Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/934/FWZxeuK4FmAlZTY7bBHKX7fHNSk.roa
File:                     FWZxeuK4FmAlZTY7bBHKX7fHNSk.roa (raw, json)
Hash identifier:          wAuMEfzwgKdk2wsu1KsCgzFaEuI7AcSW7gimkQ9T6zc=
Subject key identifier:   15:66:71:7A:E2:B8:16:60:25:65:36:3B:6C:11:CA:5F:B7:C7:35:29
Certificate issuer:       /CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Certificate serial:       6E
Authority key identifier: 2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/FWZxeuK4FmAlZTY7bBHKX7fHNSk.roa
Signing time:             Fri 31 Jan 2025 01:32:18 +0000
ROA not before:           Fri 31 Jan 2025 01:32:18 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     37892
IP address blocks:        202.145.26.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
        Validity
            Not Before: Jan 31 01:32:18 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=1566717AE2B816602565363B6C11CA5FB7C73529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:10:60:15:24:b0:f7:02:f9:76:83:ee:c3:3b:
                    a0:22:8d:28:69:58:7e:47:d8:6a:d5:58:41:0c:66:
                    9f:2b:7e:ab:17:2c:d0:24:b2:39:6f:4c:77:40:18:
                    99:4a:6d:51:33:2a:57:4b:d7:2d:b8:cf:dc:2e:a8:
                    22:af:f9:09:a8:50:bf:31:63:47:d4:c2:ae:c9:25:
                    51:e6:05:ee:c9:5e:9b:06:22:02:27:bf:3f:79:3e:
                    e6:d1:d5:6c:65:eb:b8:90:e1:99:fb:29:ec:4e:0c:
                    1e:38:3d:91:c7:62:5b:39:aa:e2:c1:79:0f:57:c3:
                    4d:ab:df:c7:a4:21:af:63:01:1a:55:00:fa:76:0b:
                    d4:3a:2e:bb:03:67:0b:cd:57:e7:dc:b8:41:d1:25:
                    d7:9a:01:a3:a8:e1:71:7a:82:48:a1:61:b4:3a:51:
                    c0:ae:ca:de:ee:0f:17:17:f0:37:f1:83:51:d9:15:
                    90:ab:c7:84:28:e9:18:c2:c9:eb:24:41:f7:7e:10:
                    9b:2a:2c:0f:76:f9:a0:c7:72:1c:46:1e:18:68:c1:
                    2b:a8:c8:26:6f:b8:de:48:65:db:2f:2f:c4:87:6d:
                    64:da:0f:71:a0:7c:9b:b9:b1:a3:6f:e2:89:fb:20:
                    08:4b:bb:0f:e4:7e:b3:6c:93:7c:98:42:6d:21:9f:
                    3a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:66:71:7A:E2:B8:16:60:25:65:36:3B:6C:11:CA:5F:B7:C7:35:29
            X509v3 Authority Key Identifier:
                keyid:2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/FWZxeuK4FmAlZTY7bBHKX7fHNSk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.145.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:9f:ec:0e:b7:38:3a:c3:e5:40:06:2b:85:41:ea:62:72:d6:
         c8:39:5c:e3:08:2f:99:e6:c6:c7:02:42:bc:c9:da:1e:e0:4e:
         07:f2:27:4d:76:d0:76:dc:bf:7e:31:a0:bb:42:3b:1d:ee:0d:
         b1:98:43:86:71:1f:07:64:53:ed:ed:a5:07:eb:94:c0:8b:7c:
         38:02:dd:be:8c:b4:d4:61:e7:27:75:68:9b:95:56:f5:2d:0c:
         50:8d:6a:98:bc:39:43:29:c0:46:67:02:3d:75:43:58:65:16:
         66:5b:94:01:a4:73:9e:11:90:cb:8d:ba:1f:54:d6:ce:d5:9c:
         88:f7:d9:2d:6e:d6:5b:8f:07:ba:e5:f3:82:a1:d0:b1:37:39:
         6e:17:c7:af:0e:34:df:f3:a8:c3:c4:12:52:88:4b:fd:f0:14:
         c0:86:cb:a1:fa:dc:70:be:9d:7e:c4:ed:da:45:c9:62:14:30:
         9e:db:66:9c:67:5f:90:82:d2:27:cf:c8:c1:a6:b9:2c:60:99:
         be:10:fc:cd:67:ea:5c:e6:e6:6c:37:f8:de:1e:77:ed:ad:38:
         67:84:c8:c7:37:9c:8f:fd:42:34:7b:fa:a2:2e:37:5c:08:40:
         1e:ef:70:dd:1b:57:33:1d:82:4a:0f:69:7f:50:07:b0:c9:37:
         15:f7:83:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:11 2025 by rpki-client