Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/LjWps0jF3GfHIWVKeAitwW2C-rQ.roa
File:                     LjWps0jF3GfHIWVKeAitwW2C-rQ.roa (raw, json)
Hash identifier:          9xATpGjxUC9L7QwB2iju4lGL9ZXTxfmj1bLsJ7FDHNQ=
Subject key identifier:   2E:35:A9:B3:48:C5:DC:67:C7:21:65:4A:78:08:AD:C1:6D:82:FA:B4
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       011C
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/LjWps0jF3GfHIWVKeAitwW2C-rQ.roa
Signing time:             Sat 01 Jan 2022 01:31:25 +0000
ROA not before:           Sat 01 Jan 2022 01:31:25 +0000
ROA not after:            Thu 15 Dec 2022 01:30:02 +0000
asID:                     9371
IP address blocks:        182.48.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Jan  1 01:31:25 2022 GMT
            Not After : Dec 15 01:30:02 2022 GMT
        Subject: CN=2E35A9B348C5DC67C721654A7808ADC16D82FAB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d3:cb:61:47:95:eb:a7:99:9a:dc:c3:54:3c:
                    b3:48:9c:0a:9e:ed:a5:85:05:ee:0a:c4:10:b1:41:
                    21:e1:fb:cd:33:4b:e6:92:4b:ef:ef:c0:40:2e:4e:
                    54:be:c8:cc:76:68:cc:0c:f2:31:08:fa:52:e8:59:
                    1d:4b:ad:32:eb:86:eb:82:e4:67:5b:a4:2c:c6:55:
                    65:70:05:57:20:fb:5b:03:4c:32:72:5c:15:d1:5b:
                    ae:43:44:0b:8e:f5:31:20:d1:7f:f2:0e:86:f2:ff:
                    ef:0c:0a:20:e7:de:d1:a2:aa:7b:fc:57:dc:96:36:
                    d6:5f:bc:90:82:da:cb:79:eb:2a:db:79:0f:4e:8a:
                    05:35:f5:d5:4d:29:56:e7:c5:9e:74:48:e1:d7:bf:
                    7e:3b:63:d0:4e:65:1d:fd:6a:95:28:be:87:bd:cb:
                    c3:74:88:38:78:40:5f:c1:9a:8a:0c:b1:43:58:b6:
                    4a:fb:6a:6a:05:23:da:80:bf:cc:6e:06:cd:66:d3:
                    2c:4a:4c:9b:0c:60:d3:1b:4a:22:8f:a1:fd:6a:f9:
                    1b:2c:a0:01:6b:60:cb:c4:a6:5b:c8:38:6e:ff:2a:
                    8e:8f:cb:e6:ef:3a:a0:3e:20:ef:11:a5:64:81:6d:
                    cc:86:19:b5:ea:e5:b1:2b:4c:50:52:72:39:97:5e:
                    54:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:35:A9:B3:48:C5:DC:67:C7:21:65:4A:78:08:AD:C1:6D:82:FA:B4
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/LjWps0jF3GfHIWVKeAitwW2C-rQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7f:08:74:0b:b9:3f:ef:d4:a7:37:1f:e9:e2:22:da:a9:cb:ee:
         59:ab:95:c4:54:ea:86:43:f7:e2:5c:2e:0f:e1:b8:16:50:5c:
         6a:5a:d1:ce:0f:33:ba:82:f9:b4:5f:91:d2:7d:fa:b9:7c:3f:
         20:17:6a:ac:65:7b:fb:f4:84:2a:3c:b1:5e:c6:c4:4b:21:e6:
         76:4a:70:96:7e:66:f5:1e:08:d7:cb:01:f3:ff:0b:bb:33:ad:
         37:f3:53:49:cc:eb:5b:5a:01:81:06:c4:c3:91:56:81:81:30:
         8e:db:78:25:c7:14:58:1f:06:24:ba:b9:52:24:06:31:d8:25:
         29:10:63:ef:57:be:0b:91:53:1a:35:5e:bd:72:32:54:ba:43:
         fc:d9:0e:7b:98:fa:16:77:65:a9:86:7d:40:ad:1c:1d:45:4e:
         15:f9:3d:45:60:50:56:e7:66:fb:cd:95:56:7a:c5:d5:d1:b3:
         01:43:8e:ef:d6:ff:fa:f1:bd:f9:bd:18:18:66:53:b8:93:99:
         b1:3a:b4:f9:58:b0:e1:a5:ae:be:47:1d:fb:22:16:b5:52:ce:
         8d:43:e2:de:a7:ca:ff:10:6b:82:a2:87:6c:be:2f:6d:1f:7e:
         b6:b0:06:8e:96:e5:a4:08:7b:af:ed:fe:1d:29:c9:05:cf:b4:
         07:b5:99:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:38 2025 by rpki-client