Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20081/S9hoaUvcc1tYf26FlTicJIqgp48.roa
File:                     S9hoaUvcc1tYf26FlTicJIqgp48.roa (raw, json)
Hash identifier:          eRQiCNbguS5//dWZpctreT/m63SW9orhb3KFXgLudZE=
Subject key identifier:   4B:D8:68:69:4B:DC:73:5B:58:7F:6E:85:95:38:9C:24:8A:A0:A7:8F
Certificate issuer:       /CN=049B35AACA20B630F4AD52CB598F951250FF07FD
Certificate serial:       0C
Authority key identifier: 04:9B:35:AA:CA:20:B6:30:F4:AD:52:CB:59:8F:95:12:50:FF:07:FD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/S9hoaUvcc1tYf26FlTicJIqgp48.roa
Signing time:             Thu 30 Jan 2025 01:22:47 +0000
ROA not before:           Thu 30 Jan 2025 01:22:47 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     17529
IP address blocks:        61.213.200.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049B35AACA20B630F4AD52CB598F951250FF07FD
        Validity
            Not Before: Jan 30 01:22:47 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=4BD868694BDC735B587F6E8595389C248AA0A78F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f9:91:ac:ac:01:74:50:52:49:80:50:c3:8a:
                    21:2d:29:e4:b2:06:0b:c4:9d:db:d8:4b:57:73:a2:
                    51:2b:7e:2a:1d:d9:af:14:02:fb:d3:5b:71:69:ac:
                    bf:69:9d:f9:0a:21:87:1d:dd:be:41:f7:aa:b1:70:
                    b0:a0:85:71:1c:ae:a4:bf:4f:40:c5:c4:36:37:bc:
                    89:47:45:15:1e:2d:08:21:e4:29:9b:a6:bd:61:f1:
                    e3:a8:05:70:3b:5f:09:3b:e2:d1:56:7a:8c:c3:3e:
                    5c:e7:99:f9:be:71:b2:5e:52:21:f2:32:86:45:2e:
                    77:ba:95:0b:5d:08:f0:f9:00:22:80:9e:d7:21:f5:
                    e2:2c:a4:d9:9e:83:c6:99:13:12:74:57:0e:24:17:
                    e7:3a:62:fc:2e:42:4b:00:f2:47:37:29:64:ab:f3:
                    5f:ac:f3:e5:b4:ad:8b:31:62:93:26:ff:20:ab:89:
                    7b:20:ef:16:99:e4:db:b9:29:39:8f:7c:91:f1:5f:
                    6e:9f:87:d4:aa:35:2f:cd:df:80:3b:df:6d:9b:7a:
                    12:52:c9:e2:1b:1f:26:e3:87:a9:b2:ff:7e:51:fe:
                    ad:55:ce:d1:19:3e:61:ea:94:34:e1:a6:95:e1:df:
                    4f:c6:13:4b:1f:c8:77:54:8e:9b:df:75:f5:ef:3f:
                    b9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D8:68:69:4B:DC:73:5B:58:7F:6E:85:95:38:9C:24:8A:A0:A7:8F
            X509v3 Authority Key Identifier:
                keyid:04:9B:35:AA:CA:20:B6:30:F4:AD:52:CB:59:8F:95:12:50:FF:07:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/S9hoaUvcc1tYf26FlTicJIqgp48.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.213.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         02:37:0e:19:ff:8b:31:39:28:40:8c:37:2b:1f:0f:32:03:bc:
         0e:b0:ee:d0:c2:bf:ec:51:d4:b3:6b:d4:97:df:7d:9a:81:db:
         ab:c2:42:59:f4:9c:70:df:91:d8:f5:e3:c8:2f:0f:56:1a:c7:
         52:e8:27:9f:76:f0:d3:31:3f:06:f5:35:c3:10:d8:b0:42:67:
         88:7c:9c:20:c5:83:0e:30:ab:ba:ae:d0:fc:6a:6d:d1:32:18:
         43:22:cb:fc:ce:24:c2:de:ef:1b:3f:7e:c6:08:e4:31:d4:d6:
         a7:ba:1d:10:e2:91:24:5f:7b:57:db:11:9d:f1:9a:8f:38:09:
         ea:6b:c5:a9:90:6b:6b:e7:26:d9:f0:0e:7d:b8:9f:bb:8f:44:
         47:cd:72:4f:37:79:86:21:11:5f:6c:d4:56:16:55:a5:b7:40:
         cd:d4:dc:1f:21:2f:d6:74:7e:ef:2b:80:82:a7:9f:03:01:3d:
         78:a8:11:a9:03:51:61:19:34:dd:97:ba:05:6f:13:4d:3a:0a:
         2c:de:74:53:6e:59:02:b0:56:b0:f0:ca:24:21:ea:51:9c:99:
         fb:a3:28:ae:02:a6:11:c0:a8:84:0c:69:18:27:7c:41:f8:32:
         90:02:bd:67:4d:10:19:47:d6:eb:e3:4d:55:e5:05:00:e0:79:
         cf:32:b3:83
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Feb 22 04:37:52 2025 by rpki-client