Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/HSYw6fHFQ8OzPJ2lmDpdh3KurbQ.roa
File:                     HSYw6fHFQ8OzPJ2lmDpdh3KurbQ.roa (raw, json)
Hash identifier:          VQz1ARmkQMDfmfvKjOhrZV+2f4xCxxf20v1MmAm6DEc=
Subject key identifier:   1D:26:30:E9:F1:C5:43:C3:B3:3C:9D:A5:98:3A:5D:87:72:AE:AD:B4
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0167
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/HSYw6fHFQ8OzPJ2lmDpdh3KurbQ.roa
Signing time:             Wed 15 Feb 2023 02:34:20 +0000
ROA not before:           Wed 15 Feb 2023 02:34:20 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.81/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 359 (0x167)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 15 02:34:20 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=1D2630E9F1C543C3B33C9DA5983A5D8772AEADB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e9:f8:9f:3b:29:3c:b4:0f:bb:dc:52:45:d3:
                    c6:48:f4:cb:93:61:68:ad:36:00:d0:f7:82:e5:42:
                    bb:13:50:65:34:ce:58:3e:4e:4f:cd:71:e4:25:38:
                    36:82:e6:19:f9:41:f2:46:44:58:2d:13:a5:38:8b:
                    3a:d2:97:54:d0:3c:94:70:28:95:28:2c:28:41:3c:
                    18:55:c2:50:df:19:75:8a:e3:03:d2:1a:26:df:a3:
                    4c:c0:e6:ea:e1:eb:be:7a:ec:bc:5d:ce:86:ea:4b:
                    c1:c4:11:2f:44:0b:a7:48:e3:22:fa:fb:86:cc:32:
                    59:c4:c0:89:2b:78:f6:bc:17:62:4f:2b:ea:10:0e:
                    19:d3:1a:a4:aa:5f:5b:ab:86:6b:4a:85:4e:34:41:
                    d4:13:db:61:5a:b5:6c:65:6d:3f:2d:41:8f:56:30:
                    1a:9b:5f:0d:f8:7a:c6:79:94:3d:af:32:13:38:91:
                    ab:91:33:7a:06:49:09:f0:32:ad:31:b6:88:33:9f:
                    2c:84:09:ac:01:0a:71:f8:27:5a:a8:07:b6:4e:ef:
                    92:a5:4d:6d:8e:40:b0:df:fb:0e:ba:43:7d:90:d1:
                    46:84:a8:1e:07:55:1b:51:ba:87:94:de:3e:f9:d7:
                    c7:60:a4:49:f2:b5:70:e5:d3:e5:40:a1:e1:c2:fe:
                    8d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:26:30:E9:F1:C5:43:C3:B3:3C:9D:A5:98:3A:5D:87:72:AE:AD:B4
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/HSYw6fHFQ8OzPJ2lmDpdh3KurbQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.81/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:eb:d0:b5:03:0e:50:e0:32:5e:0a:89:99:f0:d6:98:a7:01:
         b8:7a:c6:36:17:b2:1b:ec:1a:11:a8:ad:b8:ed:8a:1f:2f:57:
         6f:ea:40:d3:b1:bf:fe:cf:2b:df:5a:ac:f2:d9:b0:c2:cf:3e:
         69:ac:ae:b8:7e:49:c4:53:da:cf:4d:94:41:8f:34:da:de:1f:
         01:98:9c:92:d9:d1:b2:07:2f:19:2d:73:be:a4:cf:9b:83:d3:
         e2:31:d4:05:f0:1e:fb:87:48:ab:3e:90:33:29:c5:5a:70:e5:
         ae:29:6a:24:62:30:d0:40:23:08:28:f0:62:fc:39:6d:76:22:
         4f:90:bb:4d:d5:03:57:9b:2e:10:1c:56:e1:ac:20:f4:d0:2d:
         27:6f:3d:05:7e:b5:8f:8f:88:23:81:04:29:74:31:f5:74:cd:
         9c:82:13:ad:31:58:08:8a:3f:e1:fd:67:66:ee:bd:d0:66:3e:
         3d:1a:1d:61:66:11:88:44:0b:e7:72:91:63:7b:13:7d:4d:84:
         1b:13:d7:5e:4d:93:b8:4b:2a:f0:1e:11:26:4e:8e:57:b2:a3:
         72:b5:35:1f:15:c6:43:08:5c:9c:11:11:64:bd:d7:ec:09:94:
         38:17:b8:83:88:57:a5:96:23:5a:8e:6e:17:c0:88:cd:cb:21:
         69:37:db:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:37:56 2025 by rpki-client