Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/NEin2ezOVZ-ZPa0XE4ceWTdkXKE.roa
File:                     NEin2ezOVZ-ZPa0XE4ceWTdkXKE.roa (raw, json)
Hash identifier:          vn4kfuw3y6wjBhQyxMk78yAuCOZXIWxMaer6rE8+dnk=
Subject key identifier:   34:48:A7:D9:EC:CE:55:9F:99:3D:AD:17:13:87:1E:59:37:64:5C:A1
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0165
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/NEin2ezOVZ-ZPa0XE4ceWTdkXKE.roa
Signing time:             Thu 01 Dec 2022 01:28:26 +0000
ROA not before:           Thu 01 Dec 2022 01:28:26 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     7684
IP address blocks:        49.212.78.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 357 (0x165)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Dec  1 01:28:26 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=3448A7D9ECCE559F993DAD1713871E5937645CA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6b:6e:06:aa:a1:1b:f5:29:af:d6:1d:a4:23:
                    9d:58:e5:64:61:68:ba:7f:75:c8:03:59:26:74:8a:
                    03:98:53:c4:b0:c6:08:85:b3:ad:cc:2d:2a:44:70:
                    af:13:26:b2:45:7c:1e:de:7b:37:73:82:5d:fa:4e:
                    c7:a0:24:3d:80:4e:e8:75:0a:ad:24:da:72:ea:0d:
                    46:4b:c4:c4:4a:ee:58:7d:e6:cd:43:e4:c6:fe:47:
                    00:57:f9:11:18:25:d2:94:36:ea:e3:76:72:55:9c:
                    37:ed:99:f6:4b:54:b9:27:9d:7b:7b:a6:81:69:eb:
                    fc:11:ba:02:1e:0a:e0:c2:19:81:84:15:49:2a:45:
                    da:6a:3d:2f:f9:7b:04:a2:ce:72:22:cc:a8:20:30:
                    51:20:d9:63:5d:5d:e4:3c:cd:b1:d7:85:a8:86:67:
                    2d:b3:fc:13:1b:14:c1:7c:ab:30:7d:84:55:2b:78:
                    c3:26:3e:22:26:b7:3a:4e:cd:fd:3a:c6:93:96:fb:
                    0a:70:c0:e9:cf:9a:35:49:cf:a3:ec:df:c3:66:45:
                    48:62:c2:41:b5:f5:cf:1a:e6:8b:ef:e0:71:1b:52:
                    e6:74:90:f2:2c:e9:c3:b3:69:8d:80:02:c9:14:c8:
                    38:62:df:57:d6:ca:12:90:81:57:24:c0:a0:3a:e3:
                    5c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:48:A7:D9:EC:CE:55:9F:99:3D:AD:17:13:87:1E:59:37:64:5C:A1
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/NEin2ezOVZ-ZPa0XE4ceWTdkXKE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.212.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:79:05:52:dd:3a:ec:27:c5:fb:1a:cb:9c:7c:6b:44:5e:ef:
         96:73:1b:1c:e1:9b:41:6c:ff:3e:f5:42:7a:09:de:59:93:66:
         be:c4:f3:4a:91:ae:f0:b7:90:fb:fd:09:12:9b:fd:ff:a2:6d:
         5c:83:e8:d0:4f:32:6a:49:d6:c1:7e:04:98:a8:c5:86:b8:ea:
         b8:f8:78:d7:9f:b4:e5:41:de:bc:3d:c8:ed:ba:a9:3e:44:16:
         86:29:45:db:64:66:b2:5a:e9:22:fb:3a:e0:e7:f8:2f:d1:1c:
         c7:2f:de:5f:01:45:0e:a7:82:df:7a:b8:a9:a6:02:e9:f9:35:
         22:4e:8a:55:c9:66:14:fa:5a:3f:15:25:a5:0b:57:c4:0b:b8:
         59:6f:2e:8a:0b:7f:93:1d:db:ed:28:7d:a4:fe:fb:22:e8:b1:
         9d:94:81:2f:09:b5:03:8d:17:85:98:6d:a1:bd:3b:ed:a0:6c:
         b1:d2:40:9d:9a:83:80:3c:00:86:cf:6b:e6:d1:f5:85:6e:81:
         de:70:9d:24:10:0f:c6:a3:ba:08:bb:62:ef:cc:90:b0:07:6b:
         4e:6e:dd:a3:cc:cc:c5:bb:b4:ff:41:56:ae:bb:71:f7:15:71:
         56:eb:1c:c4:62:db:96:1c:25:a7:0c:59:7e:69:01:6d:71:34:
         d3:0d:b1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:05:29 2025 by rpki-client