Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/WYz3s13Jz37uFLLyAbZhGlagwzY.roa
File:                     WYz3s13Jz37uFLLyAbZhGlagwzY.roa (raw, json)
Hash identifier:          m8RZcwPuTex+/iNs6xW0FyONO+XZA+QrfXdbnXcW2fE=
Subject key identifier:   59:8C:F7:B3:5D:C9:CF:7E:EE:14:B2:F2:01:B6:61:1A:56:A0:C3:36
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0168
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/WYz3s13Jz37uFLLyAbZhGlagwzY.roa
Signing time:             Wed 15 Feb 2023 02:34:20 +0000
ROA not before:           Wed 15 Feb 2023 02:34:20 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.70/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 15 02:34:20 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=598CF7B35DC9CF7EEE14B2F201B6611A56A0C336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7a:04:fd:f8:37:30:15:b1:d3:e9:44:34:c4:
                    b0:8d:ea:17:e5:25:5d:a1:c7:ef:c3:fd:5c:14:21:
                    37:30:a1:a4:87:88:33:8e:6b:4e:7a:f4:1e:f0:61:
                    d6:4b:76:bc:87:55:cb:b4:25:d1:d1:f9:c5:43:3c:
                    ae:63:96:ed:c3:36:b4:cc:9c:bc:b4:2c:49:35:d3:
                    0e:0a:4c:5e:74:a2:2d:c7:3e:12:54:98:3f:5b:18:
                    43:2b:e3:2b:a3:25:df:c1:e6:c0:b7:70:5a:da:61:
                    6d:28:41:45:0f:a7:bf:78:c6:02:12:1b:0b:d7:9d:
                    cb:fa:76:ca:b4:75:4f:1a:9f:df:71:6b:48:2e:61:
                    43:40:34:2c:4f:d8:eb:99:91:ec:a8:af:13:9c:4d:
                    2d:c4:c3:47:5b:ee:cb:cc:c8:83:16:2b:d4:4c:24:
                    d9:6a:8a:44:e8:98:a7:5e:7a:1b:df:f7:39:e4:63:
                    17:f4:01:72:84:bb:85:59:bb:af:dc:fc:43:00:2f:
                    ce:10:c7:64:ba:9a:ab:fb:68:71:7a:e5:ef:79:37:
                    21:41:c9:37:c3:87:eb:14:dd:43:19:2e:05:20:94:
                    b7:63:de:d9:9e:98:9a:6b:b6:d9:1b:36:18:97:6a:
                    8d:98:6d:af:ed:71:12:ad:52:48:44:8a:3e:e6:04:
                    06:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8C:F7:B3:5D:C9:CF:7E:EE:14:B2:F2:01:B6:61:1A:56:A0:C3:36
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/WYz3s13Jz37uFLLyAbZhGlagwzY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.70/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:77:13:da:cf:50:a8:81:a8:ca:21:a2:69:d1:ab:31:a5:c0:
         ba:f1:57:8f:cc:f4:34:6c:65:0c:8e:c9:1b:31:1a:b0:fa:40:
         af:74:24:60:92:53:e1:74:9a:a1:04:0a:fa:ff:64:3c:26:bd:
         a9:7e:05:d1:53:53:1e:66:42:f7:0e:28:28:35:1b:07:a7:6b:
         6f:ff:4e:53:cd:c9:4f:dc:54:9a:64:25:dc:26:54:2e:c7:25:
         32:eb:3d:9e:e8:70:e7:cc:af:03:e0:15:43:03:a8:7e:bc:64:
         9c:11:81:0c:3a:f9:46:d1:4a:d9:94:90:26:7a:87:96:47:07:
         f3:47:13:c7:a4:e9:2d:a9:38:45:5e:2e:8c:63:f8:c9:c5:5c:
         b0:12:4d:98:84:b6:21:aa:e8:a1:b2:22:a1:84:53:fc:76:4c:
         83:cb:67:34:86:b6:7b:44:2b:2c:b8:80:19:7b:ba:49:17:6a:
         f8:a2:00:e5:54:38:0d:48:c8:9e:df:cc:db:88:91:9c:da:f5:
         49:b1:34:02:71:20:e5:8c:29:f4:cc:5c:4f:38:38:ab:71:58:
         e1:0a:9f:b3:3f:b9:90:17:93:c1:e7:a6:1f:64:80:67:e3:10:
         14:de:10:54:5f:95:3a:0d:78:eb:78:f2:62:75:1d:1e:b0:b6:
         59:68:26:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:35 2025 by rpki-client