Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/859/maL5VrMJiafk1Daw9XXuqSqi_8I.roa
File:                     maL5VrMJiafk1Daw9XXuqSqi_8I.roa (raw, json)
Hash identifier:          V5Lad3vwUUTiBuzDFnxVn6Es6FKPa8YoyME9Bf4DS2M=
Subject key identifier:   99:A2:F9:56:B3:09:89:A7:E4:D4:36:B0:F5:75:EE:A9:2A:A2:FF:C2
Certificate issuer:       /CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
Certificate serial:       56
Authority key identifier: 3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/maL5VrMJiafk1Daw9XXuqSqi_8I.roa
Signing time:             Sat 01 Mar 2025 01:28:29 +0000
ROA not before:           Sat 01 Mar 2025 01:28:29 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     23778
IP address blocks:        116.50.48.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
        Validity
            Not Before: Mar  1 01:28:29 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=99A2F956B30989A7E4D436B0F575EEA92AA2FFC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:01:9e:5d:ba:61:1e:de:aa:4c:64:f4:ef:92:
                    ee:10:24:4e:a7:bb:4e:3e:5b:68:0f:6b:53:90:34:
                    48:05:f5:a1:ec:93:09:a7:01:8f:dc:d9:fa:0a:db:
                    e0:59:6b:ba:37:32:61:a2:88:e3:03:5e:f2:aa:b4:
                    25:92:63:66:c3:f5:0c:ff:5b:aa:70:f1:bb:b3:46:
                    50:9f:5c:97:43:a2:2b:a5:fc:bc:56:96:75:11:8a:
                    55:07:d1:5c:3e:34:c1:a6:2d:f1:71:c1:ee:80:3d:
                    5b:de:25:55:03:2b:2d:5b:63:b7:9a:55:6a:ad:0a:
                    6c:a9:c2:7f:76:55:74:a0:fa:a8:6b:c9:ad:a3:0a:
                    02:2e:be:c5:c7:12:72:f8:d3:84:d5:3f:94:5d:c9:
                    5b:42:8f:41:e5:53:2e:7a:da:02:a6:00:cb:9a:c5:
                    ca:4d:71:01:da:49:24:c5:30:05:01:e1:a8:34:8d:
                    42:0b:36:1c:85:bd:6a:c9:aa:a7:7c:75:ce:49:97:
                    be:0c:e0:ae:a4:89:1d:a0:d8:07:a1:aa:c2:6c:d7:
                    bc:51:51:f9:3e:b8:28:37:af:3b:e6:3c:95:8f:a7:
                    86:08:d8:0e:ad:31:72:4d:d7:15:1e:70:3a:4b:b2:
                    bc:a1:c9:70:92:07:52:72:56:a4:d9:9a:34:b4:d3:
                    b5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A2:F9:56:B3:09:89:A7:E4:D4:36:B0:F5:75:EE:A9:2A:A2:FF:C2
            X509v3 Authority Key Identifier:
                keyid:3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/maL5VrMJiafk1Daw9XXuqSqi_8I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.50.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         37:54:16:f5:a5:e7:e2:d0:da:6b:b8:ca:45:13:0a:97:e6:2b:
         5c:bc:a9:7f:c2:0f:49:71:ad:b4:c9:dc:61:e4:4e:5c:00:66:
         6f:59:40:ed:cb:fb:c0:29:84:19:78:fb:cf:45:d8:9a:b4:96:
         5a:4d:8c:27:58:58:c0:a9:af:6b:32:ab:6b:4b:47:64:5d:cc:
         88:aa:c3:bb:5f:a4:7a:33:6c:1c:65:ee:3d:93:43:7a:4a:84:
         a9:a1:df:3f:0e:a0:b3:67:1b:fc:d7:a3:07:65:14:7a:02:7a:
         62:3a:58:ce:7d:e2:2b:ca:46:5e:bd:ff:e6:c6:5a:4c:5a:ea:
         6e:06:e2:9d:39:53:d4:ec:8d:a9:76:02:81:c4:db:de:bc:ca:
         ea:8e:bf:83:e7:c7:1b:f4:a5:9b:5c:64:97:26:d9:e0:58:c7:
         c4:ee:f2:5e:1f:17:58:f7:ec:f1:62:ab:71:3b:b2:82:1e:0e:
         76:89:22:87:09:f3:54:0d:b9:45:89:f2:47:42:21:27:3c:c2:
         75:d5:ba:ac:ec:51:6b:b0:95:f0:4c:75:fc:73:da:df:e5:29:
         55:ee:83:34:16:a5:d1:8c:5e:ab:4e:71:ec:ee:ff:2c:99:dd:
         f6:9e:07:e1:b2:1f:55:01:62:2e:90:4f:6c:8b:57:9e:6a:6d:
         bd:33:f0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:37 2025 by rpki-client