Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/859/vCOr-3jRfUTNBwgYg_kCDxQT1Fw.roa
File:                     vCOr-3jRfUTNBwgYg_kCDxQT1Fw.roa (raw, json)
Hash identifier:          vve29zVaSc5+pN7xBYH0EHDtf95OmahggV+4O6xTfNg=
Subject key identifier:   BC:23:AB:FB:78:D1:7D:44:CD:07:08:18:83:F9:02:0F:14:13:D4:5C
Certificate issuer:       /CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
Certificate serial:       5C
Authority key identifier: 3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/vCOr-3jRfUTNBwgYg_kCDxQT1Fw.roa
Signing time:             Sat 01 Mar 2025 01:28:31 +0000
ROA not before:           Sat 01 Mar 2025 01:28:31 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     23778
IP address blocks:        219.100.96.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
        Validity
            Not Before: Mar  1 01:28:31 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=BC23ABFB78D17D44CD07081883F9020F1413D45C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5f:c8:44:ba:1b:55:ab:22:3f:3b:8d:37:95:
                    c0:65:97:ca:5a:48:40:06:45:1d:cf:9d:26:72:e5:
                    ce:f1:a4:17:cf:72:22:d0:d4:6a:3e:dd:47:03:89:
                    a1:98:0e:31:61:6e:7a:41:c0:7a:dd:8d:56:c2:cb:
                    8a:15:f7:8f:9f:da:fd:cd:64:63:04:1e:7f:a7:fe:
                    ad:4f:c1:38:b5:63:ab:d3:73:4d:f6:fd:f3:a0:70:
                    3d:96:a6:b7:7c:14:cb:a7:13:74:af:d9:86:fe:70:
                    4d:4d:2d:3c:49:4a:09:02:1f:bf:7d:b1:eb:fb:7e:
                    ba:d0:8b:ef:ca:1e:fc:c5:3d:16:4b:af:dd:17:40:
                    b3:48:73:c5:0d:29:a4:d3:83:e1:61:5b:19:8b:95:
                    65:99:4d:4f:c0:ce:0b:04:49:fd:60:85:27:32:95:
                    40:6d:74:61:b9:40:7f:0e:e4:f9:c6:55:f6:b5:58:
                    aa:f1:97:cd:47:5a:c8:ae:e0:42:2b:f3:cf:f1:0b:
                    a8:c6:ed:0c:21:59:38:e1:a6:63:39:da:44:0a:d3:
                    98:cb:13:b4:9e:43:ad:57:f4:97:f6:2a:9f:08:82:
                    c0:2f:c7:97:67:1d:4e:11:c2:78:e4:88:5d:d2:e7:
                    60:85:af:b6:9d:ef:7c:b0:72:d3:61:09:b5:65:70:
                    1b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:23:AB:FB:78:D1:7D:44:CD:07:08:18:83:F9:02:0F:14:13:D4:5C
            X509v3 Authority Key Identifier:
                keyid:3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/vCOr-3jRfUTNBwgYg_kCDxQT1Fw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:bf:19:24:53:57:fe:f3:d5:44:24:4e:3d:1b:b5:65:3f:a1:
         0b:21:69:a7:86:ba:da:4e:8f:f1:fc:2f:d2:1d:aa:fc:20:e8:
         f3:38:98:62:b8:94:23:d5:21:cb:74:e0:07:f0:2f:18:88:38:
         8f:3e:51:e4:75:b9:bd:c4:1d:a1:c5:f3:73:70:0a:8d:ce:c2:
         c3:9c:66:ca:a3:58:18:18:fd:9a:a3:85:68:0c:61:42:14:a9:
         4f:77:90:47:33:e5:48:9f:dd:32:d8:7c:4b:c7:19:bd:c9:86:
         ff:55:25:67:15:26:51:15:be:4c:18:56:56:57:96:af:99:c7:
         3e:76:63:66:35:43:9e:c0:b7:9a:48:51:b0:d6:00:a0:eb:e2:
         19:c4:0c:57:5e:70:70:80:7f:d4:d4:7e:9d:43:05:e8:e5:ee:
         b8:d5:4d:bb:52:d8:b5:77:3e:07:7c:da:da:ed:bc:ba:80:62:
         1f:7f:3c:7e:1c:61:f4:dc:d4:d2:76:ea:84:96:2a:73:95:07:
         15:50:9a:a4:4f:7f:4a:c1:b2:ff:e5:e0:90:a3:4e:51:48:ed:
         fd:27:88:21:ea:d9:5d:ab:af:c5:be:6d:39:1a:39:3a:21:57:
         4e:67:53:1b:5d:6f:c2:3c:94:b7:db:5b:25:1b:b3:3b:a3:9f:
         34:8f:08:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:30:22 2025 by rpki-client