Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/954/Se_HT1wV0ZVoRpKIVI0wjUn5ED0.roa
File:                     Se_HT1wV0ZVoRpKIVI0wjUn5ED0.roa (raw, json)
Hash identifier:          QLHqrLvOL2F3quMLBhSiJe/5/9e3KAwTXwiWiMhvIMk=
Subject key identifier:   49:EF:C7:4F:5C:15:D1:95:68:46:92:88:54:8D:30:8D:49:F9:10:3D
Certificate issuer:       /CN=1678DD6B61CB673BA4423C81BF63A61DD724E840
Certificate serial:       37
Authority key identifier: 16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Se_HT1wV0ZVoRpKIVI0wjUn5ED0.roa
Signing time:             Sat 01 Mar 2025 01:29:02 +0000
ROA not before:           Sat 01 Mar 2025 01:29:02 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     131954
IP address blocks:        202.226.12.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1678DD6B61CB673BA4423C81BF63A61DD724E840
        Validity
            Not Before: Mar  1 01:29:02 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=49EFC74F5C15D19568469288548D308D49F9103D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:92:a8:73:33:b7:e7:5a:25:8b:ee:9f:0e:0d:
                    ba:81:4d:12:54:03:bf:ba:fd:45:42:d1:77:7b:cd:
                    7a:1c:fb:f5:2b:1b:4c:f9:2f:82:e0:b4:3b:95:fe:
                    af:f6:ab:5c:92:1a:fb:34:00:6f:46:a8:23:06:02:
                    f6:a8:30:e9:47:cd:78:0c:cc:9e:b8:af:36:d1:ba:
                    7c:ee:a7:4f:0a:c1:64:73:00:fc:a4:9b:45:fd:fa:
                    19:c6:91:3f:28:63:e1:a0:2d:c2:3f:3b:bd:36:38:
                    a7:14:ca:ca:e6:ec:a7:b4:55:71:36:f0:9b:32:3d:
                    8e:17:bc:86:52:c7:0f:cf:b8:f0:3a:47:c8:f0:26:
                    12:49:4e:dd:1b:33:d0:ad:39:bc:3d:5d:16:c2:a6:
                    1a:0d:d9:f2:8d:ea:81:66:92:e3:f7:8f:64:cd:64:
                    05:25:0d:05:6d:ea:18:9c:1e:45:a2:86:13:e3:52:
                    ee:02:15:6a:40:a6:5a:4e:39:8b:9d:39:83:0b:92:
                    91:8c:ec:aa:42:78:b4:38:09:ee:66:44:07:7f:8b:
                    fd:c9:b5:1f:cd:2a:5b:f3:cc:75:d6:ce:5c:a0:7f:
                    2d:1e:5d:8c:b0:eb:cf:c0:61:09:26:08:4d:79:16:
                    85:35:bf:6c:8a:bc:0f:cf:94:2f:26:47:89:c4:8c:
                    81:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:EF:C7:4F:5C:15:D1:95:68:46:92:88:54:8D:30:8D:49:F9:10:3D
            X509v3 Authority Key Identifier:
                keyid:16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Se_HT1wV0ZVoRpKIVI0wjUn5ED0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.226.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:09:e4:3b:56:c3:2c:cf:fa:98:a9:1a:0f:fd:a8:f3:ca:ac:
         ec:d0:67:ad:12:77:5e:93:64:d2:55:14:31:be:e3:0b:9a:ba:
         13:75:ee:46:ab:e6:62:47:23:2a:c6:eb:f7:ed:2b:2c:eb:24:
         c0:41:b3:7e:90:f8:7b:d6:2f:4e:64:ea:99:b9:e9:1f:ea:bd:
         4e:73:1b:3e:87:1a:f0:ff:38:2a:72:00:ef:79:59:00:51:a3:
         ae:87:66:0c:1f:de:10:db:77:04:d9:8f:54:fb:22:3b:ee:5c:
         b5:c9:16:02:6c:f1:eb:05:16:a2:76:8c:46:40:9d:75:c1:51:
         fa:f0:34:6f:9c:02:43:45:52:62:45:03:d0:e4:5e:d5:9e:a0:
         01:b4:4c:43:fc:e6:6a:8e:28:e0:1e:e9:84:66:f1:4d:75:83:
         e6:b6:f0:da:bb:51:b1:03:68:7b:bf:20:09:95:1e:68:8e:a3:
         0b:b2:08:4d:3b:eb:b1:04:e9:e4:96:2b:39:df:d6:fa:28:0c:
         31:3b:84:9f:32:7e:c6:70:60:ce:5e:95:fa:da:19:41:95:c1:
         63:a2:b9:f8:72:f9:e4:75:74:72:6b:bb:24:37:c2:82:c5:35:
         71:81:a9:e7:09:41:8f:e8:e0:55:00:bf:44:06:67:2f:36:58:
         58:e5:1f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:18:45 2025 by rpki-client