Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/y9xPNJIcMJrM9b65po75WxFYT-8.roa
File:                     y9xPNJIcMJrM9b65po75WxFYT-8.roa (raw, json)
Hash identifier:          wbYSdQAKiRf2byHPi2DNp/cFCQCsLJRSJ28yOL2bUcI=
Subject key identifier:   CB:DC:4F:34:92:1C:30:9A:CC:F5:BE:B9:A6:8E:F9:5B:11:58:4F:EF
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       016D
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/y9xPNJIcMJrM9b65po75WxFYT-8.roa
Signing time:             Wed 15 Feb 2023 02:34:22 +0000
ROA not before:           Wed 15 Feb 2023 02:34:22 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.44/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365 (0x16d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 15 02:34:22 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=CBDC4F34921C309ACCF5BEB9A68EF95B11584FEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5a:fe:73:ac:a2:d6:13:d4:ee:71:04:b8:6c:
                    1c:0a:b2:90:36:6c:c3:fa:61:d7:42:c0:28:bd:dc:
                    22:bd:db:cf:62:5d:f7:2c:35:8d:8b:ed:15:a6:d1:
                    1f:4f:d7:dc:36:ac:34:8b:7a:bf:4f:fd:51:16:fb:
                    4c:62:28:d4:40:4a:13:a0:4a:57:11:86:81:62:d7:
                    fc:01:40:29:89:9a:1a:43:5a:88:6a:d2:a9:67:e1:
                    66:8b:b9:e8:de:41:e2:7e:11:09:3f:71:69:87:0c:
                    3b:9e:ea:12:67:4a:09:43:ed:45:98:27:8c:49:ff:
                    f6:f5:5e:ec:21:20:c4:5f:e7:bd:26:39:d4:1e:7b:
                    bc:30:04:33:77:0f:83:d6:6b:f9:c3:79:8e:e1:dd:
                    e3:b8:c3:1c:58:fa:3a:e0:ec:5f:56:6c:d8:fd:9d:
                    9f:e8:0f:0d:62:5b:fb:6d:7a:dc:3b:a3:85:8c:52:
                    41:55:ba:ea:6e:c0:a5:fb:79:14:73:8d:de:de:5d:
                    59:75:ef:84:db:b3:33:a3:9b:cb:cb:4a:8a:c8:5b:
                    ca:54:de:01:72:b3:51:03:30:16:53:96:ac:36:80:
                    25:fb:85:37:fb:7d:c4:74:45:90:3e:4a:0e:a0:7b:
                    e0:2e:e4:63:6d:58:f1:b7:a8:66:91:ec:39:9d:d2:
                    54:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DC:4F:34:92:1C:30:9A:CC:F5:BE:B9:A6:8E:F9:5B:11:58:4F:EF
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/y9xPNJIcMJrM9b65po75WxFYT-8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.44/32

    Signature Algorithm: sha256WithRSAEncryption
         36:d8:74:91:10:92:ad:5e:5d:c5:0f:69:2e:40:19:0d:e8:69:
         e6:41:54:e9:42:14:f3:0e:1b:3c:2a:66:55:4e:cd:12:dd:65:
         32:f7:57:6a:85:ca:59:6a:ae:5e:e2:ed:13:84:48:ec:7f:ff:
         b8:b1:c1:50:3c:64:cb:09:65:2e:6b:a7:bc:82:58:7b:1b:b2:
         0d:c3:6c:60:33:09:8e:85:09:27:93:8c:c6:6f:c3:20:9c:5e:
         9b:32:4c:2d:05:ab:32:f8:31:39:5e:f0:d5:47:0d:9b:3a:05:
         4a:70:79:58:34:57:01:62:3f:c2:7a:9e:f9:5d:61:9f:53:3f:
         71:cd:6b:d5:5e:07:bb:e1:19:d4:28:00:5a:fa:29:92:c7:87:
         1e:51:51:9b:31:74:92:b6:a2:f3:83:be:34:ed:79:82:08:c8:
         fe:85:44:85:59:10:5c:db:73:75:c8:e8:da:03:94:e5:bd:15:
         69:c1:6a:3f:f9:e4:fe:6c:d4:74:71:02:3f:d6:ff:65:fb:ab:
         1a:dd:c0:9c:2e:9f:ad:0b:1e:46:3f:f5:8e:3d:5c:db:72:31:
         d1:3d:81:a1:0b:fa:30:75:77:31:5a:38:b4:69:66:a8:6d:a1:
         18:7b:ad:6e:17:a1:16:a4:02:9a:fe:4f:94:41:4e:4f:bc:d5:
         b1:a8:ff:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:59 2025 by rpki-client