Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/ymjIslEmQnr-o7Vm2skVJ9N8wxE.roa
File:                     ymjIslEmQnr-o7Vm2skVJ9N8wxE.roa (raw, json)
Hash identifier:          YieWCoh8o3cTA/VwxGMlNjdKVjOzMoArZ4SQa+LIRmA=
Subject key identifier:   CA:68:C8:B2:51:26:42:7A:FE:A3:B5:66:DA:C9:15:27:D3:7C:C3:11
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       78
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/ymjIslEmQnr-o7Vm2skVJ9N8wxE.roa
Signing time:             Thu 22 Jun 2023 00:47:59 +0000
ROA not before:           Thu 22 Jun 2023 00:47:59 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        122.128.112.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:47:59 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=CA68C8B25126427AFEA3B566DAC91527D37CC311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:55:5e:cb:76:bb:ab:93:3f:7d:53:39:63:a2:
                    18:59:30:c7:d8:15:35:ee:d9:80:ec:e4:d5:80:92:
                    3c:d5:60:8f:25:c2:3f:b5:da:d0:1e:e8:a1:af:93:
                    f5:1d:08:b7:64:7d:fd:fc:8c:fd:ed:70:45:f6:d2:
                    26:2d:0b:02:04:98:c7:cf:d2:8f:13:5e:1c:7f:21:
                    f6:ff:38:1a:a2:f9:c8:e7:70:91:f8:75:0f:49:e0:
                    e2:77:f4:84:d5:6d:61:3c:1d:51:09:96:88:95:64:
                    63:f7:21:a7:4c:d0:92:0a:55:70:32:7a:19:01:25:
                    ea:c1:04:1f:39:b2:df:4a:18:56:06:cd:ae:9d:72:
                    15:47:df:d9:13:df:d2:52:1c:2c:51:ad:3a:48:2c:
                    ae:16:e4:ef:07:24:a0:be:0b:b3:90:89:ad:51:2a:
                    0b:22:d8:4e:ec:50:ad:2d:10:97:4a:c9:a8:b3:36:
                    ca:d2:36:18:23:40:34:87:cb:10:b3:d8:06:18:97:
                    d6:77:17:97:e3:ed:7d:32:07:70:65:25:5b:50:45:
                    ce:65:25:ba:e0:4f:8b:ff:84:65:75:30:af:0e:32:
                    da:5f:a9:08:07:0e:ea:83:d8:de:17:e4:16:26:9b:
                    ce:50:8a:06:67:af:4f:93:e8:e7:89:a5:af:ba:1e:
                    a2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:68:C8:B2:51:26:42:7A:FE:A3:B5:66:DA:C9:15:27:D3:7C:C3:11
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/ymjIslEmQnr-o7Vm2skVJ9N8wxE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.128.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2a:9a:85:d4:c4:82:5b:18:41:1a:25:ec:e6:3c:db:ee:d8:16:
         aa:33:ee:4c:da:ab:4f:d1:b3:04:37:07:69:4a:00:8f:56:1a:
         f2:bd:5f:c7:2c:f7:b4:bc:2f:7c:89:4d:77:e1:ce:f0:8f:2f:
         6b:1c:fa:c2:6b:0f:a2:a0:c9:71:bc:51:3e:99:2e:91:2b:d7:
         43:db:30:00:1b:76:6b:56:ea:b8:a5:26:74:30:71:95:ee:13:
         95:19:44:02:dc:3e:14:2d:e6:21:83:37:cb:a1:3c:af:5f:4a:
         86:b2:ea:88:7a:08:69:d9:e8:f3:26:38:2a:0d:4c:a4:4c:6d:
         88:1b:b0:ad:81:24:8b:30:4f:8e:13:5c:c9:6e:6c:87:3c:dd:
         cd:2a:1d:a6:d2:aa:a8:28:c7:a1:a1:c1:9c:1e:27:d9:ce:b3:
         35:bd:f4:0f:48:eb:b9:ba:e8:24:53:2a:35:1a:06:2d:0b:57:
         d3:a4:61:ab:59:83:d7:82:7f:2a:0d:94:56:ba:63:e7:db:f0:
         0b:08:98:d9:5a:93:13:d5:05:dd:1d:c7:31:bc:97:9b:23:e2:
         ae:e5:32:29:23:2f:3f:d6:56:52:6c:cf:22:73:99:70:71:89:
         5f:b2:6b:c2:35:14:2b:7c:8e:ff:1f:ef:bf:5d:9b:e5:3c:79:
         c1:35:34:ff
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:19 2025 by rpki-client