Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/8_sV9VlgIPpTJpUNBoL-EqefF5Q.roa
File:                     8_sV9VlgIPpTJpUNBoL-EqefF5Q.roa (raw, json)
Hash identifier:          TNGa3Ut9JAsDXkvHdM/FxgDAlxiGjgFxOJtSxNe6Ha0=
Subject key identifier:   F3:FB:15:F5:59:60:20:FA:53:26:95:0D:06:82:FE:12:A7:9F:17:94
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0180
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/8_sV9VlgIPpTJpUNBoL-EqefF5Q.roa
Signing time:             Wed 15 Feb 2023 02:34:28 +0000
ROA not before:           Wed 15 Feb 2023 02:34:28 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.68/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384 (0x180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 15 02:34:28 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=F3FB15F5596020FA5326950D0682FE12A79F1794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:71:ac:76:b6:5e:94:16:26:f8:d9:e1:01:b1:
                    f4:14:af:eb:b3:1f:d1:77:ef:60:09:d4:74:ed:2f:
                    5e:28:79:9b:28:7a:b6:d9:53:95:06:b0:31:aa:c1:
                    a1:36:9f:b4:64:0f:45:a1:d4:ba:e3:a5:82:96:39:
                    ce:17:4d:83:8c:8f:3f:06:b1:96:bf:b0:e5:e9:ab:
                    57:ad:40:b8:1e:15:56:13:ca:0b:86:79:90:00:52:
                    92:4f:67:5e:7b:bf:5d:5c:d1:d5:e7:80:79:40:c3:
                    d7:3e:7d:70:f1:cf:c4:93:0e:da:9e:42:fd:43:ba:
                    c7:39:d8:e1:7f:60:c5:99:b3:57:5b:02:4c:2e:ef:
                    4f:55:ec:a3:ce:08:61:c6:4c:1b:cb:8b:fc:e3:93:
                    ea:fe:be:31:9b:fa:92:6b:45:08:8b:d2:d7:79:e2:
                    cf:65:b8:b7:70:4d:b6:d8:1f:21:dd:8d:c6:49:be:
                    2d:3a:37:95:d0:0e:ae:25:43:22:4e:60:60:7f:ac:
                    50:3c:75:d0:d2:82:8f:40:f6:7b:ba:18:af:9b:3c:
                    49:2a:4c:f1:3c:47:eb:e0:15:5d:4a:08:6b:85:69:
                    59:ba:2d:a4:2f:35:4c:78:9e:8c:b6:6d:ba:a0:02:
                    ed:a7:08:48:2c:c0:98:2a:00:cb:5f:58:af:be:89:
                    97:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FB:15:F5:59:60:20:FA:53:26:95:0D:06:82:FE:12:A7:9F:17:94
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/8_sV9VlgIPpTJpUNBoL-EqefF5Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.68/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:e5:7f:14:6d:a7:63:b6:bd:5c:a6:cd:5b:3c:b8:07:46:2d:
         96:21:85:1b:26:7d:cf:8a:c7:30:22:3a:7c:9d:ae:49:5b:b0:
         f4:00:8d:3d:82:f3:e1:a7:21:bd:ce:66:82:0d:ce:91:4d:29:
         e7:58:69:d2:c0:5e:03:76:be:39:5d:a6:d8:2b:6b:bc:79:d1:
         49:c8:6e:82:e0:0e:8d:34:a6:e1:a3:20:65:8c:c1:ff:75:69:
         4f:36:00:a1:3e:cc:8b:ae:ff:97:70:c6:e4:8b:1f:7f:79:b0:
         4e:db:93:6b:6b:8c:c3:f2:8e:8a:1b:d2:cf:f9:a3:a8:79:8c:
         1b:65:57:77:97:1d:12:f5:9d:e0:14:7c:0c:c7:1e:fd:ca:78:
         6a:b7:63:09:32:d2:44:97:07:72:a6:10:88:de:b3:f3:c8:04:
         01:35:1b:87:b2:17:5b:f6:18:d0:4f:b1:7f:8b:75:a6:68:47:
         60:1a:6a:2d:c8:ed:f8:a0:df:eb:b6:7c:5e:24:17:9b:47:4b:
         3a:57:e8:d9:00:31:cc:df:ed:75:80:5d:4e:2b:e2:41:27:ed:
         a2:cf:e0:f2:b5:da:75:0b:99:5a:1f:cf:dc:15:f2:63:89:55:
         40:88:34:59:b7:66:ed:dd:81:58:07:60:05:4e:a2:7d:52:de:
         44:b9:c1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:38 2025 by rpki-client