Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/jV2_Wqkrrhg-OWL3irds_Q4Kj6E.roa
File:                     jV2_Wqkrrhg-OWL3irds_Q4Kj6E.roa (raw, json)
Hash identifier:          u8UsBeHhXkYChTEeQX3dyfWgwEqofQ8pWzP0LQW9vy4=
Subject key identifier:   8D:5D:BF:5A:A9:2B:AE:18:3E:39:62:F7:8A:B7:6C:FD:0E:0A:8F:A1
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0179
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/jV2_Wqkrrhg-OWL3irds_Q4Kj6E.roa
Signing time:             Wed 15 Feb 2023 02:34:25 +0000
ROA not before:           Wed 15 Feb 2023 02:34:25 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.78/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377 (0x179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 15 02:34:25 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=8D5DBF5AA92BAE183E3962F78AB76CFD0E0A8FA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5c:68:ba:08:91:a0:fa:24:2c:7b:90:61:fa:
                    ef:99:74:10:db:3d:e1:cf:12:fd:f7:01:77:54:1b:
                    02:35:5b:74:a3:1d:9a:80:aa:63:ba:39:16:c0:89:
                    c1:50:01:65:02:67:af:5f:3a:20:b9:70:46:45:66:
                    f2:4a:b7:8a:9d:a6:02:0b:e8:ae:89:bc:66:2c:d0:
                    13:c2:1f:84:18:c6:fd:f4:c3:77:4d:5e:7e:67:d7:
                    0d:a3:e7:f5:f4:15:d2:cb:59:94:9f:58:7b:58:fe:
                    2a:88:e8:a1:88:51:8a:a8:21:78:cf:f3:5f:4a:0b:
                    dc:52:6b:ae:2d:6d:28:65:a9:a8:5c:67:eb:f2:87:
                    4e:9c:9b:eb:b2:06:c3:06:4c:96:a9:73:7a:f5:2c:
                    1a:67:13:33:79:1f:59:bb:e1:7a:1d:aa:06:23:fd:
                    62:6c:3b:87:f5:8b:30:bc:50:e8:b6:af:33:71:38:
                    c9:cf:29:b7:fb:6e:9b:2b:1b:16:4d:89:25:36:12:
                    e6:c2:27:a9:3b:cc:b7:2a:cc:3e:9b:8a:18:f5:96:
                    86:83:3f:f3:90:ad:8b:f7:02:7b:a4:d4:8f:45:33:
                    94:bd:1c:5a:47:f0:ba:10:a5:84:58:be:e9:ad:06:
                    7a:73:ec:59:9b:d7:ed:62:c4:69:cc:fb:09:a8:18:
                    c7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:5D:BF:5A:A9:2B:AE:18:3E:39:62:F7:8A:B7:6C:FD:0E:0A:8F:A1
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/jV2_Wqkrrhg-OWL3irds_Q4Kj6E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.78/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:1f:ba:5c:f4:37:63:86:52:69:a3:c1:f0:f8:60:d5:51:65:
         d8:67:e8:fb:3a:34:92:f8:18:64:3b:a2:5f:a6:78:bb:c2:23:
         86:5c:d1:73:0d:5b:22:d0:0a:81:e4:95:c2:ad:66:ab:34:cf:
         d8:99:3c:3f:5d:59:a2:d7:9b:13:80:a1:49:c2:82:1a:f7:ae:
         89:e5:a3:40:76:42:24:d9:57:54:d3:fb:81:c2:10:fc:ac:72:
         94:e3:7e:c5:8f:9e:b6:e5:0d:47:e8:9e:a4:35:e0:63:79:50:
         34:ad:af:4d:32:f8:86:06:6f:8e:25:54:db:77:1e:75:79:fa:
         62:1f:12:31:92:ae:14:f7:be:26:94:c9:f8:08:83:9b:19:f2:
         32:ec:58:24:e9:03:1f:96:60:9d:c3:10:a5:9e:bb:f7:fa:d8:
         5c:66:22:20:2f:72:93:db:83:20:df:4c:0c:2c:d3:a7:ba:f3:
         e1:62:ed:c5:4d:03:41:16:41:95:a2:47:07:28:8c:22:19:d3:
         4d:17:aa:00:55:cd:23:71:49:47:a1:27:22:2e:11:d6:61:2d:
         58:aa:74:3f:3c:e3:08:70:31:ca:d4:b5:14:98:32:c8:4d:94:
         57:66:6b:5e:db:22:69:16:12:0d:40:ad:c5:44:b1:0c:8a:46:
         6c:f7:2e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:17 2025 by rpki-client