Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/826/tAnxNFNI01064H_YUQOQaB2D6Y8.roa
File:                     tAnxNFNI01064H_YUQOQaB2D6Y8.roa (raw, json)
Hash identifier:          ZH9PJT5guGzOWUz+LwXem0mnE0IdbD8RzGlq/th+r/o=
Subject key identifier:   B4:09:F1:34:53:48:D3:5D:3A:E0:7F:D8:51:03:90:68:1D:83:E9:8F
Certificate issuer:       /CN=5E708E85B10AC603C06D785B42153DCFE1663AEA
Certificate serial:       39
Authority key identifier: 5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/tAnxNFNI01064H_YUQOQaB2D6Y8.roa
Signing time:             Fri 31 Jan 2025 01:29:14 +0000
ROA not before:           Fri 31 Jan 2025 01:29:14 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     23618
IP address blocks:        223.29.244.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E708E85B10AC603C06D785B42153DCFE1663AEA
        Validity
            Not Before: Jan 31 01:29:14 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=B409F1345348D35D3AE07FD8510390681D83E98F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9a:6b:aa:44:93:f7:40:3b:84:82:6f:14:b9:
                    93:74:de:4f:1d:a5:64:5b:35:03:f6:a3:8d:fa:ab:
                    7c:25:66:af:a1:3a:7b:cc:07:4d:4f:99:43:dd:31:
                    d5:aa:91:bc:b2:53:58:0b:8c:4b:e3:29:75:6b:2c:
                    90:3c:d9:2e:25:81:fc:15:08:82:92:9b:57:dc:e2:
                    a2:5a:29:52:fe:31:e2:92:99:90:64:ab:15:63:df:
                    0f:1b:fa:ac:bc:ae:5c:f5:c3:80:eb:ee:a6:86:ce:
                    3d:b0:17:20:37:6a:94:95:70:19:34:8b:8e:8a:86:
                    7e:a7:ac:e0:dd:bc:b0:1b:d7:2e:37:c5:57:af:68:
                    91:b3:7a:a1:b2:e4:ff:1f:53:14:dc:68:23:06:d1:
                    41:cb:56:09:84:0a:2f:ac:ee:d4:38:0c:36:5c:d6:
                    92:98:41:2a:d7:6c:08:d0:8c:0e:e4:3c:39:84:e4:
                    b1:63:7c:1e:43:4e:46:d7:75:4b:1f:93:64:94:90:
                    aa:ec:8a:5c:c8:20:a5:ee:9f:c2:55:2d:fa:50:4c:
                    20:cd:44:ec:ae:43:8a:8e:03:86:f1:76:55:38:e3:
                    1c:c5:56:b1:cd:01:93:0f:1a:10:23:d5:75:e9:8d:
                    a3:75:6a:7a:eb:4b:40:7e:75:cf:72:f8:c3:3c:9d:
                    9b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:09:F1:34:53:48:D3:5D:3A:E0:7F:D8:51:03:90:68:1D:83:E9:8F
            X509v3 Authority Key Identifier:
                keyid:5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/tAnxNFNI01064H_YUQOQaB2D6Y8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.29.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:30:15:9f:d8:44:de:ae:59:75:8b:46:a5:fc:20:c1:9d:cc:
         f2:52:7c:c9:c9:d6:a8:db:25:81:57:cc:8a:b7:1c:90:e9:38:
         36:f9:3e:d3:af:da:c4:5e:e6:aa:0b:95:11:64:c5:24:5c:f9:
         fc:16:d5:1c:70:08:55:3f:65:65:9f:20:8f:58:86:16:3f:cd:
         8f:33:10:dc:4f:ac:70:d0:02:b9:eb:81:20:9a:52:c8:cc:f5:
         7a:62:1f:6e:c0:07:30:31:82:a5:d8:8f:e5:47:0d:3b:e4:97:
         ba:b3:a0:e0:26:eb:1a:21:47:9f:58:31:86:37:58:a5:9b:a4:
         49:c9:d7:13:5c:1c:57:13:54:ae:a5:c7:36:43:7f:13:28:1b:
         c2:f7:9b:63:64:95:5a:6b:f9:8f:e0:54:b2:18:82:54:4b:e5:
         80:76:4a:68:eb:56:33:73:2a:ee:d6:0b:a4:ce:0b:4a:9e:5f:
         04:68:73:65:b4:36:ec:3a:46:36:9a:44:dc:d8:22:03:77:27:
         2f:7c:4c:ce:d0:01:e5:0b:e1:3f:54:de:92:8a:3a:e8:c3:98:
         3e:16:fb:9b:a7:8b:5b:f2:cb:61:71:4a:9e:3b:a7:cb:54:69:
         0b:98:b1:b3:cb:ff:3c:07:b4:0f:6b:a6:4f:ba:19:88:b9:52:
         09:90:4d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:39 2025 by rpki-client