Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/822/OBj8e-BdhC1JJbYMv1cn_Nhi1q0.roa
File:                     OBj8e-BdhC1JJbYMv1cn_Nhi1q0.roa (raw, json)
Hash identifier:          kWpwM5yxK84fhMTT1AhQrdX7D8gzrpsQEoC9MmvYKrU=
Subject key identifier:   38:18:FC:7B:E0:5D:84:2D:49:25:B6:0C:BF:57:27:FC:D8:62:D6:AD
Certificate issuer:       /CN=55061B7BA6111F230BDB61E29781E46D0165E99E
Certificate serial:       45
Authority key identifier: 55:06:1B:7B:A6:11:1F:23:0B:DB:61:E2:97:81:E4:6D:01:65:E9:9E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/OBj8e-BdhC1JJbYMv1cn_Nhi1q0.roa
Signing time:             Tue 31 Dec 2024 01:28:28 +0000
ROA not before:           Tue 31 Dec 2024 01:28:28 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     9354
IP address blocks:        103.40.104.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55061B7BA6111F230BDB61E29781E46D0165E99E
        Validity
            Not Before: Dec 31 01:28:28 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=3818FC7BE05D842D4925B60CBF5727FCD862D6AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:dd:d9:29:b7:fa:d7:35:f7:60:b7:81:96:f3:
                    ee:9a:30:1e:ce:a1:1e:bc:26:bc:42:44:fa:e1:62:
                    64:4c:88:8d:a8:7b:be:a2:aa:61:1d:72:c5:cc:28:
                    a2:c2:6d:8b:75:ed:f7:e1:04:b4:61:82:b1:35:01:
                    c4:fc:28:5f:ff:b7:b0:eb:5b:65:d1:22:e8:43:00:
                    84:4c:50:a1:2e:c2:db:96:94:73:cf:62:90:63:c5:
                    d8:b7:f9:a1:af:c3:67:91:48:9c:f9:6e:5f:1d:65:
                    81:5e:5a:2a:65:5d:9c:4b:1b:b2:df:9e:ee:28:e6:
                    58:05:fd:85:6e:47:a3:8f:c0:71:af:7a:86:ad:76:
                    fd:f4:21:9a:d0:5b:50:cd:b9:7a:5b:88:df:80:6f:
                    4a:5f:9d:89:5f:aa:2e:43:3b:94:6a:68:f1:1c:4b:
                    95:f6:3e:f0:8c:42:5a:3d:1e:9d:6a:54:06:5f:33:
                    dd:83:4e:09:2d:81:82:7f:cb:dc:41:0b:a6:ff:d0:
                    7c:dd:b9:4b:82:77:72:c9:6a:28:78:32:bc:73:16:
                    a3:b7:34:57:4c:7e:8e:71:a6:17:d9:31:36:8e:2a:
                    13:c6:f2:57:88:5d:7e:01:81:2b:74:58:5d:e4:78:
                    2e:e8:3f:ab:19:25:b6:2d:90:37:df:e7:2d:89:59:
                    d9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:18:FC:7B:E0:5D:84:2D:49:25:B6:0C:BF:57:27:FC:D8:62:D6:AD
            X509v3 Authority Key Identifier:
                keyid:55:06:1B:7B:A6:11:1F:23:0B:DB:61:E2:97:81:E4:6D:01:65:E9:9E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/VQYbe6YRHyML22Hil4HkbQFl6Z4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/OBj8e-BdhC1JJbYMv1cn_Nhi1q0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.40.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:f3:de:93:f5:7a:d8:f5:af:f0:ba:be:91:5b:0a:7c:bc:a4:
         7a:7d:d8:95:f4:75:dd:74:02:1a:4d:49:be:02:c6:b6:ab:d4:
         8e:3e:1b:b6:69:3e:c2:aa:d2:86:4f:f4:98:ed:47:c6:65:32:
         6f:ad:43:39:dd:46:05:36:d0:62:41:fb:49:65:91:a5:2f:b9:
         4a:c2:40:13:d7:95:9e:41:a9:fa:ad:2e:71:e3:8d:1b:0f:36:
         67:84:1b:cb:c4:19:3a:a2:34:eb:cb:38:ec:66:a9:4a:e4:8e:
         dc:c9:bf:ba:32:23:6a:92:71:c6:1d:44:c9:fe:c8:8e:3d:9d:
         c5:e1:63:38:57:50:a7:c2:25:bf:64:eb:fd:a8:30:70:e1:65:
         9b:1b:d0:0c:d4:bb:b2:61:be:2d:0c:38:1f:c4:55:58:78:7e:
         37:67:2d:fa:fd:3c:5c:d2:94:b5:78:48:53:bc:5e:9e:83:9c:
         ba:45:30:78:94:3e:34:af:55:12:43:72:07:81:7d:7e:9c:11:
         ec:72:64:cf:35:58:c8:0b:6a:23:04:9b:1e:3a:43:8e:6f:ad:
         76:bb:3f:0d:5d:98:f8:1b:cb:d3:96:4c:e6:bf:94:bf:0c:38:
         a9:7e:26:ff:9d:b9:e4:5a:8b:19:41:43:a2:67:a5:c9:1a:46:
         08:a5:a4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:39 2025 by rpki-client