Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/1Uop73nD8i5mOmB50rPRT5_Fho0.roa
File:                     1Uop73nD8i5mOmB50rPRT5_Fho0.roa (raw, json)
Hash identifier:          2lnsTgPj+USCjh8ZNIXdTwPm1n8Oubml69OP3oi4cvk=
Subject key identifier:   D5:4A:29:EF:79:C3:F2:2E:66:3A:60:79:D2:B3:D1:4F:9F:C5:86:8D
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0170
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/1Uop73nD8i5mOmB50rPRT5_Fho0.roa
Signing time:             Wed 15 Feb 2023 02:34:22 +0000
ROA not before:           Wed 15 Feb 2023 02:34:22 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.52/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 368 (0x170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 15 02:34:22 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=D54A29EF79C3F22E663A6079D2B3D14F9FC5868D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:58:8a:0f:3e:e9:5d:98:08:b6:00:34:cc:cc:
                    19:44:f2:02:9a:8c:ac:7f:b0:7c:c9:a2:96:e9:4d:
                    5b:44:47:95:1f:d2:41:8b:41:c1:7a:cb:e8:16:9b:
                    ff:86:90:55:95:e7:01:38:bb:9b:69:ee:48:ac:4c:
                    33:d0:e9:9b:5e:10:d3:7c:e9:d1:51:16:ef:ea:29:
                    6a:1a:6e:d6:79:d6:f2:3e:b4:b4:09:28:d4:4d:a4:
                    ca:9b:2b:73:59:10:4f:e8:a8:28:f2:f7:c5:df:b5:
                    bc:2e:36:84:0c:4f:58:da:22:cb:ab:db:34:75:3c:
                    ba:a2:a5:01:e2:b5:4d:cf:41:c7:5c:53:39:02:a4:
                    fd:e6:05:58:81:48:02:a9:54:66:1e:77:0c:f3:0e:
                    23:f5:42:8b:b8:50:59:3c:a1:6f:27:fe:54:39:d0:
                    e3:ee:5f:9b:f1:e2:eb:d6:b8:90:4c:d7:37:1e:20:
                    73:27:11:5a:ac:69:61:f9:50:61:05:72:b9:82:a9:
                    dd:51:de:b9:27:89:9b:a8:30:40:78:da:8f:ea:92:
                    f0:ae:3f:5a:5e:c1:28:93:af:f3:b9:0d:30:f2:85:
                    10:9a:76:75:f8:05:e6:8b:9e:b4:b6:e9:c5:ff:e1:
                    53:a1:77:ad:13:a9:a7:c6:7b:87:1f:17:42:77:20:
                    6e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:4A:29:EF:79:C3:F2:2E:66:3A:60:79:D2:B3:D1:4F:9F:C5:86:8D
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/1Uop73nD8i5mOmB50rPRT5_Fho0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.52/32

    Signature Algorithm: sha256WithRSAEncryption
         69:fb:98:27:10:78:d4:58:5e:42:a9:c6:7b:c0:c7:f6:52:e3:
         d7:cb:ca:34:5b:3f:7b:1f:cf:8b:6d:b2:61:65:71:07:5a:cc:
         92:b5:7e:e7:c0:64:f0:ab:51:c5:91:fb:5a:25:54:4b:f5:51:
         5b:8f:4c:47:80:21:d2:a6:33:94:2f:08:1e:8e:a9:1f:45:ff:
         9b:cb:03:12:64:ad:15:43:df:f7:68:cb:59:37:77:c9:7a:4f:
         ef:0c:b1:f4:fb:fe:92:03:d6:58:8c:91:4e:c0:4b:eb:d1:7c:
         49:4a:eb:ab:c3:b9:07:84:77:d4:6a:89:71:66:17:86:37:c1:
         80:7d:d2:aa:4c:32:fe:be:a9:48:48:ad:c6:bc:36:c3:a4:b8:
         91:96:2e:fa:4f:79:8d:f9:6b:78:aa:9e:f5:87:4e:1b:36:53:
         2a:68:ca:5b:c0:98:ca:c7:9e:1c:c4:05:5c:20:cf:2c:ad:44:
         a5:18:df:ad:db:e3:9c:30:91:5e:9a:cc:d2:20:af:8a:57:3f:
         9e:61:9d:79:3d:ef:2f:0c:95:b3:60:3d:1a:db:1c:1b:a9:36:
         76:53:e8:42:e8:08:3a:d2:f5:5a:96:1a:fa:0a:b3:f4:23:c8:
         28:59:a5:8f:af:5e:f0:c8:c9:08:44:31:b8:c6:76:57:79:49:
         42:86:25:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:07 2025 by rpki-client