Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20034/IdJWNOn96tkqHLfK0s5jj6Y6tMk.roa
File:                     IdJWNOn96tkqHLfK0s5jj6Y6tMk.roa (raw, json)
Hash identifier:          DDuqsC0yjyy6s2D9V62gKmGRxd0+7mooIt4c3AgwZLk=
Subject key identifier:   21:D2:56:34:E9:FD:EA:D9:2A:1C:B7:CA:D2:CE:63:8F:A6:3A:B4:C9
Certificate issuer:       /CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
Certificate serial:       0A
Authority key identifier: 8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/IdJWNOn96tkqHLfK0s5jj6Y6tMk.roa
Signing time:             Thu 26 Jan 2023 04:16:04 +0000
ROA not before:           Thu 26 Jan 2023 04:16:04 +0000
ROA not after:            Fri 26 Jan 2024 04:04:30 +0000
asID:                     131923
IP address blocks:        219.100.156.0/22 maxlen: 25
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
        Validity
            Not Before: Jan 26 04:16:04 2023 GMT
            Not After : Jan 26 04:04:30 2024 GMT
        Subject: CN=21D25634E9FDEAD92A1CB7CAD2CE638FA63AB4C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b4:51:76:4b:7d:19:c5:e5:07:65:6d:d9:09:
                    7c:18:bb:51:8a:01:21:79:ba:7e:5e:a3:28:18:7d:
                    6d:74:9c:18:fc:5c:b1:ba:e6:83:02:92:42:5d:67:
                    b8:61:99:68:60:ab:c3:a3:58:c5:f1:64:f9:6c:4c:
                    cf:79:3c:06:94:54:14:a9:65:8c:e1:1f:09:7f:44:
                    66:2f:77:84:d0:47:49:fb:70:16:e1:89:08:29:03:
                    80:ec:d3:cf:61:b0:4b:e4:ce:26:68:fe:58:75:ad:
                    49:b6:06:42:1d:70:27:ac:c2:c9:ec:ab:bc:c7:4b:
                    b7:35:7f:2d:0f:12:9f:e1:04:81:ab:86:81:da:3b:
                    e9:35:57:71:43:60:6b:bf:37:d3:dd:21:a2:0a:90:
                    bf:f5:e3:e5:79:7d:b4:49:6f:ec:bb:ec:9f:89:1b:
                    3f:43:09:98:ba:1a:77:0c:f6:7f:ec:dd:bb:3b:66:
                    63:1c:90:ff:6a:8d:8b:c7:da:dd:b7:bf:0b:e8:c7:
                    8f:12:f9:c0:98:db:60:86:be:41:02:29:52:fa:a2:
                    ba:78:9b:c6:0a:74:7f:12:9c:69:0f:74:8d:e8:1e:
                    c1:7c:5e:36:39:17:85:7f:d7:5b:81:4c:a8:3e:a6:
                    8e:36:62:30:e6:04:c8:f8:60:33:21:a9:32:66:82:
                    fd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D2:56:34:E9:FD:EA:D9:2A:1C:B7:CA:D2:CE:63:8F:A6:3A:B4:C9
            X509v3 Authority Key Identifier:
                keyid:8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/IdJWNOn96tkqHLfK0s5jj6Y6tMk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:e4:4b:04:83:22:6f:08:b3:2b:71:ca:15:09:c1:1e:ec:9f:
         63:ff:95:ed:55:86:35:da:d0:d6:27:d9:90:4f:2b:74:a3:91:
         1d:3f:cc:f0:5a:ec:52:02:fc:07:59:9b:4a:3e:e2:17:39:1c:
         73:ba:0b:ff:d0:a5:58:3e:ae:03:c5:fa:5f:cb:fb:5a:0b:86:
         b6:37:51:c0:2b:6f:26:f1:84:93:b1:66:01:90:37:be:8f:f0:
         b1:0f:17:a7:5e:8d:b6:b3:e3:a9:d6:93:ed:bf:13:a2:6d:05:
         65:87:82:e8:27:44:ed:4e:e5:77:6f:f0:e3:05:7d:47:8d:3e:
         29:89:2c:ec:5b:2d:31:ee:21:45:76:e1:50:a5:9f:24:c7:2b:
         c8:c0:5d:8f:21:a4:78:d7:af:6a:dc:0f:a3:54:60:20:69:6f:
         ee:3f:9c:39:74:c9:ce:73:60:3e:3a:31:c9:71:a6:90:9d:17:
         b9:04:ec:30:03:17:75:75:e1:1a:c0:4a:f7:ec:40:47:39:f7:
         9b:08:d0:7c:6e:a7:fc:9e:51:85:ea:a5:ff:9f:26:e0:93:e5:
         1c:c7:2d:3e:30:04:b6:b9:2a:bd:5c:37:5a:b2:4c:62:d6:b2:
         d2:36:dc:cb:b0:fb:10:90:65:dd:f3:45:60:fa:94:eb:7f:e8:
         c8:9c:6e:0f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:39:35 2025 by rpki-client