Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21042/-S1F-ZU5VyumGqAcoQDZdeteLWM.roa
File:                     -S1F-ZU5VyumGqAcoQDZdeteLWM.roa (raw, json)
Hash identifier:          9fqYXbo5VQQHrV8vvVjPswYvgwIRPTz7sAejGcH61mU=
Subject key identifier:   F9:2D:45:F9:95:39:57:2B:A6:1A:A0:1C:A1:00:D9:75:EB:5E:2D:63
Certificate issuer:       /CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
Certificate serial:       28
Authority key identifier: 4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/-S1F-ZU5VyumGqAcoQDZdeteLWM.roa
Signing time:             Tue 26 Sep 2023 06:27:19 +0000
ROA not before:           Tue 26 Sep 2023 06:27:18 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     23637
IP address blocks:        180.214.0.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
        Validity
            Not Before: Sep 26 06:27:18 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=F92D45F99539572BA61AA01CA100D975EB5E2D63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:51:a7:42:26:1c:fe:fb:8b:18:19:4a:64:45:
                    e0:1b:7d:91:e0:02:bc:38:48:9e:3e:7e:2b:15:6c:
                    c5:a8:4a:d7:f4:ab:8f:f4:3b:3f:94:3a:82:48:75:
                    89:6b:0b:a8:18:13:f4:65:c7:9e:e1:7f:8a:01:ad:
                    56:fb:9b:61:fd:6c:30:70:cb:b0:e6:e0:35:43:2d:
                    39:38:90:90:b4:54:e5:b7:52:c6:ac:7d:73:94:a6:
                    ff:d6:31:db:21:95:89:57:d5:5e:49:c0:e0:5c:a1:
                    1d:45:71:5a:30:3a:c2:be:be:9e:d6:f2:8a:b6:e2:
                    5d:d6:95:4f:1b:a1:d7:d6:3c:22:ce:1e:6e:ea:40:
                    9b:d4:57:00:ec:34:de:70:88:4e:6b:dc:19:aa:24:
                    38:90:c9:8f:a4:4c:c8:b3:9d:7e:64:14:15:79:6e:
                    b8:5d:2e:a0:4c:ab:93:26:a8:23:b0:42:6b:2b:c9:
                    21:3c:b5:2e:e7:0f:00:65:db:29:08:5b:85:14:9b:
                    55:d0:7f:12:7c:58:42:7d:82:f7:e3:8b:3b:dc:7a:
                    1b:b9:08:f0:dc:b8:44:a1:0a:13:f6:39:63:7d:80:
                    47:3c:8d:38:21:32:b3:76:4b:24:87:00:87:5f:68:
                    33:f5:7a:1e:e7:f7:f3:e3:e2:f9:a7:6d:4d:e2:b6:
                    06:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2D:45:F9:95:39:57:2B:A6:1A:A0:1C:A1:00:D9:75:EB:5E:2D:63
            X509v3 Authority Key Identifier:
                keyid:4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/-S1F-ZU5VyumGqAcoQDZdeteLWM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.214.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         53:0f:13:14:45:c8:fc:ee:88:cb:7c:fc:b7:09:4e:7e:4d:a5:
         bb:a2:64:7b:70:5a:49:e6:3a:88:0f:76:9d:09:11:e6:88:a1:
         fa:65:aa:93:a3:0d:d0:39:0b:68:b2:7e:c1:da:07:85:ae:79:
         43:eb:33:2c:80:3e:85:16:48:ae:25:57:99:4e:04:53:e2:99:
         ff:fb:ed:01:c7:91:eb:b2:b3:f1:05:26:7f:f1:81:33:95:af:
         df:c9:98:6e:62:de:36:d7:76:f3:4e:d7:20:a5:6e:0f:c8:5c:
         97:91:a4:39:e5:58:80:68:a3:dd:86:e2:bd:fd:f3:34:aa:d5:
         73:7e:b3:a3:bc:5d:40:82:b7:53:ca:37:b4:67:52:b1:22:68:
         44:17:8f:18:48:1e:fa:7e:0b:4c:53:c9:62:b0:a9:fa:92:3c:
         3c:72:42:d2:f4:c4:7b:c7:ea:ea:3e:41:3b:da:2d:f9:c6:d3:
         f7:56:cd:2c:e6:93:fe:43:dc:b4:4f:c0:0a:02:d7:78:f1:46:
         74:df:fa:bd:7b:cf:44:19:8e:7b:6d:6b:c2:1b:19:5c:9b:dc:
         64:73:c4:c3:6f:9d:3c:05:12:18:03:16:5e:64:21:1b:99:5d:
         3f:6d:e6:24:b8:a5:55:3f:81:4f:ec:49:ef:33:8b:70:d1:ff:
         0e:d5:c9:1e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:55:11 2025 by rpki-client