Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/977/EjXJz-aXcHrm0q2Yg5GjHVsqMC8.roa
File:                     EjXJz-aXcHrm0q2Yg5GjHVsqMC8.roa (raw, json)
Hash identifier:          6s6aq+ouyYHDk+yhzLxgFw88vigQ/hhI1nI/O/ygYT4=
Subject key identifier:   12:35:C9:CF:E6:97:70:7A:E6:D2:AD:98:83:91:A3:1D:5B:2A:30:2F
Certificate issuer:       /CN=BD69002D0E8B7ED2C3D1D5D07AE6922C7497F02D
Certificate serial:       16
Authority key identifier: BD:69:00:2D:0E:8B:7E:D2:C3:D1:D5:D0:7A:E6:92:2C:74:97:F0:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vWkALQ6LftLD0dXQeuaSLHSX8C0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/EjXJz-aXcHrm0q2Yg5GjHVsqMC8.roa
Signing time:             Wed 07 Aug 2024 06:09:27 +0000
ROA not before:           Wed 07 Aug 2024 06:09:27 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     23784
IP address blocks:        202.67.48.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD69002D0E8B7ED2C3D1D5D07AE6922C7497F02D
        Validity
            Not Before: Aug  7 06:09:27 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=1235C9CFE697707AE6D2AD988391A31D5B2A302F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:18:ed:af:e9:67:f9:64:0b:d4:a8:d1:41:c4:
                    68:b3:c7:06:ae:ba:ca:0f:7c:38:3a:82:49:14:f8:
                    f1:17:f4:ba:0f:43:4a:81:ee:54:c1:92:d3:d5:ec:
                    8e:e6:52:3e:89:a4:7e:19:cd:c0:e4:17:92:ad:40:
                    8c:0b:28:f8:d2:fc:de:7a:6d:1d:ea:11:d6:c7:14:
                    8f:64:be:df:2d:bb:a5:43:47:dd:3f:b4:43:e8:41:
                    60:98:cf:8d:5a:43:9c:9b:16:cb:7b:cb:cc:eb:25:
                    67:77:cb:bf:21:41:5a:fa:40:f6:7d:08:77:f1:50:
                    88:67:e5:cf:4c:a2:37:98:2a:37:24:02:e0:dc:5c:
                    1e:61:dd:19:b2:b1:fa:fb:2e:3d:75:d3:6a:7c:26:
                    bc:a7:46:42:94:1d:01:8c:98:47:87:d1:07:c9:07:
                    b6:b4:b9:56:61:7f:70:da:62:67:61:96:92:c8:75:
                    76:7b:a6:b6:75:9f:6b:6d:92:d6:9a:cb:c9:a2:a3:
                    50:7d:98:e8:56:b6:cf:67:69:a9:4b:bf:b7:1f:d0:
                    d6:2b:68:da:c7:89:d8:f5:20:e5:88:63:48:3c:92:
                    6e:f9:29:58:51:6f:de:b7:34:e4:db:d0:4e:be:fc:
                    da:9d:05:52:e3:32:bb:22:51:db:c3:24:ba:84:40:
                    8e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:35:C9:CF:E6:97:70:7A:E6:D2:AD:98:83:91:A3:1D:5B:2A:30:2F
            X509v3 Authority Key Identifier:
                keyid:BD:69:00:2D:0E:8B:7E:D2:C3:D1:D5:D0:7A:E6:92:2C:74:97:F0:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vWkALQ6LftLD0dXQeuaSLHSX8C0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/EjXJz-aXcHrm0q2Yg5GjHVsqMC8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.67.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         90:82:7e:9a:f3:38:68:10:b9:a9:9a:ea:d8:60:65:08:ba:79:
         0c:a7:c3:7e:e6:a3:8f:17:0e:fa:b0:d8:95:38:86:91:73:c1:
         d0:9e:9d:d8:66:2a:a6:06:89:fb:93:fb:db:3d:ce:3e:bd:ad:
         cf:fa:c7:c0:e2:a6:9c:68:de:22:1a:91:83:07:89:33:53:bf:
         c4:0d:b8:6f:2e:2c:a8:4a:6e:6c:17:63:68:52:c0:d9:97:de:
         00:70:13:55:44:e8:58:a8:06:f1:d3:41:41:05:f7:63:55:f5:
         3a:62:74:ab:29:1d:74:09:5f:e8:84:5b:9d:97:80:96:e9:3c:
         1a:a3:3c:92:0f:d4:52:5c:9f:30:6d:fa:30:7e:c0:b2:a8:95:
         8c:cb:9f:fd:84:ad:fe:71:6d:57:88:49:eb:b0:df:66:6f:e9:
         a8:43:a7:0e:56:1d:2c:ed:a9:e0:61:cd:28:10:04:04:7c:b7:
         95:99:f5:26:42:07:ed:0b:35:ec:29:6f:ff:a7:23:7a:f6:f3:
         4c:4f:de:2c:99:84:bd:00:99:70:aa:d5:46:02:b9:0f:58:0f:
         40:17:87:a1:63:9e:9e:94:c4:18:d1:b4:d0:9c:46:7c:38:22:
         ec:9f:7f:9c:e4:f6:28:72:16:64:97:86:3e:05:23:8b:a9:5e:
         94:e3:23:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:43 2025 by rpki-client