Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/Mw_bgBkSYQHoGGMSZHbhkCpGgDU.roa
File:                     Mw_bgBkSYQHoGGMSZHbhkCpGgDU.roa (raw, json)
Hash identifier:          zFGjxr4k2ZR6qXkTAnXpZ+4sp3XofO5goqYgUHKNKC0=
Subject key identifier:   33:0F:DB:80:19:12:61:01:E8:18:63:12:64:76:E1:90:2A:46:80:35
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       7A
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/Mw_bgBkSYQHoGGMSZHbhkCpGgDU.roa
Signing time:             Fri 31 Jan 2025 01:31:59 +0000
ROA not before:           Fri 31 Jan 2025 01:31:59 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     18260
IP address blocks:        103.2.64.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: Jan 31 01:31:59 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=330FDB8019126101E81863126476E1902A468035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ea:9f:ec:28:75:e2:d5:ac:a4:3c:c9:f7:80:
                    f3:a5:f6:b4:f0:5e:f4:1e:d8:55:73:88:6c:b1:65:
                    82:09:d0:b1:6a:aa:08:fa:8c:3c:62:7e:a9:8f:4f:
                    2b:2e:cf:92:a9:1a:f2:73:48:43:4d:a2:d7:0e:aa:
                    b8:f0:6b:4b:50:a0:d0:1a:cd:90:2f:ed:94:75:ca:
                    c8:94:f5:f3:06:29:ef:27:db:74:cf:cf:1a:c8:55:
                    5a:0b:af:b7:39:5a:0e:20:76:20:75:b9:16:27:0d:
                    a0:ff:10:7e:a8:dc:64:eb:ac:0f:f2:5b:a3:8d:1a:
                    2a:a3:99:9d:80:db:41:b1:52:44:22:5f:87:b8:98:
                    a9:f6:96:d1:3d:97:b7:dd:62:cd:a9:41:17:23:95:
                    80:25:ff:87:95:f3:fb:db:41:44:fd:99:d4:5b:14:
                    93:cf:bb:fe:25:7b:d6:84:70:18:7c:de:d0:0c:34:
                    c2:33:6e:e4:5a:84:c2:33:08:b2:a1:33:41:76:00:
                    6f:a4:87:60:4a:af:e9:33:35:1a:8f:df:fa:25:c3:
                    1e:7f:df:f7:e9:04:b6:a8:26:18:50:35:e2:55:48:
                    5b:81:6b:44:5a:40:9f:4b:39:9b:a0:5b:6f:af:95:
                    12:73:55:e6:6f:06:77:e9:27:4b:bf:ec:b8:a2:b0:
                    b6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:0F:DB:80:19:12:61:01:E8:18:63:12:64:76:E1:90:2A:46:80:35
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/Mw_bgBkSYQHoGGMSZHbhkCpGgDU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:71:5c:8d:99:ce:73:ef:e6:53:18:2c:24:8a:b4:20:c5:08:
         51:ca:aa:f7:b6:4d:3d:d4:c4:4c:29:f4:a8:37:65:2d:c6:3e:
         65:1e:4f:e1:43:aa:bf:bf:5f:7b:20:b4:80:84:72:d8:06:28:
         d0:6d:41:72:8a:1a:b3:5b:81:59:2d:45:60:7d:93:9e:a8:55:
         68:41:d0:8c:3e:90:78:4f:db:83:02:54:fa:9a:65:0a:f4:87:
         67:fa:a5:5b:fc:3e:de:1c:c9:b8:0b:20:59:44:d2:5f:38:54:
         a6:5f:a8:1c:f7:72:40:5d:74:1f:ec:72:d4:93:89:02:fc:93:
         9e:94:a9:b0:79:34:c9:c6:a9:81:91:62:e7:c5:13:d5:5e:b2:
         4b:97:92:a8:81:df:fd:fd:fb:3e:63:3d:e2:71:6d:4d:ac:93:
         78:a3:76:bf:3a:7b:ef:75:25:ec:dc:09:af:05:57:97:34:33:
         12:48:d6:bc:e3:76:ad:8b:d2:21:c2:2b:fa:96:14:5f:7e:c4:
         e8:b1:5a:04:13:06:dd:b0:1a:71:44:e0:0c:48:ec:96:ad:42:
         27:7e:76:04:28:1b:c5:c8:bf:15:15:91:75:fc:e8:48:5a:c4:
         19:09:36:77:13:3d:f8:43:58:42:c4:a5:87:4b:5b:60:ad:33:
         9a:f1:ff:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:28:10 2025 by rpki-client