Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/9OC8IMDYd3sSKtuw1dKBeDl1GUE.roa
File:                     9OC8IMDYd3sSKtuw1dKBeDl1GUE.roa (raw, json)
Hash identifier:          WOFo6qvzRl1IBkpR/iPtJMqJ9lZqebMu087aedbDAMg=
Subject key identifier:   F4:E0:BC:20:C0:D8:77:7B:12:2A:DB:B0:D5:D2:81:78:39:75:19:41
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01F7
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/9OC8IMDYd3sSKtuw1dKBeDl1GUE.roa
Signing time:             Mon 20 Feb 2023 07:57:29 +0000
ROA not before:           Mon 20 Feb 2023 07:57:29 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.16/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503 (0x1f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:57:29 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=F4E0BC20C0D8777B122ADBB0D5D2817839751941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:76:06:f5:f6:57:59:4a:9e:3c:a3:a1:61:d9:
                    17:92:fb:00:62:3d:89:ef:a9:3c:e4:0d:d5:16:a8:
                    60:7a:bd:ef:fa:ee:20:cb:3f:09:37:db:50:84:fe:
                    6a:4a:14:46:f7:95:70:cb:2c:1e:7f:b9:08:2d:31:
                    87:27:5d:f9:b8:8d:a1:4a:62:e4:f0:3a:63:a9:ee:
                    21:09:d9:29:ef:d7:03:22:18:f6:ca:23:44:1d:f8:
                    86:6c:fb:a3:c4:d8:f1:23:b8:98:5f:bb:2d:9d:d4:
                    f2:61:7d:5d:d3:f7:a8:43:51:d8:24:11:6b:af:95:
                    10:b7:e7:59:e9:4d:3f:6c:58:b8:1f:b6:f7:e7:4d:
                    4d:93:11:94:db:80:80:8e:ef:2a:a1:47:39:6b:4f:
                    e7:67:72:5a:76:73:7e:b0:13:6c:19:32:ad:e5:bd:
                    67:c5:75:2f:f3:7c:0c:b0:95:36:f6:de:d7:f2:82:
                    28:a6:37:31:e2:3c:e0:5b:83:59:77:b3:a4:0b:7b:
                    6e:59:b4:56:72:b1:78:b3:c4:b7:ba:d2:3b:63:7f:
                    08:95:7a:72:ea:be:fe:ff:1a:9e:16:f6:51:01:ed:
                    8c:6b:d4:c6:8a:71:ab:88:97:95:a7:37:ab:5a:6e:
                    79:59:9f:28:cc:76:16:ca:52:9e:3a:36:ba:e5:d6:
                    bb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E0:BC:20:C0:D8:77:7B:12:2A:DB:B0:D5:D2:81:78:39:75:19:41
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/9OC8IMDYd3sSKtuw1dKBeDl1GUE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.16/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:34:36:f9:67:52:de:db:b5:98:8b:0a:67:78:13:00:2e:55:
         93:df:84:78:c0:d3:62:ea:91:1e:a4:67:78:7c:2a:3e:5d:63:
         e7:6a:44:2a:7a:dc:5b:21:01:79:59:c5:36:c1:05:93:6c:37:
         e4:da:d0:af:f8:2f:c3:5a:62:2e:64:f6:e2:85:97:23:89:64:
         4b:dd:3b:b8:78:04:38:e3:8b:56:4e:6d:aa:01:3f:33:27:c4:
         8a:b9:20:1c:fb:b4:ca:d4:93:3e:39:6e:cc:6b:a5:e8:c4:f0:
         21:47:5a:3a:51:29:58:69:03:f2:7d:07:18:50:17:a1:10:68:
         bb:19:da:7c:0d:94:c2:61:53:b2:16:7f:c9:34:30:48:8e:53:
         b0:18:3d:35:da:29:4f:18:79:81:b5:04:ab:57:9d:19:ed:93:
         9c:bd:25:c6:11:96:b0:52:72:c2:66:d6:dc:a0:3e:d2:3c:14:
         cb:b6:20:18:f2:1b:9b:0e:c5:26:3c:6c:ba:a3:70:1b:ce:cd:
         bb:8a:b0:a4:57:d5:25:c2:92:1c:19:a3:64:f0:20:50:af:67:
         ee:13:04:03:6f:d7:64:8a:32:2d:ab:d7:8d:c9:b4:96:e2:19:
         b8:35:a2:69:b8:2e:3a:6e:c9:27:84:b8:06:ab:81:4d:aa:ec:
         82:13:83:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:13:52 2025 by rpki-client