Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/NnWFSZwO33P85SH9ra727GMHNAE.roa
File:                     NnWFSZwO33P85SH9ra727GMHNAE.roa (raw, json)
Hash identifier:          +txZ2gNUJsp75nKm9cqWljJolJ+gSSP9MasVFq9XHUU=
Subject key identifier:   36:75:85:49:9C:0E:DF:73:FC:E5:21:FD:AD:AE:F6:EC:63:07:34:01
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       30
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/NnWFSZwO33P85SH9ra727GMHNAE.roa
Signing time:             Tue 01 Mar 2022 01:28:08 +0000
ROA not before:           Tue 01 Mar 2022 01:28:08 +0000
ROA not after:            Wed 15 Feb 2023 01:30:03 +0000
asID:                     6220
IP address blocks:        61.200.83.64/28 maxlen: 28
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Mar  1 01:28:08 2022 GMT
            Not After : Feb 15 01:30:03 2023 GMT
        Subject: CN=367585499C0EDF73FCE521FDADAEF6EC63073401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1d:5a:6b:41:a5:11:4d:70:ef:58:fb:4d:77:
                    af:a7:f0:b4:25:8b:b1:c1:20:3b:78:c5:e0:0d:75:
                    7c:62:14:ce:d9:64:fd:05:f9:1d:59:68:98:85:7f:
                    c3:38:18:1a:de:59:2a:60:7b:97:0f:3e:47:ba:59:
                    db:ad:03:c4:42:a2:f8:80:b1:21:e6:96:2a:0c:ea:
                    65:16:76:33:ba:c8:ba:44:c7:00:95:e9:8f:5d:14:
                    32:70:47:a0:59:5b:05:0a:09:f5:82:d1:73:62:d2:
                    62:9c:5e:a5:96:04:6e:5a:55:c0:7c:96:ee:45:1a:
                    63:58:3f:04:4f:80:f5:c2:da:84:8c:f9:2d:af:4c:
                    61:24:5b:c9:ec:bf:14:ec:0b:72:1b:a8:04:02:1c:
                    bf:aa:35:96:8a:b2:27:34:cf:27:d9:7e:af:de:39:
                    63:c1:34:5c:cf:de:fa:04:3a:02:90:db:56:55:08:
                    ab:87:8e:71:99:c8:f7:05:4f:9b:aa:db:10:fe:2e:
                    39:76:4e:1e:11:ae:a3:0b:a3:12:d5:a8:8d:41:ae:
                    f1:90:b2:8a:0f:a5:42:d2:f2:b3:e4:74:5a:12:d7:
                    dc:7f:55:b3:dd:7f:bc:ac:7e:87:95:a0:28:bd:ab:
                    fa:ac:f6:45:ed:a6:0a:61:91:68:85:2b:ca:e5:ea:
                    1e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:75:85:49:9C:0E:DF:73:FC:E5:21:FD:AD:AE:F6:EC:63:07:34:01
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/NnWFSZwO33P85SH9ra727GMHNAE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.200.83.64/28

    Signature Algorithm: sha256WithRSAEncryption
         9f:36:81:13:c1:e0:4a:42:b4:2d:cd:63:d9:e8:9e:11:50:87:
         a8:98:1b:c6:6e:c7:26:65:30:06:ff:01:50:cd:af:8d:0b:35:
         9b:9f:c6:35:fe:5e:2b:26:e8:94:7c:3e:a0:26:80:9f:df:12:
         9a:51:45:b6:7b:7c:38:cc:89:80:95:0f:6b:d5:0f:a8:31:e2:
         72:83:6f:c9:dd:f3:7d:07:4a:9e:ee:ea:23:62:b7:db:ca:4a:
         36:9d:ad:db:e2:c2:ad:94:49:57:75:74:55:e7:74:fe:11:b8:
         d3:f8:4f:ae:37:ad:77:ff:55:54:eb:cd:a9:ee:22:15:58:d5:
         02:f1:cd:2b:50:80:19:59:b4:e0:8f:93:e6:d3:21:c8:55:35:
         63:98:bf:5d:01:25:ed:64:ca:37:35:ca:19:f0:6f:fb:67:12:
         f2:67:d6:69:36:b0:05:c0:67:57:76:ef:25:14:31:c2:4a:d0:
         89:ea:c0:b2:e3:1a:40:9c:28:50:5c:6c:31:c5:55:cc:f8:d1:
         13:42:91:9b:29:71:74:49:a6:84:70:1e:74:2b:8d:42:97:0b:
         e1:3c:93:6a:1f:db:5e:4c:90:1c:03:d0:f7:14:91:3a:bb:a8:
         e8:56:d9:6a:f0:74:1c:5d:12:9a:06:c0:c7:c1:50:81:11:a0:
         2c:38:3b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:06 2025 by rpki-client