Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/RSNXJUEfJfytCIO-PAh2tz90uGo.roa
File:                     RSNXJUEfJfytCIO-PAh2tz90uGo.roa (raw, json)
Hash identifier:          GK2OosoMB1bq3nc4kDwAgj1iYJohDN6wyF0mmXt2PM8=
Subject key identifier:   45:23:57:25:41:1F:25:FC:AD:08:83:BE:3C:08:76:B7:3F:74:B8:6A
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       010F
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/RSNXJUEfJfytCIO-PAh2tz90uGo.roa
Signing time:             Sat 01 Jan 2022 01:31:20 +0000
ROA not before:           Sat 01 Jan 2022 01:31:20 +0000
ROA not after:            Thu 15 Dec 2022 01:30:02 +0000
asID:                     9371
IP address blocks:        112.78.221.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 271 (0x10f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Jan  1 01:31:20 2022 GMT
            Not After : Dec 15 01:30:02 2022 GMT
        Subject: CN=45235725411F25FCAD0883BE3C0876B73F74B86A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:80:6d:aa:3a:68:f1:59:58:e3:d4:f9:e5:cc:
                    bc:48:95:6a:1a:3f:e5:a9:54:1b:ee:3d:61:9a:79:
                    bb:7e:81:9b:cd:d4:8b:29:03:26:1c:87:34:44:42:
                    0d:e6:d5:79:b2:12:6c:22:18:74:77:37:8a:d4:8a:
                    b7:82:e3:ac:e5:03:e8:66:8c:86:88:56:36:24:4c:
                    b2:2d:b9:8f:e8:80:71:47:fe:1c:88:48:66:46:4c:
                    cd:93:e4:cd:8c:94:bb:1c:5d:95:af:d5:a3:29:82:
                    ec:42:2b:6c:b0:c9:a9:04:4c:37:73:82:58:3f:58:
                    9f:8f:5e:4e:4c:e4:0f:e5:81:77:0d:cd:92:03:7b:
                    f7:dd:75:d0:38:3b:c2:89:1f:b9:73:28:b3:71:b7:
                    e6:f0:fc:ab:1c:eb:db:f4:93:28:44:c2:e7:7b:2d:
                    9c:7c:d8:3a:bf:4f:d6:0c:f1:1e:7d:fa:89:06:9a:
                    bf:01:b9:16:8b:2c:7a:3a:1f:20:a6:fc:ac:2a:a1:
                    fc:d4:1a:e6:81:74:c4:bf:d1:3e:e0:d9:18:9d:7d:
                    8a:10:7c:a7:82:db:37:a2:7e:16:a4:39:62:ea:30:
                    29:69:d2:1c:be:ce:5e:db:30:94:23:bf:87:ff:fd:
                    8c:25:29:97:73:fa:f2:d9:83:a5:24:eb:63:9a:75:
                    ff:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:23:57:25:41:1F:25:FC:AD:08:83:BE:3C:08:76:B7:3F:74:B8:6A
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/RSNXJUEfJfytCIO-PAh2tz90uGo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:72:1a:81:ed:cf:c0:53:6e:00:91:fb:b7:1b:3f:9d:77:a3:
         98:76:ec:ef:6c:10:2a:31:3d:42:4d:e5:3e:87:d6:11:55:c3:
         b1:e0:91:ca:35:eb:a0:7a:99:1d:76:1f:6b:ac:b7:bc:92:70:
         12:ff:58:7b:b2:6e:bf:ef:16:51:c3:39:d7:da:b9:fa:d3:6b:
         db:6d:79:a9:a5:1c:69:81:4e:b5:36:ef:db:c9:ad:99:07:93:
         a6:a9:84:7a:fc:86:18:d6:18:60:01:ce:5d:7a:f4:a7:fd:91:
         5c:ad:91:5f:20:cb:58:34:8f:21:b6:0c:39:a9:62:10:a9:c6:
         f1:c8:fe:e4:4c:07:35:5d:f6:3b:34:69:68:90:e4:9e:f0:85:
         ec:5a:78:4e:16:d4:21:f1:de:e6:14:5c:8c:8d:ac:11:b9:dc:
         a5:a6:82:64:2e:de:3e:eb:d8:cf:99:91:b9:4e:3b:35:1f:9f:
         a9:a7:b9:2b:dc:04:4f:74:5a:93:b1:b2:b6:c8:79:1c:69:69:
         08:5b:aa:f7:a8:0f:90:c2:e5:ce:bb:a7:3e:be:dd:58:28:bb:
         e1:2d:13:99:3e:a7:9d:f4:e3:e0:51:b6:a5:e5:81:79:da:f9:
         0f:6e:3d:5a:16:4b:21:6a:4d:e5:88:e8:7e:e0:f2:9b:97:75:
         66:87:26:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:02:05 2025 by rpki-client