Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/XUGNP_aSrf-pZMZt_nV6IXRZDwE.roa
File:                     XUGNP_aSrf-pZMZt_nV6IXRZDwE.roa (raw, json)
Hash identifier:          UvmZKh46eB2dIKdDKwcc/khyhUg/zkKgH4jspKiSQEg=
Subject key identifier:   5D:41:8D:3F:F6:92:AD:FF:A9:64:C6:6D:FE:75:7A:21:74:59:0F:01
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       015F
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/XUGNP_aSrf-pZMZt_nV6IXRZDwE.roa
Signing time:             Wed 15 Feb 2023 02:34:16 +0000
ROA not before:           Wed 15 Feb 2023 02:34:16 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.77/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 351 (0x15f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 15 02:34:16 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=5D418D3FF692ADFFA964C66DFE757A2174590F01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e7:05:92:b0:dc:7c:67:d8:d1:0c:0f:4c:e7:
                    3b:da:80:50:f3:3f:57:f7:e0:8e:34:c6:f1:d3:49:
                    52:16:3e:34:2f:b1:79:cf:54:f0:1c:53:00:c4:e7:
                    dc:b9:e9:ac:e6:8d:e0:c3:f0:80:ce:9f:4e:26:6c:
                    d4:48:7b:b0:a4:71:47:99:b5:df:83:a5:c1:27:22:
                    f1:00:c6:3d:3e:68:3b:93:b3:81:da:3c:1b:29:c1:
                    38:37:64:9e:0e:34:60:c5:06:31:56:84:86:d9:95:
                    e6:9a:4c:46:e7:51:2b:91:c3:36:3f:18:2d:d3:f8:
                    de:7f:38:14:91:36:ea:32:72:4d:91:b9:80:27:1c:
                    93:91:ad:5d:8d:da:35:21:ee:3a:6f:d9:d4:30:c2:
                    24:be:00:3b:0f:d8:85:fb:71:9d:25:54:b2:dc:f9:
                    0b:b1:d5:12:3d:f2:0e:e2:f0:4c:31:bc:ea:53:bc:
                    a1:67:7a:e9:4c:47:8d:d4:da:85:23:5d:18:d2:e7:
                    4a:3f:be:87:43:49:94:ed:8f:d0:67:26:ea:5a:fc:
                    e3:ae:69:d0:92:74:d3:c5:1f:3c:07:14:64:57:f1:
                    67:e2:d3:14:9f:f4:db:62:d1:40:09:2b:ab:38:10:
                    52:5c:c7:da:e1:0f:ab:2d:1e:13:42:7b:ff:c9:ca:
                    40:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:41:8D:3F:F6:92:AD:FF:A9:64:C6:6D:FE:75:7A:21:74:59:0F:01
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/XUGNP_aSrf-pZMZt_nV6IXRZDwE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.77/32

    Signature Algorithm: sha256WithRSAEncryption
         72:19:25:27:d3:05:b0:37:bb:35:f8:48:92:c5:d4:39:97:c9:
         24:6d:61:2f:62:9f:0b:42:ad:9d:19:4c:b5:2c:a2:f8:2e:23:
         a7:39:3f:f6:6b:57:ad:01:47:d4:89:9c:9e:a1:67:2c:86:4e:
         03:88:f1:69:1b:af:c4:8a:d6:da:7a:2e:6a:20:9e:1e:d8:ad:
         eb:be:d8:af:9c:54:aa:1c:98:63:54:7f:5e:3d:34:5f:21:76:
         e2:e5:08:49:d6:a8:41:a1:eb:86:91:a6:b5:bd:9d:68:7d:9d:
         72:fc:aa:8b:90:73:a3:bc:c1:af:24:71:ac:40:54:36:36:40:
         33:9c:c1:e1:cc:f2:84:a9:dd:0c:7e:21:14:e4:b8:5c:8e:b4:
         ae:20:d7:16:70:55:8e:77:b0:44:b3:85:19:22:c9:72:f3:da:
         f2:30:ec:d3:49:a8:44:6a:bf:78:3f:0e:6b:14:4a:f7:60:6e:
         87:d7:79:35:76:6a:94:af:0a:4c:8c:be:6f:27:4c:d9:41:e4:
         a3:d7:fc:69:a4:d6:c4:8a:ff:26:32:1d:7e:c9:fd:66:71:88:
         10:d6:73:53:51:a8:f3:40:f6:28:35:2f:38:d5:c9:a6:31:2a:
         aa:24:d0:e9:c9:01:ca:b1:0c:56:99:de:a9:d3:3d:82:12:15:
         e8:f6:ea:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:44:00 2025 by rpki-client