Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/UvItd43YPJNLk-4fNqQxnDM7igo.roa
File:                     UvItd43YPJNLk-4fNqQxnDM7igo.roa (raw, json)
Hash identifier:          9BDzKI+x7IqmtLRkRjRaKKxGJtjh4nLQBMmR6XYqxt4=
Subject key identifier:   52:F2:2D:77:8D:D8:3C:93:4B:93:EE:1F:36:A4:31:9C:33:3B:8A:0A
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       015B
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/UvItd43YPJNLk-4fNqQxnDM7igo.roa
Signing time:             Wed 15 Feb 2023 02:34:15 +0000
ROA not before:           Wed 15 Feb 2023 02:34:15 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.82/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 347 (0x15b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 15 02:34:15 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=52F22D778DD83C934B93EE1F36A4319C333B8A0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ce:22:95:44:90:d4:44:5a:b8:00:07:6f:70:
                    54:41:1d:fd:cb:ee:a8:04:f4:04:45:59:a9:c5:f3:
                    1d:2e:72:5b:c4:5c:75:09:a1:67:0f:f1:27:70:10:
                    f4:73:6c:21:e0:40:2a:a4:b0:be:a9:cc:45:eb:2e:
                    7b:96:d0:f8:13:98:55:f7:0c:f1:ae:3f:0c:11:b7:
                    6b:89:24:61:ae:88:86:ee:d2:97:f9:fb:32:e4:ed:
                    ea:c4:83:b3:e3:52:65:76:36:74:40:bb:1d:ba:19:
                    20:1a:e3:26:e5:32:9a:f3:31:26:b2:1b:c1:ba:a0:
                    a2:e7:28:a3:f5:60:4c:6b:c3:84:db:2e:97:8b:d4:
                    fe:e7:9f:f7:ae:fd:36:11:10:f4:05:9a:b6:64:13:
                    28:d5:a2:6f:94:a3:cb:6c:f0:94:91:f3:53:cf:50:
                    9f:ef:3b:0d:24:7b:33:df:4e:c6:f5:85:61:6e:f9:
                    c3:2b:b4:e8:dd:73:ed:62:c5:05:d9:bf:f3:05:ee:
                    42:84:b1:63:6a:d9:64:59:23:d9:66:bf:74:22:45:
                    76:67:ce:e0:ff:32:84:e3:88:1d:f8:bf:3b:19:df:
                    7b:22:49:f9:cf:e1:b9:8a:a6:dc:7e:03:cf:84:22:
                    0f:cc:15:68:a7:ca:a7:d1:78:87:09:88:e7:fb:2f:
                    61:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F2:2D:77:8D:D8:3C:93:4B:93:EE:1F:36:A4:31:9C:33:3B:8A:0A
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/UvItd43YPJNLk-4fNqQxnDM7igo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.82/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:e5:e8:d4:a0:56:98:a2:10:45:8f:b7:a6:b3:ed:1b:d6:bb:
         76:f6:a5:ba:c4:c7:c2:ec:59:d2:55:2f:59:18:24:aa:cd:7d:
         16:b5:2f:54:fb:c3:65:66:42:4c:a6:06:e5:3f:2d:ee:d5:a0:
         42:e8:a6:ed:42:9a:a2:e4:17:a8:67:5c:1b:57:fc:dd:ae:60:
         2c:81:01:3c:88:ea:16:7b:90:e2:87:2a:d2:e2:44:f4:6a:a1:
         6d:b7:e6:10:b4:81:3f:d2:f7:6a:57:93:db:b2:ab:bd:df:29:
         db:1a:cb:ce:a0:cc:95:48:af:02:e8:b6:8a:25:0b:ad:45:c9:
         ae:ec:a9:6d:03:70:e4:8b:f2:ee:63:4c:a5:54:06:fd:9a:97:
         c4:ef:44:55:27:00:e6:3d:6b:ce:ff:b0:83:31:75:8c:4b:f3:
         6a:8f:f0:c1:04:6b:c7:61:9e:fe:c0:37:a0:79:50:bf:8d:c4:
         3c:ab:ff:84:57:d9:5d:2b:13:ff:e7:af:38:8b:35:d0:77:f6:
         40:de:8d:3c:4b:69:5a:bd:07:e4:c7:92:fd:b2:93:d6:2d:b8:
         6e:a2:3b:b8:aa:da:24:71:cd:08:6a:e4:ec:ce:9c:b5:ac:44:
         11:07:e6:c9:3b:f8:c9:d0:27:d9:a1:4e:e1:13:25:17:dc:a6:
         04:5f:db:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:47:22 2025 by rpki-client