Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/MxEBSf1iLpqC7WOW3GQ1AKFBCcE.roa
File:                     MxEBSf1iLpqC7WOW3GQ1AKFBCcE.roa (raw, json)
Hash identifier:          2S0YQOfYYRuqY5NNLuwaN7peVya34aN9BJo/R6VUu0Y=
Subject key identifier:   33:11:01:49:FD:62:2E:9A:82:ED:63:96:DC:64:35:00:A1:41:09:C1
Certificate issuer:       /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial:       61
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/MxEBSf1iLpqC7WOW3GQ1AKFBCcE.roa
Signing time:             Thu 01 Dec 2022 01:28:08 +0000
ROA not before:           Thu 01 Dec 2022 01:28:08 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     7521
IP address blocks:        210.173.186.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
        Validity
            Not Before: Dec  1 01:28:08 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=33110149FD622E9A82ED6396DC643500A14109C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:15:82:22:af:da:68:a9:f4:5f:09:82:29:fd:
                    82:c6:38:fd:70:33:d5:8a:c3:51:9c:1a:81:09:23:
                    c1:03:97:b2:67:76:83:42:42:0d:8a:68:4f:be:40:
                    a7:b2:3c:bc:f3:30:20:bf:2d:2f:b8:f1:f9:6a:6b:
                    cf:af:be:fe:aa:f3:b0:bd:c1:37:1f:75:05:a0:83:
                    e0:2e:3a:5c:c9:c0:74:9b:47:d5:f0:80:fb:d3:16:
                    df:46:bc:dc:c1:47:33:5f:e6:4e:36:22:d0:38:fc:
                    69:0a:7a:ea:61:29:4c:11:a8:11:00:ec:69:f2:97:
                    cf:dc:37:c4:4e:fa:3a:3b:c8:c6:c9:80:5e:ec:8c:
                    5b:05:e8:be:28:d9:f9:a7:89:38:14:1b:22:5b:b8:
                    9d:b6:c7:29:c6:c5:db:92:07:91:0f:61:ed:6f:db:
                    2a:de:b0:67:94:b9:1f:db:0c:13:a2:0f:e7:05:97:
                    19:07:95:02:35:ec:23:ac:c9:a7:65:2c:59:37:95:
                    4b:72:42:70:59:49:5d:f0:3b:17:43:a9:dc:fd:86:
                    eb:c1:26:93:bc:ab:77:fd:c9:67:29:e4:4c:a8:f2:
                    0b:f1:37:97:4c:93:a0:77:8c:d4:9c:60:c7:ea:c4:
                    bf:b7:6b:ab:67:c8:06:79:f9:b9:5b:9c:9e:a4:e1:
                    7d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:11:01:49:FD:62:2E:9A:82:ED:63:96:DC:64:35:00:A1:41:09:C1
            X509v3 Authority Key Identifier:
                keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/MxEBSf1iLpqC7WOW3GQ1AKFBCcE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.173.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:38:93:9d:28:ed:11:e7:23:7f:b6:97:00:5c:45:97:c4:4c:
         e7:70:b9:12:35:63:2e:3a:1e:51:89:44:dd:91:89:82:95:b6:
         1d:f2:52:b4:08:a3:b4:9b:7f:44:a2:5e:bb:7c:85:cf:0e:25:
         9c:80:6c:3a:c7:b0:d5:fa:41:1c:91:ea:24:1b:0c:a6:23:ac:
         4f:8a:ee:45:96:15:81:9e:56:4a:7c:f6:9d:a8:0e:1d:9e:f7:
         45:43:f2:35:2a:63:68:2b:17:4e:4f:95:34:39:d0:c6:0c:0a:
         04:b3:d7:51:6a:3d:bb:ec:1e:34:b1:8c:5f:32:29:9c:f9:2e:
         55:a4:2f:f3:33:03:6b:59:3c:56:29:4c:a6:eb:c4:fa:2a:d9:
         21:e4:28:3a:af:bb:a0:64:2e:9f:36:cc:8e:f8:0a:36:ca:2d:
         2f:30:4f:49:c9:50:87:af:d4:5b:62:7c:bc:8f:d0:ee:dc:c9:
         eb:85:20:1f:3e:eb:64:ba:e4:97:ee:d8:95:51:81:2a:8b:04:
         9f:d3:97:1b:66:54:f9:0e:9b:0c:d2:98:7d:49:7c:da:b7:80:
         c1:49:5d:8a:ff:e9:76:42:27:8f:6c:e4:09:90:b5:a8:49:c5:
         d6:42:9c:e7:94:15:4d:90:9f:13:c4:5a:4c:75:11:21:dd:43:
         67:06:07:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:01:55 2025 by rpki-client