Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/EOGpDk15I__4AlctBrQFB050PrM.roa
File:                     EOGpDk15I__4AlctBrQFB050PrM.roa (raw, json)
Hash identifier:          ptMSEvXYxLRMiSoPPQ++KcEDFERwKBI5hwa+2iu6PDw=
Subject key identifier:   10:E1:A9:0E:4D:79:23:FF:F8:02:57:2D:06:B4:05:07:4E:74:3E:B3
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0173
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/EOGpDk15I__4AlctBrQFB050PrM.roa
Signing time:             Wed 15 Feb 2023 02:34:23 +0000
ROA not before:           Wed 15 Feb 2023 02:34:23 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.67/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371 (0x173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 15 02:34:23 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=10E1A90E4D7923FFF802572D06B405074E743EB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4a:66:df:46:db:cc:9a:97:68:50:a2:ec:d8:
                    3b:4d:0a:44:75:2c:f1:2e:2c:0e:a7:70:bb:05:bd:
                    26:1b:d0:5f:f9:8d:d1:39:03:af:ae:e5:fe:f9:c5:
                    33:d9:26:4c:b2:a5:b4:54:1f:1f:01:37:5d:b1:16:
                    53:53:b4:5b:43:a1:8b:f3:81:23:b0:94:29:43:0e:
                    90:1f:b0:c9:47:75:74:83:d9:7f:e1:44:66:b6:d5:
                    69:b4:f7:85:cf:e9:2a:e1:41:c2:db:f4:7a:7b:61:
                    0f:75:14:c1:a8:c8:13:e0:46:dc:cd:c3:92:80:2c:
                    08:1e:b0:30:67:22:8a:13:d0:96:ea:8d:10:a4:12:
                    dc:a2:ad:f5:1d:82:a4:b9:71:25:39:fa:c1:2c:e3:
                    b8:a4:b4:70:24:1f:80:10:aa:1f:0e:d9:60:7f:83:
                    d9:6a:72:e7:93:7b:be:1e:40:39:37:a8:f3:a9:64:
                    af:1c:53:e2:e8:08:c2:c6:08:b8:c4:0a:9b:4c:f8:
                    c9:0a:25:89:51:3c:75:90:e9:72:25:f0:d4:1f:b0:
                    6d:d4:4f:0c:b1:8e:0c:1f:b7:5a:8e:e0:d2:7c:15:
                    1d:a1:1a:61:3a:c9:e9:c3:1f:6b:74:2c:02:f9:aa:
                    d2:a5:9e:7c:d9:1c:e1:e8:2c:cf:a3:aa:d9:f4:92:
                    c2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E1:A9:0E:4D:79:23:FF:F8:02:57:2D:06:B4:05:07:4E:74:3E:B3
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/EOGpDk15I__4AlctBrQFB050PrM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.67/32

    Signature Algorithm: sha256WithRSAEncryption
         28:d8:60:6d:7a:98:38:aa:af:87:61:b6:b6:73:32:c7:d7:1c:
         39:7c:8f:ff:4c:e7:0f:bf:2a:35:87:b3:c0:87:de:4a:5e:29:
         ce:a9:a3:10:18:e4:58:b2:48:7c:d3:3b:20:1c:b9:46:9f:62:
         b4:f8:ac:59:f5:1a:a6:e9:7c:38:b0:93:ae:da:e3:2f:95:0a:
         f0:f5:e3:7e:fa:e9:b7:c5:9a:d3:68:f7:22:cd:79:70:2e:32:
         eb:07:59:88:72:f6:0a:70:7f:ec:50:c2:cd:40:7b:43:d6:c1:
         fe:d7:1c:1a:88:58:de:c0:8f:e6:20:93:e6:ea:b3:5b:df:dd:
         f7:57:57:19:97:6d:24:3a:e3:7c:62:fd:02:16:e1:e2:62:24:
         b6:7f:f2:ed:39:27:69:d6:b1:ae:78:4f:94:0c:11:6f:01:9b:
         81:55:c8:7e:9f:3b:9c:d2:51:93:10:3f:e7:6b:54:c6:9e:a5:
         10:ca:65:4c:d8:e3:01:da:c5:bb:5c:37:95:03:c1:b7:ce:2c:
         5e:3a:21:e4:71:72:fe:54:08:ae:6f:a3:cb:27:e3:69:c2:69:
         16:5e:4f:78:2c:39:50:45:60:7e:44:d7:15:0e:85:01:6a:bd:
         f1:d4:73:08:c4:86:1d:83:e5:a2:a6:76:b9:a0:f4:1a:01:94:
         90:9e:1e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:20:17 2025 by rpki-client