Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/920/joz8kYC_ohxQKAtMQM9D-OjX_OY.roa
File:                     joz8kYC_ohxQKAtMQM9D-OjX_OY.roa (raw, json)
Hash identifier:          w6m/w9wTcLOeBiQcYiWDYoOkm4pG5DFdcOBVBszjEgM=
Subject key identifier:   8E:8C:FC:91:80:BF:A2:1C:50:28:0B:4C:40:CF:43:F8:E8:D7:FC:E6
Certificate issuer:       /CN=C8930155500B58FF73A8A0882185C66AC6A0D3A0
Certificate serial:       03
Authority key identifier: C8:93:01:55:50:0B:58:FF:73:A8:A0:88:21:85:C6:6A:C6:A0:D3:A0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/joz8kYC_ohxQKAtMQM9D-OjX_OY.roa
Signing time:             Wed 08 May 2024 07:33:35 +0000
ROA not before:           Wed 08 May 2024 07:33:35 +0000
ROA not after:            Thu 08 May 2025 07:05:01 +0000
asID:                     24279
IP address blocks:        110.232.136.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8930155500B58FF73A8A0882185C66AC6A0D3A0
        Validity
            Not Before: May  8 07:33:35 2024 GMT
            Not After : May  8 07:05:01 2025 GMT
        Subject: CN=8E8CFC9180BFA21C50280B4C40CF43F8E8D7FCE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:53:93:a5:ed:69:0e:f7:4f:e0:bd:80:9a:54:
                    a8:69:40:90:06:c1:18:18:17:aa:18:2f:69:74:b6:
                    06:3c:b4:bf:ce:08:7c:2e:68:8a:fd:d6:c3:8c:fd:
                    53:9d:8a:e1:ee:a2:cc:8c:89:63:71:26:8e:6d:19:
                    9f:fd:29:fe:71:01:ba:30:32:98:d7:d4:df:47:f9:
                    73:f3:0f:fd:8b:b1:d0:d1:40:1d:1f:9e:ad:3a:b1:
                    63:b7:e6:2c:14:81:13:a1:26:8d:80:c6:07:7f:d3:
                    c6:a6:4a:e0:56:4a:54:5a:3d:e5:94:f1:c0:21:6f:
                    9a:19:31:93:d1:eb:d1:48:f7:06:40:48:41:32:b0:
                    44:d6:50:bc:ae:ac:3c:9f:41:38:9f:f4:cc:67:0f:
                    ab:ad:a7:b5:9a:25:d7:c5:93:b5:fe:02:95:30:05:
                    1f:c9:61:69:ce:7b:48:f0:88:71:71:8c:bb:d9:7a:
                    cd:3f:42:e3:14:18:0b:fc:4d:d3:70:5d:b3:4d:31:
                    80:3b:b0:89:e4:55:29:bd:e3:fc:cf:7d:3c:b7:da:
                    74:98:4f:69:bf:1f:01:6e:43:68:12:15:7c:d3:48:
                    a3:d5:2f:56:76:f1:48:0f:00:29:4b:4d:36:68:b6:
                    45:e9:29:a4:b5:d4:0a:4f:94:66:3c:5a:f5:47:b5:
                    11:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8C:FC:91:80:BF:A2:1C:50:28:0B:4C:40:CF:43:F8:E8:D7:FC:E6
            X509v3 Authority Key Identifier:
                keyid:C8:93:01:55:50:0B:58:FF:73:A8:A0:88:21:85:C6:6A:C6:A0:D3:A0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/joz8kYC_ohxQKAtMQM9D-OjX_OY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:db:3e:0c:55:e0:84:f4:39:4c:a9:91:7d:20:1e:c0:5e:c9:
         65:c6:34:56:3d:d5:60:ae:22:ad:94:c4:c9:3c:b9:d7:17:b0:
         a9:e3:e1:99:b8:6c:56:2e:ac:5d:3c:27:20:81:04:2a:c7:48:
         a0:ef:81:be:d3:0e:8d:17:6f:a4:85:2e:bc:24:10:92:a4:72:
         cb:b5:3d:78:a6:77:bd:04:83:64:9a:bf:40:5b:d5:df:e7:3a:
         81:73:a6:b4:6f:e6:4b:20:ac:88:d8:58:03:8f:24:cf:61:5e:
         5f:99:8d:98:6e:6d:f5:40:2d:04:29:2a:cd:34:f5:70:0e:8a:
         ee:c7:9a:44:35:25:10:cb:63:25:25:b5:62:76:54:bb:95:8d:
         9d:2f:6e:02:c7:10:33:66:35:d9:9b:29:7e:3b:84:6a:68:1c:
         4a:5d:1a:e7:fe:aa:0d:75:7c:8d:02:97:5a:b8:7c:e1:ac:7d:
         0e:b2:72:26:b6:20:8c:7e:cb:da:3e:df:ac:78:5e:ab:41:c6:
         9d:89:1b:50:61:df:65:d2:19:f0:31:b1:a0:a2:65:eb:7c:d7:
         bd:75:13:23:f8:95:fa:be:d4:c9:f6:fb:02:6a:4b:58:58:8c:
         bd:ca:a1:4b:c0:03:5f:9b:f6:20:2e:d1:99:af:0d:cc:bb:df:
         b7:f3:17:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:13:14 2025 by rpki-client