Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/YHExcsddELW-_MeAZGv3CIvdGQA.roa
File:                     YHExcsddELW-_MeAZGv3CIvdGQA.roa (raw, json)
Hash identifier:          W39bN3eUCwpCbx5jl9tu1DXBVIeDz44vydiwpDp4rR4=
Subject key identifier:   60:71:31:72:C7:5D:10:B5:BE:FC:C7:80:64:6B:F7:08:8B:DD:19:00
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       017F
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/YHExcsddELW-_MeAZGv3CIvdGQA.roa
Signing time:             Wed 15 Feb 2023 02:34:27 +0000
ROA not before:           Wed 15 Feb 2023 02:34:27 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.56/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 383 (0x17f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 15 02:34:27 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=60713172C75D10B5BEFCC780646BF7088BDD1900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b0:89:30:3a:0b:cd:67:74:df:15:1e:4f:df:
                    00:2f:97:a0:64:84:00:a7:5e:80:49:24:74:3f:78:
                    0f:46:7b:d6:71:13:df:81:a0:82:3e:91:02:f1:bd:
                    b9:64:e8:da:14:5d:dc:05:78:51:07:38:6e:94:49:
                    36:6b:01:69:af:73:e7:0b:28:7a:4e:b8:d5:ef:1c:
                    dc:24:4f:03:01:b5:8c:d7:c9:1b:64:2b:dc:1e:1b:
                    9d:80:22:eb:1c:b5:59:8a:a3:3e:91:8f:b6:e2:28:
                    9d:21:a7:88:fa:f9:80:ce:22:be:79:d8:7b:0a:b3:
                    62:d8:40:45:2c:c5:9a:9d:35:7a:39:2a:fd:ed:89:
                    57:07:86:01:40:c8:ef:5c:fa:95:b8:a7:48:b4:61:
                    d8:6f:82:61:1f:37:d4:df:c8:9e:06:71:7b:01:d2:
                    4d:9f:ea:ba:bc:10:a0:1a:d1:29:35:f3:ed:13:32:
                    9a:ec:d0:2a:c7:d8:69:bf:e1:38:fc:8d:56:64:37:
                    38:8a:52:dc:7c:25:0a:fc:c6:71:a1:7e:68:7c:fb:
                    42:f2:66:8b:35:15:d0:dd:f2:c5:80:1a:26:a5:2a:
                    5a:64:9d:0c:59:0e:d3:cb:1c:8b:ce:ce:19:dc:60:
                    80:9c:50:4f:f6:a3:fc:9b:90:d0:4d:09:b3:f6:74:
                    ff:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:71:31:72:C7:5D:10:B5:BE:FC:C7:80:64:6B:F7:08:8B:DD:19:00
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/YHExcsddELW-_MeAZGv3CIvdGQA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.56/32

    Signature Algorithm: sha256WithRSAEncryption
         44:a7:e7:c4:c3:cf:a6:3a:99:b6:9f:d9:d8:80:cd:36:2d:d7:
         dc:cb:54:d4:3a:ba:13:49:20:67:93:8e:e9:bc:c6:97:c1:46:
         ef:b5:77:1b:43:c6:40:af:41:20:0e:88:79:52:0c:48:8e:cd:
         76:a7:24:56:1f:66:f5:70:48:a5:8b:05:47:4e:5f:b7:8a:27:
         52:d3:cc:6d:7f:5b:75:6b:5a:d2:48:54:9e:9c:d2:3a:54:ea:
         15:8d:50:be:ff:1d:19:73:09:dd:e0:61:a7:33:19:66:d4:24:
         24:68:bc:25:d0:92:42:0d:7a:56:0b:ca:c4:e8:ef:f6:f0:11:
         71:9a:af:41:82:11:2d:69:1b:5c:c9:41:df:46:d8:b2:b1:17:
         05:6e:0b:b2:1c:88:f6:64:b5:c2:bc:dd:d6:5c:ff:19:9b:60:
         ff:0e:13:32:01:2f:17:af:e8:6c:1b:85:24:4c:9d:e2:be:ef:
         fa:19:03:fb:c0:88:7f:64:45:46:e8:c5:da:79:29:88:c7:30:
         bb:85:80:d6:2b:97:20:f8:d1:2e:95:b3:0f:99:8e:bd:99:ad:
         5a:4f:42:05:ce:5a:d2:a8:ff:b5:8d:59:df:2f:ac:b0:1e:ba:
         21:23:bf:e9:4b:0e:4a:43:4c:87:9c:18:2e:84:86:96:df:86:
         79:f3:b9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:07:14 2025 by rpki-client