Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/802/S_qtERctU7LKN2z3kaaxfjmu1JQ.roa
File:                     S_qtERctU7LKN2z3kaaxfjmu1JQ.roa (raw, json)
Hash identifier:          kWWNmzRjckRl0X3206tAJgH1MeY79Rc/hckHJg0Y7hs=
Subject key identifier:   4B:FA:AD:11:17:2D:53:B2:CA:37:6C:F7:91:A6:B1:7E:39:AE:D4:94
Certificate issuer:       /CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6
Certificate serial:       18
Authority key identifier: 23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/S_qtERctU7LKN2z3kaaxfjmu1JQ.roa
Signing time:             Wed 31 Jul 2024 01:32:38 +0000
ROA not before:           Wed 31 Jul 2024 01:32:38 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     23791
IP address blocks:        118.102.48.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6
        Validity
            Not Before: Jul 31 01:32:38 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=4BFAAD11172D53B2CA376CF791A6B17E39AED494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4c:2a:71:bf:e3:12:5d:8c:f1:01:e5:dc:8d:
                    4c:09:12:9d:79:0f:5b:b8:1d:c2:87:76:70:23:86:
                    c0:8f:25:64:e8:2f:76:f7:7a:69:22:23:79:f4:a3:
                    09:71:cb:52:09:e7:e2:63:ce:35:81:f8:a7:62:2f:
                    c3:f6:87:21:55:cd:dc:be:1b:4e:a6:73:83:ef:a5:
                    65:cd:32:51:0e:44:72:03:59:40:e4:f0:f0:65:11:
                    79:5c:a9:bc:05:37:64:51:07:a2:24:47:91:86:88:
                    ec:14:a7:c0:10:42:cd:87:ec:6e:3c:ee:e5:03:d6:
                    cb:34:57:8b:97:69:9a:ad:da:21:d4:87:13:03:07:
                    41:65:c3:5e:f0:92:72:49:07:64:ed:c0:22:c4:c8:
                    ca:e1:fb:62:1d:5c:5d:e7:c5:bb:6d:ff:d6:c7:d8:
                    05:eb:8f:6c:29:c7:1c:9d:57:59:db:05:51:8d:38:
                    7a:35:be:68:48:49:3d:fe:e2:36:cc:c8:13:54:db:
                    3a:db:9c:c2:7a:2f:ec:54:75:85:2a:39:3f:5e:8a:
                    22:42:39:93:4c:1b:6d:49:86:9f:64:27:66:c5:31:
                    db:23:ca:06:6e:4c:b8:75:3c:38:ca:aa:d7:3a:3f:
                    af:70:1f:07:3d:cb:99:0c:82:ce:5f:b3:83:a2:a9:
                    ad:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:FA:AD:11:17:2D:53:B2:CA:37:6C:F7:91:A6:B1:7E:39:AE:D4:94
            X509v3 Authority Key Identifier:
                keyid:23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/S_qtERctU7LKN2z3kaaxfjmu1JQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.102.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         09:4e:b9:b8:9a:c0:6b:35:93:2b:85:81:be:31:c5:80:b4:ac:
         88:f8:36:a8:15:08:8e:99:14:e7:79:e1:00:f4:8d:96:e0:55:
         98:9a:d8:fb:19:a4:a0:05:41:10:cc:e1:8b:66:c2:5e:a9:1b:
         71:21:60:ac:86:87:69:0c:0f:26:01:ba:75:38:f0:d5:da:98:
         09:72:66:11:28:32:62:89:80:3e:bd:22:0d:48:40:75:1f:f3:
         9f:58:5a:d7:0a:fb:63:fc:33:c5:26:bf:16:e1:b5:0c:d2:1a:
         d2:73:d6:f4:4d:74:00:e5:e0:e8:5d:93:8d:8a:21:66:11:49:
         56:d8:01:51:59:ca:c8:1a:4e:e8:a6:6b:9a:db:94:1c:d9:34:
         60:2b:ba:ad:59:d0:4c:a5:c9:b6:9f:20:fe:62:aa:7c:0b:3a:
         85:20:ff:2f:c3:9d:be:ad:ac:f7:13:d2:84:4f:7a:f7:e0:1d:
         71:b6:d2:7f:81:01:64:4f:3e:4f:f1:f1:64:ff:2e:58:c2:5b:
         6f:2e:00:aa:02:a1:95:f4:8f:5e:5c:f5:78:25:aa:bb:3d:7a:
         ae:32:a8:46:ee:90:fa:c1:4d:d1:fc:f1:0f:01:14:54:87:4d:
         be:5c:5c:e0:36:09:c8:80:26:04:26:74:54:27:99:96:29:c3:
         08:52:58:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:29 2025 by rpki-client