Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/826/QwmEk1kdwlPifxKhiO1bgZMp-Bs.roa
File:                     QwmEk1kdwlPifxKhiO1bgZMp-Bs.roa (raw, json)
Hash identifier:          DRT6MbdtHxxJ8uZHCfzERr3bnRMeYR6eqzJEwaTu9do=
Subject key identifier:   43:09:84:93:59:1D:C2:53:E2:7F:12:A1:88:ED:5B:81:93:29:F8:1B
Certificate issuer:       /CN=5E708E85B10AC603C06D785B42153DCFE1663AEA
Certificate serial:       3B
Authority key identifier: 5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/QwmEk1kdwlPifxKhiO1bgZMp-Bs.roa
Signing time:             Fri 31 Jan 2025 01:29:15 +0000
ROA not before:           Fri 31 Jan 2025 01:29:15 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     23618
IP address blocks:        103.114.184.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E708E85B10AC603C06D785B42153DCFE1663AEA
        Validity
            Not Before: Jan 31 01:29:15 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=43098493591DC253E27F12A188ED5B819329F81B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0e:71:5b:e7:9e:21:dc:c7:e4:a0:b9:ac:e9:
                    38:ae:4f:d5:26:2a:ee:b1:0c:f9:02:e2:e6:31:73:
                    f4:76:4e:af:ce:5c:2d:fb:28:b5:67:42:1f:70:45:
                    08:7b:36:ff:2b:c6:65:c7:4d:04:73:21:ad:d0:76:
                    4c:dd:35:65:2a:02:3b:e3:bd:2e:e3:32:34:08:a5:
                    f1:59:4e:7f:2a:8c:42:45:46:21:d1:0c:0c:9d:1a:
                    26:76:ed:59:4a:1d:7d:11:6e:ac:6a:3d:72:c1:e7:
                    4c:3c:df:29:8b:95:0c:82:52:60:ad:97:cd:bf:13:
                    96:e6:76:d9:2c:4e:37:2b:82:24:88:e7:77:09:d0:
                    bb:7b:2b:fa:68:61:79:7f:60:00:a6:f9:12:99:94:
                    31:92:44:bf:1f:4b:e1:04:6c:5a:e4:4d:94:60:47:
                    a0:74:ea:77:3f:55:a7:1f:3a:bb:5e:ef:6d:a5:c7:
                    b0:35:21:41:ee:9b:54:12:1a:48:53:ff:77:12:ba:
                    0b:75:be:b8:4e:58:f8:fc:a6:51:36:09:ea:b5:88:
                    c7:74:1e:c9:c2:10:fb:6e:07:a7:44:fe:97:80:09:
                    d9:e7:e4:b3:ed:fd:a6:91:bc:d1:63:d8:a1:01:85:
                    fc:df:8c:53:f9:92:46:a8:ca:99:39:d0:59:d7:32:
                    e1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:09:84:93:59:1D:C2:53:E2:7F:12:A1:88:ED:5B:81:93:29:F8:1B
            X509v3 Authority Key Identifier:
                keyid:5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/QwmEk1kdwlPifxKhiO1bgZMp-Bs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:9b:43:d2:e8:66:f9:06:83:46:3f:86:83:b3:52:00:87:39:
         9e:3a:d7:b0:a2:fa:b2:fa:df:cd:60:42:f0:b9:75:f0:67:1a:
         27:38:d0:fe:cf:d5:34:07:ef:82:33:50:29:80:3c:f1:8f:6e:
         0d:e4:16:40:96:3b:01:5b:05:85:d5:d9:dc:77:9a:b6:17:1f:
         80:f1:a4:9e:21:ec:60:ea:f6:60:16:21:22:13:cc:e4:fb:d2:
         ac:d6:5e:e1:ab:8c:25:3b:6a:51:59:ee:6d:4d:37:2f:78:91:
         3a:3d:79:3e:28:b3:66:42:c8:cd:91:88:3d:eb:48:6d:40:03:
         f2:90:e1:8a:d7:ee:15:f3:e4:a4:f8:8e:13:cd:20:9c:8b:25:
         b6:87:23:cc:dc:dd:76:fc:4a:be:5e:4c:39:b7:b9:1f:df:57:
         01:66:a9:db:cf:12:3c:1c:c1:00:0a:a9:3d:4e:57:80:3f:ec:
         91:09:eb:48:b6:72:63:68:03:af:41:b8:b6:0e:4f:1e:b0:68:
         0e:78:3a:20:ad:66:95:74:90:8e:0e:12:97:8e:d9:03:d3:2e:
         04:a3:81:33:90:a4:4b:72:e4:04:ab:51:4e:4d:ff:13:52:f6:
         83:aa:ba:72:18:79:ad:78:e5:a2:e4:bb:d8:be:1c:cf:6a:35:
         4a:a6:4c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:28:05 2025 by rpki-client