Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/984/EIrZSXgDfXmy5MD9cuehNpPYQmA.roa
File:                     EIrZSXgDfXmy5MD9cuehNpPYQmA.roa (raw, json)
Hash identifier:          shosH61mt21pYoJU+CEZ6k6PhIkggloBy0m0QCtZms4=
Subject key identifier:   10:8A:D9:49:78:03:7D:79:B2:E4:C0:FD:72:E7:A1:36:93:D8:42:60
Certificate issuer:       /CN=37D74CF78B0031D2AA5C9AED388E7C0438C61692
Certificate serial:       23
Authority key identifier: 37:D7:4C:F7:8B:00:31:D2:AA:5C:9A:ED:38:8E:7C:04:38:C6:16:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N9dM94sAMdKqXJrtOI58BDjGFpI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/EIrZSXgDfXmy5MD9cuehNpPYQmA.roa
Signing time:             Wed 31 Jul 2024 01:29:50 +0000
ROA not before:           Wed 31 Jul 2024 01:29:50 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     45677
IP address blocks:        180.148.184.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37D74CF78B0031D2AA5C9AED388E7C0438C61692
        Validity
            Not Before: Jul 31 01:29:50 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=108AD94978037D79B2E4C0FD72E7A13693D84260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fd:22:49:f3:56:5e:ea:01:cb:75:f9:cd:90:
                    ce:e9:a1:c0:3f:56:e0:09:fa:ef:55:16:bf:78:48:
                    51:17:e4:b1:66:bc:a6:7b:fe:f3:62:9d:d5:ec:3c:
                    23:aa:ad:88:5e:a3:5d:21:b5:be:00:48:86:02:c3:
                    b3:35:c9:9e:cb:59:d2:85:32:72:03:8d:d7:47:bf:
                    8d:b1:ac:8e:d8:fe:97:01:d0:f5:5e:18:be:52:9e:
                    eb:16:97:fa:5b:ec:11:5d:e1:d4:40:7c:d1:86:ad:
                    9d:1c:a6:44:62:7d:14:c4:df:79:f7:77:c4:14:ac:
                    3b:5e:7b:8b:6f:c4:fc:e2:d0:13:39:79:f9:8e:06:
                    1f:b8:7c:36:40:a9:7d:57:d7:c6:60:3d:2f:e6:5e:
                    0c:ce:d8:f8:cf:e3:55:b9:06:20:3c:05:ff:e1:ee:
                    85:09:47:6e:c9:74:b7:71:0f:98:5b:b6:02:3e:4f:
                    37:00:e6:4f:be:94:0c:3c:ef:34:b2:ac:c4:d2:60:
                    d8:46:a0:59:e5:9b:d8:db:00:bb:a4:e6:26:ac:08:
                    22:39:ff:14:96:80:cc:9e:8c:53:98:53:5b:c0:3f:
                    20:17:9b:41:b2:c1:19:c7:8d:f3:5c:6b:6b:73:e1:
                    a2:c3:55:e1:f6:5b:37:be:b1:5c:f5:9d:e3:3d:22:
                    c4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:8A:D9:49:78:03:7D:79:B2:E4:C0:FD:72:E7:A1:36:93:D8:42:60
            X509v3 Authority Key Identifier:
                keyid:37:D7:4C:F7:8B:00:31:D2:AA:5C:9A:ED:38:8E:7C:04:38:C6:16:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/N9dM94sAMdKqXJrtOI58BDjGFpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N9dM94sAMdKqXJrtOI58BDjGFpI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/EIrZSXgDfXmy5MD9cuehNpPYQmA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.148.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         31:4a:f7:7c:b4:14:d2:a2:8d:74:a1:21:91:a3:16:59:36:56:
         b7:af:1e:04:16:41:c3:ef:e6:4b:73:66:75:7d:10:31:bc:16:
         ec:f5:a2:48:a2:52:3f:82:91:76:2e:12:dd:b4:bd:34:03:e1:
         8a:8d:3f:44:00:03:f1:21:4b:df:e0:6e:52:86:fc:62:c2:c7:
         06:1e:b3:0e:91:c5:da:76:14:b1:ce:1f:19:19:1e:0e:16:67:
         90:be:b5:e4:b3:ae:0d:6b:f9:6b:10:d0:25:35:c0:96:55:c8:
         fe:6a:32:34:45:6b:de:97:b7:e7:95:de:09:1c:75:1f:0b:6a:
         22:bf:92:98:a3:7f:51:3e:3e:a0:89:fe:97:d6:57:8b:7f:00:
         fd:8f:19:db:0f:46:bf:e2:fe:f3:53:db:f8:82:eb:f0:81:68:
         1c:c6:44:5d:16:47:cc:29:61:eb:7b:f9:78:c3:d7:60:ee:3e:
         f4:07:ce:a1:5b:91:ac:bd:d8:90:1a:40:68:e1:ec:c3:8f:93:
         40:f3:83:6f:f0:a2:7e:fc:9c:cb:f2:cb:ab:bc:03:63:ab:b5:
         18:58:ca:a4:c5:05:59:10:f7:42:c3:bd:67:50:9e:29:b7:ba:
         ac:b3:96:d7:38:64:24:50:8e:37:d1:4c:02:1d:d1:bd:88:f9:
         61:d8:26:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:39 2025 by rpki-client