Certificate serial:       03
Authority key identifier: 5B:94:0B:B6:31:34:F9:E9:F2:FE:12:4F:CD:86:E3:07:EB:F8:B2:53
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/W5QLtjE0-eny_hJPzYbjB-v4slM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/556/vj8_6eLLzfGVSYcteLmCbjhTJQ0.roa
Signing time:             Tue 17 Dec 2024 15:31:21 +0000
ROA not before:           Tue 17 Dec 2024 15:31:21 +0000
ROA not after:            Wed 17 Dec 2025 04:31:27 +0000
asID:                     58648
IP address blocks:        219.100.252.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B940BB63134F9E9F2FE124FCD86E307EBF8B253
        Validity
            Not Before: Dec 17 15:31:21 2024 GMT
            Not After : Dec 17 04:31:27 2025 GMT
        Subject: CN=BE3F3FE9E2CBCDF19549872D78B9826E3853250D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b1:b7:de:4d:dd:5a:e2:f9:c7:56:81:1c:f5:
                    54:72:5b:ff:94:95:3e:53:dc:1a:42:f9:e2:d4:82:
                    19:59:bb:d2:61:b0:94:fe:ef:f7:37:da:60:42:60:
                    a4:eb:f6:3f:50:84:db:14:c0:d2:3d:7a:bd:cd:6c:
                    dd:a9:cd:55:7b:fb:74:42:5b:2c:68:0c:bd:58:68:
                    ec:ef:1f:86:76:f9:0f:b5:d4:47:9e:d7:ca:36:28:
                    9c:15:95:a8:35:be:d0:f4:3f:9b:93:65:33:fe:fc:
                    f8:d4:b7:37:3d:e3:73:54:37:69:b0:5d:00:ce:f4:
                    21:31:78:a0:48:0f:e7:96:be:b5:7f:8a:cc:49:98:
                    f5:85:33:a4:e1:36:d9:0a:25:9c:38:95:f9:48:13:
                    41:d5:af:10:b1:e1:84:d6:c1:94:62:11:36:11:83:
                    c1:58:86:f7:0c:92:9d:46:7e:34:39:9f:1f:53:88:
                    9a:49:69:65:1c:79:ca:90:61:a5:45:c6:ed:d4:26:
                    f8:59:40:b4:94:a6:b5:da:97:2b:69:47:2d:2c:ab:
                    14:9d:92:0f:c2:88:30:96:5d:1a:ec:50:81:ed:7b:
                    5d:25:e4:01:11:9e:d9:21:1b:9e:aa:80:d3:e4:dc:
                    71:0d:54:8b:c4:87:56:74:1d:be:db:0b:20:85:1a:
                    6c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:3F:3F:E9:E2:CB:CD:F1:95:49:87:2D:78:B9:82:6E:38:53:25:0D
            X509v3 Authority Key Identifier:
                keyid:5B:94:0B:B6:31:34:F9:E9:F2:FE:12:4F:CD:86:E3:07:EB:F8:B2:53

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/556/W5QLtjE0-eny_hJPzYbjB-v4slM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/W5QLtjE0-eny_hJPzYbjB-v4slM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/556/vj8_6eLLzfGVSYcteLmCbjhTJQ0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:92:80:1f:0c:50:8e:06:7f:83:93:38:39:80:8d:45:75:11:
         11:d9:77:97:b9:91:14:bd:a3:76:0d:35:61:6e:53:27:2f:ec:
         de:89:ec:fb:42:c7:40:ff:1c:0c:a8:da:a1:33:79:85:e2:97:
         f7:3f:d0:03:0c:da:68:52:1e:ad:d0:41:30:d1:b1:6a:11:f9:
         9b:b2:52:39:23:f9:8a:1e:43:0e:d8:be:67:04:b9:13:6e:34:
         34:fa:48:5c:d7:24:46:7f:ce:40:96:6f:9c:21:f4:15:22:eb:
         aa:56:b6:f5:e9:16:2d:e3:96:f0:64:93:cd:35:f5:3f:db:5f:
         b8:75:ad:48:6b:ab:0b:94:9b:e2:da:62:c0:1a:52:59:32:f4:
         c4:8e:f3:27:ea:03:ab:ff:48:dc:56:5d:1d:4d:e9:1c:42:ed:
         14:47:76:c9:37:ac:80:07:9a:f2:40:82:cd:04:ad:9d:7d:4c:
         5b:6a:5b:60:ac:60:c9:19:04:c4:37:7e:70:ea:5a:15:e4:e9:
         ee:f5:da:eb:51:1e:36:b1:2a:07:db:da:29:2b:99:ed:ad:dd:
         94:54:06:35:c6:23:10:25:05:f9:83:19:30:ff:b4:83:ca:6e:
         72:42:b5:1e:ac:b6:4d:b9:49:04:84:7a:92:e1:3a:2f:83:c4:
         eb:b9:0a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:19 2025 by rpki-client