Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/w2oz8CwzliUFZUBhLMZgjo7qp9Y.roa
File:                     w2oz8CwzliUFZUBhLMZgjo7qp9Y.roa (raw, json)
Hash identifier:          9OSt33kZbVD7ilqYKMOujs9aoc5Q34yp9D02jiJpcF8=
Subject key identifier:   C3:6A:33:F0:2C:33:96:25:05:65:40:61:2C:C6:60:8E:8E:EA:A7:D6
Certificate issuer:       /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Certificate serial:       65
Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/w2oz8CwzliUFZUBhLMZgjo7qp9Y.roa
Signing time:             Mon 30 Sep 2024 01:30:53 +0000
ROA not before:           Mon 30 Sep 2024 01:30:53 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     131896
IP address blocks:        103.198.108.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
        Validity
            Not Before: Sep 30 01:30:53 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=C36A33F02C339625056540612CC6608E8EEAA7D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c6:0e:c9:07:52:a3:e1:66:ef:a0:ce:3d:93:
                    cd:eb:ad:ea:29:ac:ee:cb:3d:ee:5b:1c:96:b3:a4:
                    bf:b8:6b:32:9e:a4:7c:ac:14:67:18:61:af:14:1b:
                    b8:d1:c5:3d:fa:7c:5b:94:b4:2d:ab:17:1d:1e:3b:
                    6d:d8:a8:5a:bf:8f:ce:90:c1:bd:4d:4c:9a:13:ea:
                    21:0a:b4:93:01:bb:57:07:15:40:86:5f:46:d8:ea:
                    49:9a:a3:a4:14:29:0d:73:f4:88:12:cf:78:de:fc:
                    f2:af:72:59:0d:b9:92:a6:a2:5d:dc:f6:cf:af:6e:
                    da:ec:43:a9:2a:8e:c4:69:30:a7:d1:80:cd:53:7e:
                    43:d2:58:2b:96:6b:76:38:db:3a:cb:58:b3:63:8c:
                    a2:11:56:7e:b2:96:73:92:38:ae:81:4b:8e:fb:6d:
                    5d:88:15:5c:11:a6:b8:7c:2e:4d:ec:8c:aa:d7:3b:
                    5a:dc:44:a9:20:17:e3:ef:ac:ef:e7:7e:55:e1:ee:
                    65:3e:e6:08:f8:11:ab:1d:03:01:24:9d:c2:0d:76:
                    ac:68:55:76:f3:b7:5c:a1:3a:6f:ce:e0:42:8c:84:
                    fb:aa:46:25:2e:32:cd:96:e7:99:b2:1b:29:69:26:
                    c3:63:22:01:3f:9d:c7:63:8d:4f:8a:70:ba:50:3b:
                    af:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6A:33:F0:2C:33:96:25:05:65:40:61:2C:C6:60:8E:8E:EA:A7:D6
            X509v3 Authority Key Identifier:
                keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/w2oz8CwzliUFZUBhLMZgjo7qp9Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:9f:3e:e9:19:a8:91:db:80:e7:77:b6:70:9a:65:b4:f0:61:
         b5:cd:93:d6:b3:ba:69:ec:b3:2d:84:f5:31:36:85:af:40:88:
         86:ae:07:5a:9f:0d:ee:f5:a5:f1:ff:80:c3:3c:47:26:26:f4:
         d1:b3:f4:1c:df:50:33:f6:03:62:4f:0c:9d:4f:c4:35:fd:44:
         e7:d7:da:b3:f3:8a:73:22:82:df:32:3f:73:cc:a4:d7:20:03:
         31:30:a6:5f:72:57:40:e6:52:eb:6c:0b:5a:6b:86:0e:ec:d6:
         f2:52:81:50:dc:db:7c:7e:b5:33:fd:4d:e6:3d:30:cf:93:6c:
         39:1d:80:75:3e:d3:8d:51:18:47:57:79:52:52:f7:3d:7b:ee:
         4e:ee:90:a8:5c:86:55:5e:7a:84:25:a4:99:d7:98:8a:98:04:
         9c:4a:f8:81:21:bd:11:d2:27:c3:87:e1:82:29:1d:63:59:28:
         ff:2f:d1:ad:9a:31:ef:7c:17:b5:67:ad:a4:d6:7a:27:3d:1d:
         fa:13:26:b2:69:3d:dc:49:1c:92:e9:be:66:18:1c:8f:9f:63:
         09:cc:e7:ae:33:0e:e8:39:87:51:48:7e:9b:7b:6b:88:a8:3b:
         5c:82:7e:67:61:4c:18:34:4d:e1:93:50:50:5c:8e:04:65:7b:
         4a:f5:e7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:03:48 2025 by rpki-client