Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/nXgakYZV2GBL3HNNJGBg_zQ0VjM.roa
File:                     nXgakYZV2GBL3HNNJGBg_zQ0VjM.roa (raw, json)
Hash identifier:          VPzplRz+lPZ8KXUtFzHc5YP+IlJh5+q/HC4z27YITL8=
Subject key identifier:   9D:78:1A:91:86:55:D8:60:4B:DC:73:4D:24:60:60:FF:34:34:56:33
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0174
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/nXgakYZV2GBL3HNNJGBg_zQ0VjM.roa
Signing time:             Wed 15 Feb 2023 02:34:23 +0000
ROA not before:           Wed 15 Feb 2023 02:34:23 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.49/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 372 (0x174)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 15 02:34:23 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=9D781A918655D8604BDC734D246060FF34345633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:aa:4f:db:a6:db:64:ff:c1:fd:1a:42:ba:0c:
                    66:7a:64:08:08:91:cb:7a:ed:7f:01:2b:fc:d2:a0:
                    01:63:b6:d7:c6:a8:d5:c5:1d:6b:14:29:aa:e7:58:
                    48:11:21:de:4e:b1:61:6d:a0:f9:d0:ce:fc:5f:c1:
                    2b:d2:f7:eb:7c:10:45:74:6b:58:e2:db:fa:54:01:
                    45:9e:8c:64:ec:69:e2:a3:ca:f8:8e:e4:02:86:40:
                    85:ca:5e:63:3d:aa:3e:90:6f:07:f7:c8:ef:b2:5d:
                    6e:95:82:e1:99:6d:70:2f:a2:82:2c:74:9d:ac:59:
                    e3:a7:a3:63:49:ef:f2:24:0c:65:ee:e9:f3:78:53:
                    d6:06:a8:c7:bf:0c:a1:33:88:01:27:14:ba:08:84:
                    b2:b4:10:da:77:49:51:c1:d0:9a:82:5b:0d:cc:8a:
                    3e:d6:ec:c8:2a:44:d3:1d:30:f1:ee:af:7d:30:e0:
                    60:e7:d4:d0:b2:57:58:71:71:8f:d6:0d:df:85:f0:
                    f8:29:6c:78:19:0a:7a:6e:52:6a:84:ba:0c:0f:b8:
                    92:e0:ac:f9:24:6e:98:ac:26:87:8c:6e:93:b7:61:
                    39:7c:68:43:bd:1a:e8:69:7e:e2:40:cf:1c:5f:23:
                    b9:23:c4:a8:d1:a4:d9:c7:e8:58:9b:35:3b:01:a4:
                    8e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:78:1A:91:86:55:D8:60:4B:DC:73:4D:24:60:60:FF:34:34:56:33
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/nXgakYZV2GBL3HNNJGBg_zQ0VjM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.49/32

    Signature Algorithm: sha256WithRSAEncryption
         51:b8:56:c7:93:c9:28:8b:67:57:5b:79:11:d6:1d:35:59:ea:
         89:e4:46:a6:0a:10:14:97:f5:e9:ef:0c:e2:3b:46:4e:68:e4:
         8e:e1:1b:95:2a:c1:a2:1f:ca:df:78:8b:42:c3:24:da:2f:63:
         93:8f:c8:b6:c8:6b:6e:ed:67:77:dd:2a:6f:8e:bf:8e:6a:cf:
         4d:fe:5c:75:a2:aa:d5:99:9c:b1:c2:ef:de:22:ef:e5:37:a8:
         6d:21:31:33:a1:d6:be:bb:a6:72:54:fa:a7:45:ab:38:db:c0:
         81:ce:3d:f2:34:e5:54:6e:91:90:09:3c:45:f1:dc:05:b3:71:
         37:f9:03:56:ce:a1:be:1d:83:07:11:77:78:ec:b4:01:62:13:
         ab:18:69:84:32:63:79:25:92:da:fd:bb:a6:94:ab:be:64:a0:
         8e:26:35:89:94:15:26:06:bd:93:d3:c9:09:cb:20:4f:2c:08:
         c5:7d:94:e8:32:01:9d:fb:90:df:1d:de:16:f2:82:e6:8e:16:
         bd:7d:a6:ab:ba:11:05:8f:ad:e7:89:61:8f:8f:d3:45:68:7a:
         b1:98:cf:74:bd:ef:05:5f:2f:e3:77:36:e5:3f:7a:d5:bb:60:
         09:ac:fd:e9:a7:0d:c9:6b:d6:f4:64:dc:54:f0:c8:89:0d:81:
         fb:e4:5d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:45:43 2025 by rpki-client