Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/958/RvzZT4oOMNaeJKBjRCrZ2D64Unk.roa
File:                     RvzZT4oOMNaeJKBjRCrZ2D64Unk.roa (raw, json)
Hash identifier:          iM4GDweOwtQDjhy7cI9iTPbkc7EYvM0l2tDiNd72JOs=
Subject key identifier:   46:FC:D9:4F:8A:0E:30:D6:9E:24:A0:63:44:2A:D9:D8:3E:B8:52:79
Certificate issuer:       /CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
Certificate serial:       5D
Authority key identifier: 99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/RvzZT4oOMNaeJKBjRCrZ2D64Unk.roa
Signing time:             Sun 01 May 2022 01:30:53 +0000
ROA not before:           Sun 01 May 2022 01:30:53 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     38631
IP address blocks:        203.104.158.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
        Validity
            Not Before: May  1 01:30:53 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=46FCD94F8A0E30D69E24A063442AD9D83EB85279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d2:cf:88:df:70:e0:6c:c4:1a:76:6e:f6:4b:
                    3f:56:81:e7:f9:58:67:53:20:61:71:d9:52:35:90:
                    2b:c9:83:49:01:1b:24:d7:d5:04:bc:6f:1d:8e:38:
                    db:e7:a1:51:4c:0a:73:08:23:56:2b:67:ac:48:f0:
                    5c:99:10:29:b9:1a:17:59:b4:33:fd:86:4a:21:0f:
                    9c:c8:eb:02:c6:c3:7a:86:0e:06:56:63:7c:c3:ee:
                    10:49:5c:b6:51:62:61:ae:44:eb:0c:c6:da:7b:de:
                    1f:72:8c:2c:72:2d:1a:dc:01:3b:92:b7:bc:61:42:
                    05:fa:60:cf:44:52:18:80:93:f6:2e:ef:4c:10:61:
                    47:49:20:58:61:22:c1:b4:fe:42:85:42:d8:0a:e5:
                    7d:27:8a:ce:f3:e2:c9:d3:e3:cd:94:77:f5:a6:af:
                    a5:05:a5:53:46:2c:e7:2d:91:6d:d2:2a:cc:14:99:
                    03:d1:e4:42:ff:91:31:29:ad:8d:e8:fe:6e:2e:ef:
                    14:93:8b:ec:8f:a7:34:62:45:dc:46:97:81:7a:aa:
                    26:1a:58:e9:3b:0d:72:a7:99:58:82:a3:27:5f:ca:
                    60:d3:3b:5d:6d:28:26:aa:ce:7b:f3:8e:20:26:cd:
                    90:33:76:a2:dd:84:35:ca:2b:43:93:e6:01:94:e9:
                    cb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FC:D9:4F:8A:0E:30:D6:9E:24:A0:63:44:2A:D9:D8:3E:B8:52:79
            X509v3 Authority Key Identifier:
                keyid:99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/RvzZT4oOMNaeJKBjRCrZ2D64Unk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.104.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:f7:59:34:f6:91:1f:f6:bc:c5:5e:b2:5d:ec:73:d2:92:6d:
         6c:57:eb:b3:1d:da:ad:c8:98:ed:07:3e:94:94:70:3a:04:07:
         fe:5a:1a:ee:44:01:63:9a:02:30:27:1c:19:93:5d:a0:9a:86:
         54:0b:d1:7b:13:59:21:d9:6b:f2:ad:50:b0:c9:17:7b:a2:54:
         93:03:6b:7d:b6:9d:33:cb:19:37:10:a8:8f:4c:38:0a:7f:f1:
         b6:18:c6:1e:2b:c4:7e:69:fa:09:b2:b5:47:a3:01:e5:15:ca:
         53:b2:26:8f:73:bc:11:33:ab:96:89:b0:0a:30:1c:14:4e:3e:
         3a:6d:94:e8:95:c8:34:c1:61:89:18:5e:c3:a7:97:d3:25:35:
         2f:14:1d:36:4d:62:cd:e4:c0:e9:74:01:1d:96:46:1d:21:18:
         ea:7b:40:68:a8:a4:14:46:b8:c2:8f:c0:a4:fa:d2:c2:c4:c9:
         29:68:fc:ae:f8:4f:05:2a:0e:26:83:2d:d6:cf:01:d1:90:52:
         e0:f3:24:6c:8c:65:be:65:71:c6:ab:c1:88:c7:d9:ef:6d:13:
         18:0c:85:9e:30:6a:2b:dc:4e:cb:92:1d:e7:15:3d:b9:46:7a:
         79:69:b6:e6:66:e4:eb:4b:3a:3e:d8:cf:0d:98:85:0d:db:8b:
         fb:22:a1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:51 2025 by rpki-client