Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/6yufG5ETLtE1zrI1v7Ca7GtYPUQ.roa
File:                     6yufG5ETLtE1zrI1v7Ca7GtYPUQ.roa (raw, json)
Hash identifier:          QNSjO3tENRPLIyVhg/kI5uQcv/b6VVj7757ccKlMpmM=
Subject key identifier:   EB:2B:9F:1B:91:13:2E:D1:35:CE:B2:35:BF:B0:9A:EC:6B:58:3D:44
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0126
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/6yufG5ETLtE1zrI1v7Ca7GtYPUQ.roa
Signing time:             Sat 01 Jan 2022 01:32:10 +0000
ROA not before:           Sat 01 Jan 2022 01:32:10 +0000
ROA not after:            Thu 15 Dec 2022 01:30:02 +0000
asID:                     9371
IP address blocks:        183.181.76.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Jan  1 01:32:10 2022 GMT
            Not After : Dec 15 01:30:02 2022 GMT
        Subject: CN=EB2B9F1B91132ED135CEB235BFB09AEC6B583D44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:86:bd:7b:ce:02:dc:63:cb:68:dc:91:af:38:
                    e8:7c:15:fd:5a:3f:c1:bf:40:f5:10:24:49:ae:18:
                    6e:64:92:86:09:62:1f:8a:d2:26:ef:24:8a:76:bb:
                    b5:ca:73:b9:de:70:2b:84:e0:c2:8b:28:46:01:42:
                    29:55:2d:33:4a:8c:72:6c:06:2f:0b:bc:ae:d1:1b:
                    c8:1b:7c:6f:c5:e1:fd:af:f2:00:34:a5:89:42:e3:
                    31:aa:53:2a:47:38:cb:ff:39:d3:13:e8:9f:c1:d0:
                    f4:e7:c3:a4:61:e5:0d:02:5a:fb:34:0b:73:ab:ed:
                    5e:bb:95:d1:f8:97:aa:b0:9e:f7:5d:c6:0e:39:d8:
                    66:2b:42:07:06:e9:60:b5:8a:2b:95:4f:30:44:cf:
                    a9:55:77:a1:e9:3f:91:a9:c8:7d:06:51:99:18:dd:
                    1e:02:23:c8:be:ca:0a:ee:da:b5:29:af:68:97:b2:
                    8f:c2:fd:49:9c:1f:4d:3c:5f:f5:42:a7:85:8b:81:
                    c3:93:d5:ec:7e:ca:29:2c:8f:35:1b:79:e3:43:aa:
                    b6:88:b7:2c:3c:6a:53:04:32:81:bd:6e:8a:fc:42:
                    02:30:40:21:f7:ac:ae:0b:71:6b:7b:ca:52:33:ca:
                    c3:df:fe:60:7e:32:1d:a8:d2:8c:bd:78:4e:2f:65:
                    b2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:2B:9F:1B:91:13:2E:D1:35:CE:B2:35:BF:B0:9A:EC:6B:58:3D:44
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/6yufG5ETLtE1zrI1v7Ca7GtYPUQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:09:65:97:8d:c6:a7:76:85:71:87:7c:b1:48:7f:17:95:38:
         23:48:82:63:52:32:45:31:fb:98:02:8b:26:df:34:2f:8f:8c:
         0a:5c:10:1a:14:fe:54:dd:a2:04:9f:bd:1f:be:6c:1a:c6:d1:
         c1:e5:48:2c:f4:86:75:0d:c7:ec:97:7b:fb:62:ba:f3:c8:87:
         44:eb:e1:9e:5c:ab:26:fb:1b:dd:0a:d1:22:0e:9c:37:81:d6:
         a8:bd:41:1d:42:91:a4:06:4b:39:d8:6d:1a:0b:2c:c8:cb:0d:
         60:71:31:e9:43:ef:80:73:3f:ab:02:58:ec:0b:f9:20:1d:20:
         df:c9:44:1d:1a:81:16:1f:4f:34:a3:dd:61:1c:87:fc:4d:78:
         61:e0:6b:b6:82:28:d4:ea:e2:9f:45:7a:c2:05:a4:66:67:87:
         60:77:19:7c:fc:7a:b3:17:b8:72:6d:8b:8e:0d:3f:01:46:1d:
         d4:c4:f2:0d:12:09:d8:66:77:bb:69:1f:e1:61:b0:8f:51:67:
         01:cf:a8:c4:2c:64:15:44:d5:39:04:ec:99:f0:e3:3f:e6:56:
         e2:27:26:0c:d4:ba:23:15:96:7d:af:a3:a7:1b:2f:39:c6:1f:
         7e:b6:69:3f:7d:70:3f:b6:41:0b:3f:20:cd:08:35:29:8a:34:
         06:ad:1f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:49 2025 by rpki-client