Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/900/9sojr2AYzmuPF-BJbTr-F-0S6Lg.roa
File:                     9sojr2AYzmuPF-BJbTr-F-0S6Lg.roa (raw, json)
Hash identifier:          57El7VfRTb+SNVv2+YMthRUL19psvmsm2wINlmBcRgQ=
Subject key identifier:   F6:CA:23:AF:60:18:CE:6B:8F:17:E0:49:6D:3A:FE:17:ED:12:E8:B8
Certificate issuer:       /CN=5A79FC72D56CF387050F65AC6FF315EA92D5D651
Certificate serial:       12
Authority key identifier: 5A:79:FC:72:D5:6C:F3:87:05:0F:65:AC:6F:F3:15:EA:92:D5:D6:51
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Wnn8ctVs84cFD2Wsb_MV6pLV1lE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/900/9sojr2AYzmuPF-BJbTr-F-0S6Lg.roa
Signing time:             Wed 05 Mar 2025 04:50:35 +0000
ROA not before:           Wed 05 Mar 2025 04:50:35 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     24249
IP address blocks:        202.223.44.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A79FC72D56CF387050F65AC6FF315EA92D5D651
        Validity
            Not Before: Mar  5 04:50:35 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=F6CA23AF6018CE6B8F17E0496D3AFE17ED12E8B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:40:f4:2d:10:b7:5b:f4:7b:ea:92:6f:eb:f4:
                    f0:74:06:1e:5c:af:6c:da:5a:9a:a4:2c:46:c3:dc:
                    65:59:8b:85:3e:68:d0:42:5b:1f:8d:cc:83:62:14:
                    38:fe:f9:40:d1:18:ca:a9:54:ad:06:2d:e9:8b:2b:
                    18:8a:76:81:ef:60:66:e2:3c:ef:73:8d:73:8f:36:
                    7f:a2:8e:80:26:79:02:ce:c3:c2:f5:47:4c:c9:58:
                    89:24:86:d6:60:c6:f3:46:7f:03:e7:df:3e:d8:b2:
                    73:0d:d1:d0:61:84:1c:08:68:89:6e:39:ce:1c:93:
                    e3:40:cb:2e:fd:ff:9c:47:eb:1d:56:52:e1:3c:03:
                    27:c9:2e:1b:1a:75:33:dd:c5:15:63:e6:07:30:2b:
                    26:19:76:5f:e9:35:c2:15:fe:88:64:ee:33:7e:14:
                    79:c2:68:b3:9f:11:6d:5b:2a:9f:e3:13:83:18:07:
                    a8:e7:f3:e9:51:f4:63:d7:45:21:49:3c:0d:f8:55:
                    a7:42:a2:4a:57:68:80:96:d7:ca:1e:b6:d5:8d:97:
                    94:b8:74:3a:f5:95:7d:f8:3a:7e:e7:91:c6:e0:72:
                    0c:6c:fa:24:3e:47:45:34:d8:ca:c4:3a:5d:7a:51:
                    a1:37:01:8f:1f:2c:27:bf:48:06:ca:b4:bf:73:61:
                    99:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CA:23:AF:60:18:CE:6B:8F:17:E0:49:6D:3A:FE:17:ED:12:E8:B8
            X509v3 Authority Key Identifier:
                keyid:5A:79:FC:72:D5:6C:F3:87:05:0F:65:AC:6F:F3:15:EA:92:D5:D6:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/900/Wnn8ctVs84cFD2Wsb_MV6pLV1lE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Wnn8ctVs84cFD2Wsb_MV6pLV1lE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/900/9sojr2AYzmuPF-BJbTr-F-0S6Lg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.223.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:a1:75:6b:a0:6d:d2:83:78:c4:c9:fd:17:60:a0:a7:05:ae:
         05:1a:62:a6:f3:54:c1:72:2c:4f:5b:d3:44:d7:e9:c4:a4:38:
         a9:47:8d:00:5b:47:08:8a:42:4d:db:54:db:4a:d9:66:54:f8:
         2a:11:e8:24:81:0e:c9:fe:c8:5a:de:7a:bf:1f:1d:40:8d:6e:
         f4:2b:b6:20:7c:25:c7:a3:11:b3:d6:ea:2f:dc:78:e2:38:d8:
         01:46:72:dc:c6:e9:20:fd:b6:1a:eb:39:98:43:65:89:db:b1:
         a3:d4:43:78:6b:36:34:a9:8e:d2:73:b0:f8:d2:4b:a5:fe:0c:
         5b:6f:f8:10:8f:33:5a:c1:08:d0:5c:11:22:38:1f:fc:76:ed:
         aa:29:29:cb:7b:49:ee:f0:b0:85:f0:3f:8e:00:de:dc:1c:05:
         fb:cd:12:c6:48:b1:ad:bf:f1:f4:51:a4:c5:ec:91:ad:1a:4d:
         cb:ea:72:9a:e2:fc:e8:65:9a:0b:b5:8a:3a:35:25:91:fa:e0:
         04:9c:34:c6:f0:28:6d:ac:b1:f2:d9:f0:bb:82:b3:ea:ac:13:
         9a:ea:1c:a3:55:aa:9a:df:69:a1:c6:cf:46:bb:5d:dc:cf:20:
         10:4c:7c:a5:b4:81:d0:ee:a0:66:29:ee:14:dd:dd:38:3d:ae:
         ff:5e:2e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:33 2025 by rpki-client