Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1384/F0vZCnyWmGDBNFfL8CHdBgHa_Mc.roa
File:                     F0vZCnyWmGDBNFfL8CHdBgHa_Mc.roa (raw, json)
Hash identifier:          4WsFTe2Dlzgb2xeNHAoM+0Yo7T9eFUykG0HVz5OZX6o=
Subject key identifier:   17:4B:D9:0A:7C:96:98:60:C1:34:57:CB:F0:21:DD:06:01:DA:FC:C7
Certificate issuer:       /CN=87AC474F6833E4A01A86B23B51E56A661CF2E1F4
Certificate serial:       14
Authority key identifier: 87:AC:47:4F:68:33:E4:A0:1A:86:B2:3B:51:E5:6A:66:1C:F2:E1:F4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h6xHT2gz5KAahrI7UeVqZhzy4fQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1384/F0vZCnyWmGDBNFfL8CHdBgHa_Mc.roa
Signing time:             Wed 01 Sep 2021 01:30:35 +0000
ROA not before:           Wed 01 Sep 2021 01:30:35 +0000
ROA not after:            Mon 15 Aug 2022 01:30:03 +0000
asID:                     16509
IP address blocks:        150.70.218.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87AC474F6833E4A01A86B23B51E56A661CF2E1F4
        Validity
            Not Before: Sep  1 01:30:35 2021 GMT
            Not After : Aug 15 01:30:03 2022 GMT
        Subject: CN=174BD90A7C969860C13457CBF021DD0601DAFCC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8a:4e:04:be:1f:df:e5:78:0a:f9:c4:1e:a1:
                    ad:54:76:37:a1:22:f9:3e:22:0d:17:15:06:88:45:
                    10:32:49:42:ff:90:7a:3e:f2:4e:e1:7d:56:e9:d1:
                    2c:0f:ea:cb:8a:a1:87:d9:c2:b5:4c:23:36:a5:cb:
                    bc:1d:a0:68:d2:2b:ca:64:8a:43:99:74:e4:e0:0c:
                    e8:78:a6:08:c6:34:07:b0:06:29:bc:69:56:41:cc:
                    73:87:41:84:2a:e7:60:c3:63:63:89:02:9e:76:4e:
                    38:53:51:c2:77:5c:40:36:c4:8e:aa:cb:f9:03:b9:
                    d2:3f:eb:58:d2:ba:4a:35:ff:9c:06:b6:50:2a:99:
                    ae:5a:2e:cf:0c:6a:a9:4d:47:40:42:40:97:55:9c:
                    c2:ce:6c:c5:8c:83:0e:af:4c:b7:b8:07:00:9f:70:
                    af:d0:f6:e5:c8:e6:d1:be:0c:ad:a2:73:5d:15:8b:
                    1e:98:d5:b2:2d:d8:d7:49:5a:b4:35:08:bc:74:73:
                    ff:86:98:b7:9c:46:b8:a1:7c:3d:a5:a2:08:14:1e:
                    33:a3:9b:a4:80:2b:55:7d:3e:9b:2f:6a:cc:c4:b1:
                    50:ce:2a:a3:14:b6:96:27:d1:88:13:d1:7f:3c:96:
                    d3:3d:2e:7b:9d:ae:98:08:ec:00:85:98:77:b4:7b:
                    51:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:4B:D9:0A:7C:96:98:60:C1:34:57:CB:F0:21:DD:06:01:DA:FC:C7
            X509v3 Authority Key Identifier:
                keyid:87:AC:47:4F:68:33:E4:A0:1A:86:B2:3B:51:E5:6A:66:1C:F2:E1:F4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1384/h6xHT2gz5KAahrI7UeVqZhzy4fQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h6xHT2gz5KAahrI7UeVqZhzy4fQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1384/F0vZCnyWmGDBNFfL8CHdBgHa_Mc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.70.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:d9:f9:32:ae:7c:bc:f3:39:f8:41:b4:d9:ce:05:c4:25:62:
         7a:f2:67:40:e9:48:18:33:3b:af:8d:8f:a1:a6:36:66:7b:c3:
         83:1a:4e:eb:23:92:de:98:d9:25:fe:74:35:97:18:61:88:62:
         c5:39:f1:65:de:3c:73:c8:d5:84:81:ae:dc:3c:f0:2b:ee:d4:
         7f:d7:82:27:87:29:ac:bb:23:6a:21:71:d1:91:6c:5d:70:7c:
         0c:43:e7:e1:8f:c7:28:39:90:fe:c3:26:ab:1c:7f:1e:e3:45:
         d2:55:06:a7:c8:88:38:e9:ab:68:2f:54:82:a6:30:00:b0:82:
         e8:75:4a:63:a9:4e:06:d8:df:d6:8a:ad:b5:45:98:aa:b7:04:
         47:18:93:e8:75:ed:69:06:ae:78:cf:c7:18:58:d8:88:a1:6f:
         c9:e0:1b:f9:a2:7a:7f:a6:52:8a:be:98:3f:39:08:37:5b:fa:
         7a:ee:cc:f2:06:41:1a:cb:82:6d:ba:f3:83:25:44:ad:58:79:
         5c:ba:ca:ac:0c:b3:51:ed:a4:6b:5f:86:89:6a:f0:4c:46:3d:
         6c:95:e1:bc:ed:06:64:0e:16:0e:d7:56:5d:8b:b0:c0:72:1a:
         ee:df:9c:ed:12:0d:21:0d:c4:45:33:b4:2a:d5:2d:00:e2:c7:
         f5:62:4a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:24 2025 by rpki-client