Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/MakVcSCEkhvZbOko1mVlZergt28.roa
File:                     MakVcSCEkhvZbOko1mVlZergt28.roa (raw, json)
Hash identifier:          3uKvu+daJUrYC6uZIzcGIcwF9m/wvYCTiTmSXgsHnn0=
Subject key identifier:   31:A9:15:71:20:84:92:1B:D9:6C:E9:28:D6:65:65:65:EA:E0:B7:6F
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       75
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/MakVcSCEkhvZbOko1mVlZergt28.roa
Signing time:             Fri 31 Jan 2025 01:31:57 +0000
ROA not before:           Fri 31 Jan 2025 01:31:57 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     18260
IP address blocks:        27.106.208.0/21 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: Jan 31 01:31:57 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=31A915712084921BD96CE928D6656565EAE0B76F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:63:88:42:fa:46:c1:aa:83:e4:e3:00:a4:0d:
                    76:88:22:62:cd:ad:99:0b:7f:48:58:6d:a4:18:ea:
                    b5:35:34:e0:27:cf:4e:15:0c:55:df:e0:bc:c3:92:
                    91:61:ca:af:07:c9:70:84:c5:24:71:eb:4f:e6:52:
                    36:bf:50:27:72:d2:82:02:d9:98:cf:c0:0b:f2:5c:
                    a6:56:81:88:31:76:bf:46:c8:61:af:8c:5b:cb:1b:
                    26:b4:2c:99:06:23:84:6e:9d:45:ad:69:1c:37:c2:
                    78:47:24:98:10:4b:60:d8:a3:f8:38:28:30:68:3b:
                    c3:d8:8e:c9:df:14:27:bc:94:24:71:0d:1f:a8:70:
                    e5:7f:ac:ba:b7:0d:4d:23:b2:41:81:5e:fb:2f:01:
                    1c:3b:0d:a1:d4:2d:68:64:f0:2c:a9:6e:02:79:4a:
                    4d:b6:9b:44:6b:83:1b:20:aa:30:12:97:7e:7c:eb:
                    30:33:21:27:74:a4:15:f5:f5:90:99:df:34:65:5c:
                    51:cf:7b:ac:ac:68:f6:62:86:c9:37:c7:05:c4:84:
                    98:47:a9:40:c1:cb:f3:ec:bd:16:5b:ef:d8:34:06:
                    c5:65:44:07:40:f1:60:0b:33:32:05:e6:f5:7a:f9:
                    66:77:02:04:04:b4:3b:6e:13:ba:89:ee:df:4b:50:
                    46:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A9:15:71:20:84:92:1B:D9:6C:E9:28:D6:65:65:65:EA:E0:B7:6F
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/MakVcSCEkhvZbOko1mVlZergt28.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.106.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0a:4e:02:e0:39:91:7f:93:59:52:08:a9:2a:e4:3d:28:1e:1d:
         08:b3:35:17:cd:88:c5:3c:9a:75:13:5b:3c:a7:ed:fe:fb:7c:
         4e:56:0f:f5:bb:38:eb:9a:5c:65:ac:e9:f3:27:68:44:93:96:
         0d:23:d9:71:33:e3:3e:00:29:47:b6:b2:12:52:6f:1a:28:51:
         2f:fb:ae:7b:bb:52:f1:c4:c1:6d:ca:f0:f6:86:ff:c4:49:ad:
         1e:20:02:aa:60:10:e1:38:49:69:b6:79:3d:b7:2f:e0:43:42:
         52:ab:bb:ca:31:a6:32:1a:c9:ed:7d:6c:39:97:87:8b:be:18:
         ea:2c:87:e1:62:48:bf:aa:7e:5a:53:9b:6f:d1:45:6d:4e:a4:
         4f:7a:f8:26:18:9f:e0:32:cb:59:29:4e:62:01:2c:d6:03:85:
         47:6d:d2:2b:4b:2f:86:da:6c:34:d3:2f:cd:e8:2b:49:fb:05:
         fc:18:51:da:59:c9:62:0c:7e:f1:40:1f:8a:11:dc:c8:91:96:
         c7:93:ec:7c:af:35:c7:e7:42:bb:de:4f:2e:43:57:6a:5d:f8:
         7e:b5:2b:83:f3:62:06:02:58:79:89:11:ca:94:bb:2b:03:8d:
         38:76:7b:5d:ad:92:8c:67:8c:0e:ee:82:8f:4a:b2:0a:ae:36:
         ee:ef:eb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:48 2025 by rpki-client