Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/694/s0LosKfW7jmX5MAUsgzpm6c9LPs.roa
File:                     s0LosKfW7jmX5MAUsgzpm6c9LPs.roa (raw, json)
Hash identifier:          qJmx5/b8f+9aqYP9y2iDnRMDDo41zen5wYcNbyAK2QM=
Subject key identifier:   B3:42:E8:B0:A7:D6:EE:39:97:E4:C0:14:B2:0C:E9:9B:A7:3D:2C:FB
Certificate issuer:       /CN=2DD3FD68BD774CF9C2B99D670ADA9CAD9F963A5D
Certificate serial:       14
Authority key identifier: 2D:D3:FD:68:BD:77:4C:F9:C2:B9:9D:67:0A:DA:9C:AD:9F:96:3A:5D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/s0LosKfW7jmX5MAUsgzpm6c9LPs.roa
Signing time:             Wed 27 Nov 2024 02:02:19 +0000
ROA not before:           Wed 27 Nov 2024 02:02:19 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     7511
IP address blocks:        202.79.0.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DD3FD68BD774CF9C2B99D670ADA9CAD9F963A5D
        Validity
            Not Before: Nov 27 02:02:19 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=B342E8B0A7D6EE3997E4C014B20CE99BA73D2CFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b8:23:57:13:a4:d9:c0:b1:9d:d6:64:6d:bc:
                    7e:9a:f8:e3:d4:34:5a:f7:f1:08:b4:14:b3:50:cf:
                    f8:25:2e:f9:6d:bb:61:cd:1a:45:e2:ef:e1:0b:db:
                    93:7e:15:21:d9:5c:36:58:83:ed:95:0f:c0:c3:61:
                    a5:82:0e:a2:44:32:e6:ac:ee:a7:1e:c9:51:16:d7:
                    69:43:bf:4f:d4:48:18:bf:37:cd:45:02:a6:ad:97:
                    70:11:a4:d9:14:df:4a:9b:61:d9:4b:57:55:4d:85:
                    bc:a6:9f:44:22:d6:0c:2b:ee:41:35:d6:db:0e:b8:
                    e9:fa:f5:87:79:07:18:a8:f5:d7:51:f4:4b:74:5e:
                    bd:f5:05:99:13:82:ea:f4:13:a9:88:56:12:97:61:
                    ce:e5:47:ff:db:be:3b:62:d3:b7:3c:c0:f4:2c:c8:
                    37:b4:20:16:97:d9:7d:97:d9:62:c8:ae:4b:20:5c:
                    81:89:5f:30:23:7e:10:1f:1c:2a:18:3f:de:9b:51:
                    26:a2:d2:cf:53:c7:4f:a7:e7:f1:fb:2d:a9:75:d9:
                    98:80:2d:cd:9d:f3:b9:c0:cf:d6:e1:13:1b:41:b4:
                    20:12:7f:3f:75:e3:99:62:78:a7:25:98:a2:5c:e3:
                    69:0d:1e:35:37:86:9d:96:65:ec:43:6e:db:e3:34:
                    1a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:42:E8:B0:A7:D6:EE:39:97:E4:C0:14:B2:0C:E9:9B:A7:3D:2C:FB
            X509v3 Authority Key Identifier:
                keyid:2D:D3:FD:68:BD:77:4C:F9:C2:B9:9D:67:0A:DA:9C:AD:9F:96:3A:5D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/s0LosKfW7jmX5MAUsgzpm6c9LPs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.79.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:1f:c9:e5:51:a3:63:ad:c6:bc:0a:5e:ab:90:33:96:b7:76:
         7e:17:6b:f9:3c:3c:ce:92:6e:a9:fe:5a:5c:f7:72:54:e7:04:
         f5:ac:d6:f4:81:fb:dd:35:cc:73:6b:c5:dd:5d:75:07:44:94:
         42:bb:9b:30:de:b6:e3:ca:0c:04:62:03:bb:6f:97:a6:28:cd:
         52:91:34:aa:3b:f4:3f:62:00:15:0d:f5:bf:53:98:22:af:ec:
         da:ff:75:ce:c4:69:73:3c:26:d4:af:36:de:72:9c:1a:41:b3:
         17:f6:71:b2:d7:3d:2f:a8:df:83:93:ea:15:cc:44:8e:3f:ea:
         2d:ed:48:a1:fb:63:24:60:bd:ed:71:22:d7:1b:7d:34:c4:e0:
         59:4e:82:a0:0c:97:32:af:be:47:e1:3a:da:7e:df:ea:85:a5:
         34:dc:a0:7d:45:71:19:cf:83:9a:60:11:54:df:93:88:f1:66:
         a4:92:df:e7:4b:d1:9b:68:d6:1f:74:58:9e:65:22:97:22:32:
         21:3e:b0:f0:2f:a7:8f:41:f3:f9:7c:3f:da:8b:39:20:44:74:
         ee:e8:bc:63:fc:85:ec:f4:21:c7:d2:06:11:90:73:a5:54:38:
         2f:55:83:91:f8:91:ac:9e:9d:4b:a8:1d:71:af:28:c2:8b:3c:
         ab:27:bd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:28 2025 by rpki-client