Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/nMnsoBcM51LKIjI4jHnmDdFWy1E.roa
File:                     nMnsoBcM51LKIjI4jHnmDdFWy1E.roa (raw, json)
Hash identifier:          1sUAofXDEEVNg5YsoLkEo6FD39YiXfgAJn48F6a546o=
Subject key identifier:   9C:C9:EC:A0:17:0C:E7:52:CA:22:32:38:8C:79:E6:0D:D1:56:CB:51
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0192
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/nMnsoBcM51LKIjI4jHnmDdFWy1E.roa
Signing time:             Sat 01 Jul 2023 01:30:59 +0000
ROA not before:           Sat 01 Jul 2023 01:30:59 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     7684
IP address blocks:        182.48.1.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402 (0x192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Jul  1 01:30:59 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=9CC9ECA0170CE752CA2232388C79E60DD156CB51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cc:1f:cb:88:e5:a3:3f:6e:55:a8:bb:a4:5b:
                    17:a9:34:e6:6c:6b:b9:89:2e:30:76:ad:48:93:4c:
                    b1:ae:b2:4d:d6:ec:2e:2d:60:9f:dc:e7:29:c7:f5:
                    7e:76:02:e2:79:29:68:3d:52:e9:eb:ff:c8:08:39:
                    60:66:c0:c0:e0:3a:b1:39:16:4d:60:cf:e0:e4:4a:
                    a7:00:76:37:ed:9f:26:10:01:7e:d5:86:4d:2a:ba:
                    49:56:30:4c:a4:ef:eb:10:77:2b:4d:ce:0e:18:e0:
                    5b:71:f1:2c:6d:3f:3a:75:fc:fc:89:19:63:66:4e:
                    d2:79:1b:53:cd:9b:7c:7f:6d:20:0b:91:a8:2c:61:
                    65:be:88:8e:96:07:c9:77:1d:84:73:b8:20:93:4c:
                    74:50:c3:87:3c:d1:0f:5e:33:04:9f:4e:82:38:86:
                    6d:b4:58:e4:0c:20:02:91:d8:99:d6:2b:e1:d2:0d:
                    1b:2e:6c:72:0b:c1:95:3d:05:a8:67:b3:9c:77:a8:
                    57:da:6c:f4:fb:7d:6f:90:29:fb:13:6c:7e:59:a5:
                    b1:5f:22:e6:70:a8:61:06:22:6f:f7:9f:a6:77:2e:
                    97:76:47:8b:7d:48:4e:23:0d:03:6b:9b:93:f1:3c:
                    16:ba:16:f9:45:67:b1:3d:4c:4b:12:3d:fa:26:43:
                    be:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C9:EC:A0:17:0C:E7:52:CA:22:32:38:8C:79:E6:0D:D1:56:CB:51
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/nMnsoBcM51LKIjI4jHnmDdFWy1E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:72:d0:b3:e9:22:a1:5c:7c:d6:91:b7:5c:a6:78:44:8a:6f:
         56:26:de:67:67:e6:3c:db:55:6c:d8:19:49:1b:c6:42:59:e7:
         f6:57:37:f8:04:37:46:c2:60:d4:67:37:d2:95:a5:45:8c:68:
         2d:cf:86:a3:29:f7:70:79:89:88:6a:2c:de:d5:86:1f:39:6a:
         3b:a0:21:b6:5e:7e:54:01:0d:bf:9d:98:4d:fa:3f:6e:c9:0a:
         7f:72:af:36:0f:4e:fc:30:72:d7:7b:3d:d0:56:d4:71:0a:68:
         8a:fd:87:f9:92:c3:e6:c6:4b:a2:d4:d8:b3:70:b7:d9:1a:4e:
         04:2f:c6:b5:51:00:17:2a:10:ff:13:5f:c3:07:b8:3f:7d:c4:
         fd:d6:c8:0d:aa:e6:c2:52:20:43:cd:c9:b0:c7:d8:3c:c8:6d:
         e1:38:9e:80:95:cd:74:45:40:f7:84:f4:66:5a:b8:aa:4d:a5:
         1a:26:81:a3:aa:4f:ea:2e:ba:93:c9:e0:53:15:9d:c7:5d:09:
         bd:9f:0a:d2:3f:24:49:a7:6f:fa:86:66:a2:26:a7:2a:f7:9e:
         d3:35:2a:bc:d8:78:a8:05:7b:7d:af:d4:ba:a4:94:2f:a2:df:
         20:6a:15:1e:df:7b:5a:67:99:92:33:e4:39:fb:71:52:42:c4:
         37:8b:fa:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:44 2025 by rpki-client