Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/CqJ3J7BnUKe4v5CViVh5Nl_pJnU.roa
File:                     CqJ3J7BnUKe4v5CViVh5Nl_pJnU.roa (raw, json)
Hash identifier:          JfjY2YKF8fmwZnDq2u9kqgVUrMM+MS8nveVxrMOP9LE=
Subject key identifier:   0A:A2:77:27:B0:67:50:A7:B8:BF:90:95:89:58:79:36:5F:E9:26:75
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       D0
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/CqJ3J7BnUKe4v5CViVh5Nl_pJnU.roa
Signing time:             Fri 01 Apr 2022 01:28:17 +0000
ROA not before:           Fri 01 Apr 2022 01:28:17 +0000
ROA not after:            Fri 31 Mar 2023 13:10:57 +0000
asID:                     4713
IP address blocks:        153.252.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Apr  1 01:28:17 2022 GMT
            Not After : Mar 31 13:10:57 2023 GMT
        Subject: CN=0AA27727B06750A7B8BF9095895879365FE92675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:41:b7:1a:78:59:71:54:23:d0:f3:30:95:0c:
                    4f:96:fa:58:9e:46:9b:90:f5:f9:a5:19:38:fd:df:
                    5e:df:d5:ae:52:1a:7b:5c:c4:87:c9:0b:2b:81:fa:
                    28:c6:4a:37:e0:eb:10:36:38:5b:e5:e7:4e:ec:72:
                    77:6c:43:45:a0:21:eb:dc:a5:7a:22:47:f5:77:23:
                    fe:6a:90:87:ad:b3:cb:47:41:9e:ca:fe:3e:63:d5:
                    f1:4c:a1:90:0d:dd:e0:26:8e:8d:e2:4b:23:90:70:
                    f4:7f:dd:59:cb:3f:58:f8:95:91:f0:55:bc:a7:e3:
                    48:8f:ea:6f:5b:18:c1:f1:81:67:af:10:73:c9:61:
                    0b:2b:eb:28:b6:fc:39:42:93:7f:2e:47:60:cb:19:
                    78:ff:07:bd:de:5f:ff:b4:a5:75:ff:b7:41:f2:d4:
                    6c:ec:db:d2:a9:e2:22:ca:da:16:6c:a2:bf:25:67:
                    70:ab:d4:cb:d9:e6:91:e3:f9:9c:6d:c5:58:55:59:
                    74:a3:9b:76:a2:12:1c:4b:1e:c1:58:32:b0:17:a7:
                    93:3f:43:6a:a5:5a:8a:9f:b9:a7:15:62:29:41:03:
                    da:bf:1b:bd:74:91:7e:4b:99:9b:1d:b6:be:5f:a7:
                    5b:03:47:01:42:14:11:87:4e:f1:41:49:2f:06:cd:
                    0f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A2:77:27:B0:67:50:A7:B8:BF:90:95:89:58:79:36:5F:E9:26:75
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/CqJ3J7BnUKe4v5CViVh5Nl_pJnU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.252.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         89:4c:f6:60:4d:06:2e:10:46:c6:69:92:16:a1:09:f2:fe:ad:
         44:59:55:f0:63:99:c2:82:b8:69:6d:f2:65:26:26:d1:15:f7:
         43:f5:bb:08:9c:22:6a:23:4a:d6:86:1e:ea:68:d4:56:f6:50:
         1c:a5:08:eb:10:f3:46:24:de:66:8b:f1:7a:79:96:f6:4e:65:
         c6:82:97:f4:aa:94:a2:3d:5e:fa:4e:e0:4a:82:eb:9b:1b:1f:
         e6:d2:65:57:c3:d6:7d:95:52:47:3e:7d:b2:fe:1f:41:d3:c8:
         17:5e:98:0e:81:3b:fb:55:fa:ca:ec:08:6c:0a:11:22:52:6d:
         16:8c:4f:4e:69:a6:bf:46:89:b4:e6:04:ff:6c:0b:4a:73:72:
         82:6d:17:b9:60:9b:12:34:49:3a:b3:40:0e:65:f1:49:bd:a2:
         da:23:1c:b0:8b:43:70:94:6e:f7:a4:fb:ed:1f:e3:4c:7b:81:
         18:d0:2e:5a:85:45:57:6a:b2:4c:60:b8:ef:aa:ea:7c:00:aa:
         e9:a9:32:8a:83:a7:ca:7e:19:c2:19:4c:80:3d:fa:79:e8:09:
         f2:89:28:0e:ef:bb:9c:cc:a0:7d:b2:47:ad:8b:82:83:b8:a0:
         f9:20:c8:dc:0a:82:ba:31:c8:00:b2:83:87:74:18:23:d1:31:
         39:d6:24:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:51:56 2025 by rpki-client