Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20081/FP2JXH90aa5ApPn2cJrAVr_0Syc.roa
File:                     FP2JXH90aa5ApPn2cJrAVr_0Syc.roa (raw, json)
Hash identifier:          x4cQIQUrNicJqygwZsuR2gY5SySLKlDXtms/8sqcYXA=
Subject key identifier:   14:FD:89:5C:7F:74:69:AE:40:A4:F9:F6:70:9A:C0:56:BF:F4:4B:27
Certificate issuer:       /CN=049B35AACA20B630F4AD52CB598F951250FF07FD
Certificate serial:       0B
Authority key identifier: 04:9B:35:AA:CA:20:B6:30:F4:AD:52:CB:59:8F:95:12:50:FF:07:FD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/FP2JXH90aa5ApPn2cJrAVr_0Syc.roa
Signing time:             Thu 30 Jan 2025 01:22:47 +0000
ROA not before:           Thu 30 Jan 2025 01:22:47 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     17529
IP address blocks:        61.213.192.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049B35AACA20B630F4AD52CB598F951250FF07FD
        Validity
            Not Before: Jan 30 01:22:47 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=14FD895C7F7469AE40A4F9F6709AC056BFF44B27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:16:87:00:66:8b:37:17:9a:17:7d:3c:e7:7b:
                    10:36:42:f2:66:50:c2:59:62:bd:c6:b0:48:4c:3f:
                    10:c0:77:42:1f:40:6f:3f:4d:bb:c1:8b:34:4c:48:
                    cd:34:66:b3:dc:41:e4:ce:c5:0b:a7:c5:f8:6f:c9:
                    e6:62:be:a4:ae:64:03:47:93:42:f7:28:13:20:96:
                    07:63:90:6e:fb:d2:9c:d7:f6:de:88:25:c2:d5:af:
                    61:86:14:f9:9c:78:04:d7:f3:23:17:e7:bc:b0:77:
                    20:d8:fd:f6:e2:a0:72:c9:5c:95:65:84:69:02:e5:
                    f3:58:86:d5:43:f1:64:34:d3:7a:5d:ee:93:f1:79:
                    44:0d:6b:59:db:2a:28:5d:bd:05:c1:15:d1:af:9d:
                    b4:d9:c3:56:19:fb:d9:bf:f0:0b:2f:07:64:6d:49:
                    5f:0b:e3:e9:f7:81:32:b6:31:71:11:c8:80:af:38:
                    6e:81:62:3e:f2:15:8e:8d:db:fd:0a:e9:9e:5c:ae:
                    1a:6f:43:0c:26:86:ac:00:96:49:0e:73:a8:69:bb:
                    a1:37:9c:89:b8:6d:36:af:c3:30:83:8b:99:eb:a9:
                    12:dd:09:c8:6e:df:d7:1a:ce:dd:34:ce:9f:49:73:
                    5f:ea:a5:57:72:fb:c2:e5:cc:3a:62:98:61:9e:d2:
                    d1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:FD:89:5C:7F:74:69:AE:40:A4:F9:F6:70:9A:C0:56:BF:F4:4B:27
            X509v3 Authority Key Identifier:
                keyid:04:9B:35:AA:CA:20:B6:30:F4:AD:52:CB:59:8F:95:12:50:FF:07:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/FP2JXH90aa5ApPn2cJrAVr_0Syc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.213.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         53:a2:b9:36:4a:5f:f2:ca:6e:e5:28:44:70:aa:a4:a1:8a:5a:
         5f:f0:5e:f6:31:b3:a8:57:84:30:0b:eb:f9:b3:fa:32:94:96:
         22:87:6b:77:55:36:3e:9c:2d:6e:74:c2:2d:fd:66:7c:8a:07:
         60:75:c7:cb:e8:d5:32:93:ba:eb:02:5e:d0:94:c8:13:b9:bc:
         d4:26:b9:b6:a8:b6:19:12:f5:31:2e:16:e0:77:0f:6a:7b:85:
         7f:82:00:7d:a0:8b:49:90:d4:4a:1b:91:38:d7:46:15:0b:db:
         62:3f:a5:5a:49:58:10:80:30:4b:57:b1:fe:4f:93:83:81:cf:
         d3:69:1d:ec:c2:31:0f:ee:38:7b:c1:24:ba:87:cc:60:ec:65:
         51:7c:00:f1:f2:3f:f0:93:d5:e8:6b:f7:1d:a9:31:b1:55:40:
         97:c7:d1:07:0e:42:e3:56:f5:11:8a:f8:6d:36:d7:96:25:1d:
         6a:cf:56:82:0d:a9:33:70:29:40:0b:d2:10:3b:93:51:06:e1:
         89:0f:bd:d2:99:52:03:1d:fd:09:76:4a:73:a0:1c:70:b6:be:
         e1:d0:8d:02:c2:72:f1:cd:67:01:21:88:46:5c:5d:4a:c6:de:
         96:59:1a:d6:e3:39:9e:1d:9c:4b:7b:87:60:da:59:32:33:6d:
         dc:6b:b7:cf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Feb 22 04:26:30 2025 by rpki-client