Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20157/Wr_EObY4qx2JCRWyeQDLzILkeag.roa
File:                     Wr_EObY4qx2JCRWyeQDLzILkeag.roa (raw, json)
Hash identifier:          N3oGLmdHXvqjxPB7Pato7nSnKXBpaMIDnqgODgzwVlY=
Subject key identifier:   5A:BF:C4:39:B6:38:AB:1D:89:09:15:B2:79:00:CB:CC:82:E4:79:A8
Certificate issuer:       /CN=18F238733A76CE92ED3860F2CCB688D8AD2BDF8C
Certificate serial:       1F
Authority key identifier: 18:F2:38:73:3A:76:CE:92:ED:38:60:F2:CC:B6:88:D8:AD:2B:DF:8C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GPI4czp2zpLtOGDyzLaI2K0r34w.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20157/Wr_EObY4qx2JCRWyeQDLzILkeag.roa
Signing time:             Sat 01 Jul 2023 01:29:06 +0000
ROA not before:           Sat 01 Jul 2023 01:29:06 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     63791
IP address blocks:        103.169.144.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18F238733A76CE92ED3860F2CCB688D8AD2BDF8C
        Validity
            Not Before: Jul  1 01:29:06 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=5ABFC439B638AB1D890915B27900CBCC82E479A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5c:65:41:0b:13:ed:64:9e:00:4d:d7:0a:4b:
                    e4:a8:79:a0:23:42:db:b9:be:82:7b:48:7d:f1:2f:
                    75:af:cb:62:8c:c9:ad:81:fb:26:f8:87:57:74:90:
                    8e:4b:79:6e:7e:a8:89:ab:5c:a9:e1:4c:36:a7:9d:
                    6a:de:20:6b:bc:d0:0a:2d:00:e4:e8:db:72:0b:82:
                    28:06:e8:39:f3:1d:9d:1b:63:d8:95:1e:54:a2:a8:
                    d0:86:de:75:14:46:d4:bd:15:11:7b:ba:b5:3d:3d:
                    46:0b:8d:62:78:46:b0:fe:64:6b:58:bc:1f:aa:c2:
                    be:cf:f9:2e:9c:75:1c:b5:e2:30:ed:03:28:54:19:
                    ca:7d:c8:7d:bb:b0:0a:76:44:85:b5:fc:19:ad:65:
                    77:bf:c5:40:21:d2:91:5c:b5:d2:0f:b0:28:91:4f:
                    45:47:3b:1e:11:1e:5b:03:db:83:f9:fa:46:bf:1c:
                    31:c4:fe:2b:2d:16:de:2b:86:a9:53:b1:54:e2:bd:
                    90:3f:b3:57:ab:83:4a:e0:dc:6d:8d:42:78:03:98:
                    bc:c0:b7:ca:ec:4d:35:33:93:69:f3:16:f2:c7:2c:
                    7c:e7:41:5b:5a:f5:fd:ec:54:12:83:0b:7e:52:db:
                    25:3d:d6:f5:fb:98:0a:56:ec:c7:49:b6:d3:4f:7c:
                    4e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:BF:C4:39:B6:38:AB:1D:89:09:15:B2:79:00:CB:CC:82:E4:79:A8
            X509v3 Authority Key Identifier:
                keyid:18:F2:38:73:3A:76:CE:92:ED:38:60:F2:CC:B6:88:D8:AD:2B:DF:8C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20157/GPI4czp2zpLtOGDyzLaI2K0r34w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GPI4czp2zpLtOGDyzLaI2K0r34w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20157/Wr_EObY4qx2JCRWyeQDLzILkeag.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:07:fe:88:05:b3:f1:51:45:b1:39:1b:07:3b:9e:40:2c:7d:
         68:d3:fa:49:14:4c:6d:10:22:f0:7c:e7:78:98:8b:e4:7b:04:
         58:f0:23:6d:48:cc:82:a2:4e:1e:e3:d8:dc:48:e9:e9:e6:9b:
         9b:bf:39:b5:2f:9e:39:ed:fe:0e:09:38:bb:ee:55:a2:0c:8b:
         89:ce:07:ea:04:fe:e2:36:4d:5a:34:69:a6:42:a0:ad:ce:d2:
         9c:38:18:b5:ef:72:09:39:20:15:ac:3b:13:c8:77:e9:ab:e7:
         b5:3e:a7:4b:a0:52:53:85:26:13:23:e1:57:c9:6b:6e:c8:29:
         de:13:b3:80:e6:5a:e7:25:48:32:59:fd:19:29:51:90:49:d8:
         ef:08:a2:42:ff:9d:ad:cf:68:ee:61:ca:8c:88:57:47:4c:8e:
         74:b2:ab:97:3e:f3:2a:7a:68:b7:89:fe:41:c6:8c:b8:ef:e6:
         99:bf:28:4f:b3:05:53:ab:91:74:e5:de:c9:9b:c9:e4:d4:f8:
         26:46:04:b3:dd:1c:90:da:a0:8f:35:c4:64:7c:00:23:ad:3d:
         90:f6:77:34:19:ff:da:5b:4c:5c:f1:8d:3f:55:80:9b:07:73:
         a3:60:a5:dd:1c:6f:6b:c9:6c:12:de:40:5f:6d:6b:ef:22:04:
         e4:dd:a7:bf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:15 2025 by rpki-client