Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/gSWvYaNZPA9Wq1-JbJNi7tdUHqo.roa
File:                     gSWvYaNZPA9Wq1-JbJNi7tdUHqo.roa (raw, json)
Hash identifier:          wmFk7SxQ2zcOg0/6zG3tW8fTjDRCmfvACfGa9T+r6kE=
Subject key identifier:   81:25:AF:61:A3:59:3C:0F:56:AB:5F:89:6C:93:62:EE:D7:54:1E:AA
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       81
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/gSWvYaNZPA9Wq1-JbJNi7tdUHqo.roa
Signing time:             Sun 01 May 2022 01:30:32 +0000
ROA not before:           Sun 01 May 2022 01:30:32 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     18126
IP address blocks:        14.192.32.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: May  1 01:30:32 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=8125AF61A3593C0F56AB5F896C9362EED7541EAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:38:86:96:ba:16:03:94:3d:3d:14:7b:af:be:
                    fb:39:0e:7d:6d:a6:8d:0e:0a:c7:c6:eb:b7:74:2d:
                    20:69:cd:d5:d9:fe:a7:95:59:b7:83:27:c6:72:43:
                    42:85:54:96:b8:e5:f4:47:c0:28:b7:59:7a:a0:3c:
                    21:66:9e:10:fe:7a:8d:b1:90:8d:7a:33:47:5e:2f:
                    c1:21:85:74:dd:3f:a1:d2:e6:42:52:f4:89:41:da:
                    c5:0b:45:4d:18:65:d7:96:98:d8:ce:09:2e:d2:b3:
                    b8:32:39:d1:f7:6a:de:8f:1d:65:b2:0c:28:6a:b5:
                    21:3b:39:97:f6:c8:51:8e:00:58:9e:bb:22:82:6f:
                    62:1a:33:41:32:36:5c:41:73:52:e4:9c:93:7f:03:
                    60:0f:06:a4:ca:e4:c6:2a:61:2a:24:c4:02:6b:86:
                    c5:28:e4:b2:d5:1f:78:3f:69:3d:7b:41:c8:72:03:
                    29:4d:cc:d8:96:b5:7f:22:65:86:a1:e5:4c:f4:0a:
                    b7:22:12:32:46:01:d5:f4:97:ee:42:84:60:f8:6e:
                    56:15:53:60:fa:a1:f0:4f:82:2e:53:16:61:aa:ac:
                    fd:2c:63:41:18:e8:d8:8d:d3:98:ac:cd:27:69:9c:
                    d6:11:dd:9c:09:dc:dd:d3:49:1b:1f:c6:df:cd:b3:
                    a5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:25:AF:61:A3:59:3C:0F:56:AB:5F:89:6C:93:62:EE:D7:54:1E:AA
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/gSWvYaNZPA9Wq1-JbJNi7tdUHqo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.192.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         aa:f8:2e:98:b3:fa:82:56:9c:72:65:66:ca:09:89:db:80:de:
         08:9b:1b:2f:f1:ce:fe:4a:1f:be:06:f4:e6:85:e5:c1:4f:22:
         75:ce:63:05:4e:c2:f4:97:13:18:ac:ab:95:f2:d9:07:33:ba:
         ac:5b:28:7b:7f:b5:76:4f:e3:ca:a6:76:54:84:2d:b3:55:ee:
         f4:97:18:9f:ea:cf:73:54:17:d2:d2:2a:05:4c:fc:9b:09:7a:
         a3:39:85:0f:12:dc:0c:ee:cc:f5:e3:d9:fc:84:b0:1c:28:7d:
         e0:bf:60:f2:77:27:0e:59:8f:8f:f7:c8:64:ab:60:b4:c2:ec:
         1e:17:4c:9a:46:9a:2e:f3:ec:67:71:77:55:49:af:1e:7e:ef:
         51:47:2a:37:ba:1e:93:a6:c5:f8:c1:8d:b9:0e:96:62:9c:87:
         78:9c:ab:b9:14:9c:01:cd:50:16:81:97:17:ad:5c:9f:11:69:
         99:ee:6d:a5:b1:3d:10:66:bf:33:6b:5f:94:1b:cc:8c:50:ce:
         87:fd:10:1a:b6:92:a6:c4:d3:eb:a1:94:60:24:f6:34:69:67:
         32:ad:43:61:ef:c3:4d:c7:16:9a:68:09:6f:de:1c:5e:99:73:
         63:d3:1d:37:b1:4d:60:80:e7:2a:38:eb:b8:ba:1e:1c:9f:85:
         02:2a:e7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:00 2025 by rpki-client