Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/954/E7rr9QTqATamZnYDB6oxMmvnGVg.roa
File:                     E7rr9QTqATamZnYDB6oxMmvnGVg.roa (raw, json)
Hash identifier:          pzM8q7UrTuuJPWC92QL86o5MN+Kq1og563/hEx7b6WE=
Subject key identifier:   13:BA:EB:F5:04:EA:01:36:A6:66:76:03:07:AA:31:32:6B:E7:19:58
Certificate issuer:       /CN=1678DD6B61CB673BA4423C81BF63A61DD724E840
Certificate serial:       36
Authority key identifier: 16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/E7rr9QTqATamZnYDB6oxMmvnGVg.roa
Signing time:             Sat 01 Mar 2025 01:29:02 +0000
ROA not before:           Sat 01 Mar 2025 01:29:02 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     131954
IP address blocks:        103.212.76.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1678DD6B61CB673BA4423C81BF63A61DD724E840
        Validity
            Not Before: Mar  1 01:29:02 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=13BAEBF504EA0136A666760307AA31326BE71958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8f:d2:a8:65:6b:0f:89:fe:0b:fc:bb:9d:24:
                    b3:0d:81:33:d3:a5:d6:10:35:24:7c:a1:71:04:50:
                    de:c8:a7:e5:8b:b7:27:35:ba:1f:c0:5b:96:19:69:
                    ac:fb:0f:1a:c3:6c:66:51:cc:86:a5:f8:e1:5d:5d:
                    1e:eb:53:e3:50:2b:e5:da:06:68:bf:d5:55:7c:d8:
                    a4:61:54:58:d0:55:0d:df:c1:0e:2d:c7:f4:56:a9:
                    3b:9b:c8:d5:26:01:d2:27:f3:4e:79:c3:28:f1:2b:
                    9e:ab:64:5b:a2:01:ee:9a:b7:1d:ea:7e:68:45:c1:
                    8e:60:b5:85:9b:e8:3a:b4:74:03:9d:59:21:ed:cf:
                    3a:2e:da:e4:5f:32:32:7c:d4:9f:13:1c:72:e5:61:
                    a6:b7:ce:97:e1:5e:b2:93:dc:59:20:b2:7a:fe:85:
                    d0:f1:00:88:fc:c1:7a:a6:af:35:6c:62:77:f5:86:
                    07:ca:73:f4:e6:5a:aa:56:93:a1:c7:ef:4d:96:f8:
                    87:5f:d7:e0:87:b8:d4:45:05:1d:f0:2d:7b:5a:72:
                    9f:03:74:b5:d6:cc:db:c8:11:37:e7:a3:44:2f:9a:
                    7d:da:09:fd:25:2e:cb:2b:52:d9:d3:8a:5e:44:18:
                    e9:fd:96:2d:57:fa:d7:79:7d:65:c3:41:98:ab:f1:
                    64:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:BA:EB:F5:04:EA:01:36:A6:66:76:03:07:AA:31:32:6B:E7:19:58
            X509v3 Authority Key Identifier:
                keyid:16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/E7rr9QTqATamZnYDB6oxMmvnGVg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:63:33:28:7c:13:b6:34:e4:f0:92:f2:b6:34:64:5f:f1:8c:
         5b:d7:10:4a:6b:d2:cf:a8:d6:95:a0:73:59:d8:29:b0:66:29:
         5a:24:66:cb:68:e1:97:f2:ed:f4:14:bf:1f:8f:a8:7f:1c:80:
         56:9b:62:25:16:e7:48:81:7d:5a:5f:a2:86:4e:6f:13:48:3d:
         e1:dc:31:b5:0e:11:ae:d0:73:a1:b6:1e:1a:be:72:06:01:7b:
         43:f6:18:9b:67:39:6e:a9:47:ff:26:84:33:e2:f8:ee:08:fe:
         92:e2:f0:9d:c3:46:29:fd:c4:6a:a2:85:cb:ea:6f:c8:6d:73:
         33:cc:79:67:f2:e9:a2:93:cc:ec:18:c1:7b:96:f5:95:0c:5e:
         da:f9:c4:b7:d4:de:7e:67:44:66:bd:c7:9c:c0:33:de:5d:d3:
         32:c0:b2:bd:b3:04:be:36:ac:e3:d7:47:fa:0c:48:e4:05:e6:
         cb:1b:c7:f3:68:72:8c:02:30:71:ef:81:7b:4c:77:3b:3a:d0:
         41:68:a4:0d:6e:7e:41:5c:c4:76:66:14:da:74:41:2a:c2:ad:
         7e:a9:13:6b:b1:cc:9a:7e:62:cd:7b:45:e2:50:84:7f:d3:24:
         92:1e:eb:5a:ea:f3:3d:c1:90:09:cb:d7:78:89:2f:6f:2f:8b:
         a1:9c:fe:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:41 2025 by rpki-client