Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/2TVLpfsYZUZ4n7l5Gg6ZLOchJtU.roa
File:                     2TVLpfsYZUZ4n7l5Gg6ZLOchJtU.roa (raw, json)
Hash identifier:          4dPrBPMVo7i+Pz/f7/GxzVZlWwYro3yrwUrEjNPywGg=
Subject key identifier:   D9:35:4B:A5:FB:18:65:46:78:9F:B9:79:1A:0E:99:2C:E7:21:26:D5
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0175
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/2TVLpfsYZUZ4n7l5Gg6ZLOchJtU.roa
Signing time:             Thu 01 Dec 2022 01:28:32 +0000
ROA not before:           Thu 01 Dec 2022 01:28:32 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     9371
IP address blocks:        210.188.220.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373 (0x175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Dec  1 01:28:32 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=D9354BA5FB186546789FB9791A0E992CE72126D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ad:e2:8a:d8:0d:f3:98:9e:b3:0d:7f:ec:be:
                    de:82:05:06:c5:02:5c:40:f8:c8:3f:ae:f2:99:db:
                    82:29:29:79:24:5e:a4:b7:06:86:e3:60:a1:65:4b:
                    3e:55:6c:c7:4d:da:ed:a9:80:ea:f6:96:4b:46:b4:
                    01:90:54:14:2b:4e:3c:c9:04:c7:09:c0:53:b3:44:
                    dd:ef:80:e8:86:2a:af:aa:ea:dc:d2:48:82:d1:9a:
                    bb:e4:c5:3b:f9:c2:4b:22:87:07:84:83:3d:4c:f2:
                    08:2c:a3:5e:f0:de:93:fe:56:09:30:c8:52:96:e2:
                    23:6d:ec:30:31:6e:9c:d4:e6:cd:a7:a8:37:52:5e:
                    61:d8:d9:63:83:ec:a6:0a:69:bf:de:d0:1c:05:3d:
                    58:86:fd:02:97:ec:e7:99:c9:da:41:f0:8c:fc:62:
                    76:55:87:46:79:3b:80:38:7a:80:8a:2a:11:1e:3d:
                    df:80:89:83:be:9a:68:57:cd:79:97:01:bb:0f:2b:
                    8e:ec:b7:2c:d1:dc:cd:da:16:53:dd:20:2b:99:74:
                    18:87:bc:d3:9d:9f:5a:ee:da:11:cf:fb:86:18:37:
                    48:12:63:ae:b9:30:56:d6:cc:ff:b2:ae:15:3f:48:
                    21:33:84:9e:68:91:d3:b0:3b:73:1a:76:5a:74:0c:
                    b4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:35:4B:A5:FB:18:65:46:78:9F:B9:79:1A:0E:99:2C:E7:21:26:D5
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/2TVLpfsYZUZ4n7l5Gg6ZLOchJtU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:5b:77:f9:40:44:00:c2:43:3b:03:80:ad:35:1e:0f:c5:e6:
         18:07:11:83:f9:28:85:72:37:7b:a8:a8:a5:fa:03:65:12:f1:
         91:63:f2:fa:fa:64:62:9f:ea:79:11:60:0b:24:ce:d5:a6:16:
         41:8d:01:9f:5d:1f:1b:f6:47:02:78:93:83:76:06:87:df:e7:
         41:11:2a:04:81:3e:90:a9:2e:fb:7e:47:17:fd:87:66:18:70:
         c3:ac:87:c7:5b:88:e6:ea:54:60:b7:7b:e7:fc:46:fb:92:d1:
         7b:76:50:e6:34:df:1a:63:5b:fc:12:14:9e:f7:fc:53:2a:9a:
         df:87:1a:bc:ca:4a:a8:36:6b:de:82:42:1d:57:e9:db:fb:28:
         db:cf:ef:28:63:52:d7:97:b5:37:83:79:f5:08:fa:e1:7d:35:
         80:eb:c4:29:bd:5e:25:aa:1a:66:29:5a:85:f3:d2:b6:f2:6d:
         a6:2b:ef:35:7a:05:b6:6f:63:f5:61:2c:4c:16:79:22:5c:be:
         73:aa:24:b6:c2:b9:51:9b:06:e7:15:28:0c:a9:fc:8f:c4:b5:
         26:92:84:80:e4:13:29:54:a3:05:8d:94:7f:53:19:91:5a:e5:
         00:01:44:ef:ed:23:b0:f8:9d:d5:20:5c:58:4f:ec:e2:bf:35:
         dc:46:9d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:52 2025 by rpki-client