Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/esYixQEHGz_9ej7s-K1WMXAOdWo.roa
File:                     esYixQEHGz_9ej7s-K1WMXAOdWo.roa (raw, json)
Hash identifier:          Yqc+5GUkPnglJNQWKVAC3WWEsnrHd6gILPH/GeecCmo=
Subject key identifier:   7A:C6:22:C5:01:07:1B:3F:FD:7A:3E:EC:F8:AD:56:31:70:0E:75:6A
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       022A
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/esYixQEHGz_9ej7s-K1WMXAOdWo.roa
Signing time:             Mon 30 Sep 2024 01:33:47 +0000
ROA not before:           Mon 30 Sep 2024 01:33:47 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     9371
IP address blocks:        183.181.76.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 554 (0x22a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep 30 01:33:47 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=7AC622C501071B3FFD7A3EECF8AD5631700E756A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c6:e6:ad:f4:0e:22:f5:cf:2c:d3:2c:4b:9b:
                    3f:83:25:09:b4:fd:54:74:63:d5:6f:3a:38:73:b4:
                    78:1a:71:f0:ca:10:a0:02:81:24:9f:53:2e:78:4f:
                    40:2c:a1:16:d6:9a:20:0e:97:93:90:ae:e1:15:aa:
                    67:69:39:b8:5e:34:32:5b:d9:05:34:42:1a:0c:13:
                    a1:26:2b:11:3b:cd:a4:87:b3:ab:40:72:fb:90:b2:
                    19:ab:17:11:7a:82:aa:e4:c9:72:0d:15:9e:a1:c0:
                    69:d8:95:4e:74:1a:ea:4b:dc:18:c3:17:a2:d7:08:
                    b2:63:70:ad:ab:31:94:14:a4:51:19:95:48:59:7c:
                    12:11:f5:88:80:4b:28:c1:61:1e:7a:c6:e6:49:4e:
                    56:bb:3a:1e:16:3e:fa:39:c2:ae:8d:bb:08:ad:7f:
                    e9:25:a1:34:2c:e7:51:8c:63:7b:ae:c6:8a:16:0b:
                    6a:84:3f:14:37:96:e4:1b:e4:d4:c9:eb:f0:45:a8:
                    2e:2b:55:74:d7:43:db:e0:d4:ad:bf:68:c4:1e:ed:
                    ed:bb:3b:26:f0:16:89:d4:80:56:0d:8c:c0:21:60:
                    2a:54:e3:10:11:0b:48:a8:d1:b4:e4:a4:b4:df:d4:
                    80:75:40:57:c5:9a:3a:cf:c2:30:fc:4c:39:c9:59:
                    eb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C6:22:C5:01:07:1B:3F:FD:7A:3E:EC:F8:AD:56:31:70:0E:75:6A
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/esYixQEHGz_9ej7s-K1WMXAOdWo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:94:2d:33:79:36:a3:a5:66:0b:94:2a:91:0d:06:a3:b3:02:
         6b:e6:e5:8a:1e:67:08:a4:ee:60:4d:ae:58:9f:46:5d:77:71:
         a4:c9:51:0d:69:be:7e:a0:7f:22:7b:c8:a6:82:3a:6b:03:c2:
         48:6f:a0:10:e5:11:25:3d:24:d3:25:70:aa:fe:d7:0d:91:55:
         ee:ee:2f:ea:52:d1:64:19:7e:7b:b3:15:c2:13:1b:42:97:b5:
         1c:d5:76:95:79:9d:18:bb:12:ed:d0:95:17:d7:8a:0d:fe:f9:
         ba:96:19:38:9d:4e:aa:55:85:8d:82:40:7e:85:66:4b:01:26:
         06:49:b8:98:97:9d:fd:c4:66:57:29:19:7c:3e:db:f1:69:5b:
         35:63:c4:68:83:b3:62:c7:b9:41:e4:c7:b2:06:90:54:97:44:
         11:8a:ce:3f:ee:ad:3c:0b:e6:9c:ae:12:71:ce:5e:09:5a:b3:
         62:31:dd:d8:52:7b:85:59:be:b2:e4:2f:10:50:36:a2:65:9d:
         e7:df:a5:fb:8f:fc:eb:3b:b2:0c:a0:b3:8f:84:96:1b:c2:14:
         79:c1:ef:d3:20:b2:ef:22:c9:75:52:5c:26:62:f9:0e:24:bb:
         c7:3f:e0:49:28:5e:78:64:5e:9e:5a:a5:45:d0:50:3b:4a:a2:
         8a:4d:af:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:41:54 2025 by rpki-client