Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/lfEAgx0h_6FiS783wyJ7QXcoAoA.roa
File:                     lfEAgx0h_6FiS783wyJ7QXcoAoA.roa (raw, json)
Hash identifier:          QW54vAFV/w6ALRX10yvLpH5sOo+u5v/1cI0w4M25zzM=
Subject key identifier:   95:F1:00:83:1D:21:FF:A1:62:4B:BF:37:C3:22:7B:41:77:28:02:80
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01ED
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/lfEAgx0h_6FiS783wyJ7QXcoAoA.roa
Signing time:             Mon 20 Feb 2023 07:57:26 +0000
ROA not before:           Mon 20 Feb 2023 07:57:26 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.148/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 493 (0x1ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:57:26 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=95F100831D21FFA1624BBF37C3227B4177280280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:30:3c:eb:ab:cb:60:88:f5:73:3f:50:e3:61:
                    47:3a:6a:f0:0c:83:b4:28:72:ff:04:84:ed:86:11:
                    91:06:c7:41:95:ae:fc:d7:9b:95:d7:17:00:57:d4:
                    f0:ad:ea:63:ff:4b:06:75:75:cf:6b:5c:12:70:50:
                    3f:f7:3a:b7:5f:1e:b3:d4:6a:ae:48:d4:63:8a:2d:
                    b7:ae:b0:4d:6b:62:0c:8c:7e:90:24:7a:10:fa:9f:
                    2a:9a:d2:61:60:4d:03:1c:68:1d:27:4b:b7:de:97:
                    b6:8d:e9:29:ca:19:7a:e1:5f:10:69:ab:73:17:09:
                    d7:6f:f9:1b:b6:77:c2:58:a5:77:7d:61:b8:d4:5a:
                    24:9c:ff:c7:eb:fe:17:ba:e6:1e:f6:22:9b:71:40:
                    f8:86:9d:a2:94:69:ad:73:cb:66:5e:d9:b2:65:66:
                    d9:97:bc:e7:aa:4b:95:ca:fb:12:3a:65:b4:e6:f1:
                    c9:f8:32:69:c9:dd:6b:6c:04:82:8d:b2:6e:72:d3:
                    b2:72:d1:e7:2a:24:bf:34:bc:59:a7:c4:5d:f7:35:
                    03:27:b2:8f:eb:88:18:cf:21:1b:e4:0d:9c:d7:a1:
                    80:4f:19:17:83:45:ac:e7:b1:2d:38:60:0d:dd:0a:
                    ef:92:f4:6e:27:93:26:27:c5:dc:77:ee:43:08:11:
                    e2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F1:00:83:1D:21:FF:A1:62:4B:BF:37:C3:22:7B:41:77:28:02:80
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/lfEAgx0h_6FiS783wyJ7QXcoAoA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.148/32

    Signature Algorithm: sha256WithRSAEncryption
         65:3a:22:dc:2c:f9:d3:4d:fd:c8:f1:f5:42:4d:89:04:ac:0c:
         34:35:59:19:56:fe:13:2f:69:5c:3f:56:9c:f2:06:f7:d3:97:
         7e:36:80:2b:46:cb:75:10:46:bc:2d:9a:6a:db:98:4d:64:fc:
         6a:1c:fc:3d:ae:6d:7e:7e:f0:42:b2:e0:36:8c:0a:c9:3f:66:
         07:5f:65:12:75:d4:83:e8:f5:46:79:5c:a2:6a:ed:c7:aa:8d:
         7a:09:8b:62:6d:e6:c3:e6:67:f3:78:20:5d:fc:2d:61:1a:a3:
         31:5a:87:5e:48:96:73:12:89:77:c8:11:10:88:3f:f5:a8:a7:
         d0:5d:1e:02:52:ef:81:27:b9:4d:a7:25:2b:dc:be:49:48:fa:
         91:1a:4f:85:3d:3a:12:19:41:eb:28:5a:d5:8f:fa:53:d9:23:
         09:ed:94:88:11:1d:a9:c3:bc:35:e3:42:ca:4d:08:f7:49:f0:
         56:9d:79:8c:7b:44:9a:db:a7:64:d2:41:10:6b:a6:59:0f:75:
         af:94:b9:cc:c4:da:6a:28:cf:82:bd:00:b6:3b:29:a9:fa:8c:
         98:23:cc:08:3f:47:81:22:46:9b:74:5c:a1:0c:34:b6:69:f6:
         be:8c:56:db:fb:8f:fb:96:5c:9f:4f:6a:d7:f2:51:c5:69:42:
         b2:2a:8e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:37:27 2025 by rpki-client