Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/9rOD4R27XLT0sOV24vZ1r9Ai7Is.roa
File:                     9rOD4R27XLT0sOV24vZ1r9Ai7Is.roa (raw, json)
Hash identifier:          vcvtPh7+mklw1GNsWJH06KnAjPtZeW2nz8xTrIRZ1DE=
Subject key identifier:   F6:B3:83:E1:1D:BB:5C:B4:F4:B0:E5:76:E2:F6:75:AF:D0:22:EC:8B
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0161
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/9rOD4R27XLT0sOV24vZ1r9Ai7Is.roa
Signing time:             Wed 15 Feb 2023 02:34:17 +0000
ROA not before:           Wed 15 Feb 2023 02:34:17 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.80/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353 (0x161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 15 02:34:17 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=F6B383E11DBB5CB4F4B0E576E2F675AFD022EC8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2c:3d:b9:b5:82:d0:ba:a3:1b:ee:8e:9a:c6:
                    05:01:57:6f:66:dd:56:5c:00:47:49:af:2f:52:3f:
                    d2:57:70:40:6e:b2:8c:c0:cb:8f:18:94:73:42:e8:
                    69:4a:fe:58:fb:84:e7:ea:c9:52:21:15:38:58:14:
                    f7:1a:c0:3d:cb:c2:2e:b1:b6:15:3c:1d:8d:3c:ac:
                    01:50:ca:fc:5b:86:4c:18:f1:d2:ed:63:54:68:9a:
                    57:49:22:fd:33:32:3b:ec:6a:29:dc:49:a8:7c:88:
                    bc:a2:81:79:4e:ec:dc:98:f3:5c:a5:70:b3:05:d4:
                    cd:c2:64:3e:97:98:31:df:d8:a3:ce:b0:54:63:d4:
                    64:91:ac:0b:3b:1c:e6:dd:5a:b0:9c:69:25:12:c9:
                    a7:97:09:a6:82:9d:50:d8:fe:42:c6:98:b7:c7:9a:
                    63:3b:4e:98:57:85:31:7a:2e:36:54:9d:ed:f4:50:
                    8b:53:a3:0e:24:31:8b:aa:77:12:5f:96:bf:0a:70:
                    08:80:76:24:48:f9:81:d4:b6:61:dc:38:26:54:f6:
                    31:4f:37:f8:c4:a0:e0:d7:ef:95:72:c9:f8:0f:c0:
                    3d:c1:0b:d3:ac:14:8a:79:c0:3f:f9:fb:c6:ed:02:
                    8a:ab:d0:7c:d9:7a:55:ed:5d:a7:23:06:0c:31:f7:
                    a5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B3:83:E1:1D:BB:5C:B4:F4:B0:E5:76:E2:F6:75:AF:D0:22:EC:8B
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/9rOD4R27XLT0sOV24vZ1r9Ai7Is.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.80/32

    Signature Algorithm: sha256WithRSAEncryption
         33:4b:37:cc:9b:76:fa:ec:13:17:91:6c:8f:c7:5a:63:aa:96:
         41:e0:ee:69:52:fe:e2:d1:fe:24:84:bc:9e:be:cf:da:ee:19:
         c7:7f:e3:c3:3b:6c:c8:48:f0:a4:e2:e0:1e:c9:03:16:16:0b:
         bf:8b:ca:f3:5d:0d:1a:fa:ff:37:00:6a:b9:92:05:fe:97:00:
         16:03:85:fa:91:43:c4:96:04:18:a8:31:09:d3:65:4a:aa:c4:
         80:69:28:93:e9:f3:0d:07:f3:78:81:7c:22:61:27:2f:04:e3:
         56:3e:22:bd:1c:75:d6:1e:5d:34:f1:bb:d9:8c:19:18:cd:a8:
         8a:76:70:61:3a:c7:f2:63:36:4b:da:54:55:e9:fa:aa:d5:45:
         d4:85:67:c9:9a:1a:7a:59:72:51:f9:07:ff:68:4f:af:b4:13:
         8b:37:c8:1e:72:0f:d1:c0:0c:78:32:dd:59:31:83:03:f3:c6:
         ef:2d:b6:51:7b:a5:f6:a8:b3:2c:53:b2:57:cd:35:02:12:be:
         b3:40:c2:46:78:c2:79:9c:14:30:00:7f:fe:4a:fa:13:3b:10:
         ef:19:67:2b:88:f7:55:c4:08:03:01:bc:9e:8e:2b:3f:e9:41:
         d0:48:ec:cd:42:bb:df:03:4f:36:9f:5e:75:de:bb:e7:7b:b3:
         b6:0e:06:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:54 2025 by rpki-client