Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21116/0GT0eKJXLhLc1mxhtlMgDQ1nQtk.roa
File:                     0GT0eKJXLhLc1mxhtlMgDQ1nQtk.roa (raw, json)
Hash identifier:          igu+Wx1EhGUpnW/t5dZtbvl8O092L2MJf7Zk2F7gMOY=
Subject key identifier:   D0:64:F4:78:A2:57:2E:12:DC:D6:6C:61:B6:53:20:0D:0D:67:42:D9
Certificate issuer:       /CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
Certificate serial:       31
Authority key identifier: 72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/0GT0eKJXLhLc1mxhtlMgDQ1nQtk.roa
Signing time:             Thu 01 Sep 2022 01:28:54 +0000
ROA not before:           Thu 01 Sep 2022 01:28:54 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     23816
IP address blocks:        203.95.16.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
        Validity
            Not Before: Sep  1 01:28:54 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=D064F478A2572E12DCD66C61B653200D0D6742D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:84:67:54:55:05:a7:8a:7a:ad:fb:c2:5a:d1:
                    77:0e:83:a5:e9:22:12:e2:2b:6c:31:a8:6e:77:3b:
                    8d:12:51:a3:76:12:d3:11:4c:f6:68:56:89:c0:37:
                    e4:25:52:86:ca:66:2f:a3:d5:9d:38:49:f3:cf:99:
                    3c:fa:a2:15:78:df:25:d9:e5:94:de:fb:d4:74:82:
                    0c:07:0d:c1:69:98:89:08:54:75:18:a3:ba:96:15:
                    5a:12:f6:14:59:ad:24:c2:2f:0b:85:71:ae:19:cd:
                    6d:a7:e0:6f:72:4e:d9:47:ad:3a:77:c0:d5:b8:35:
                    91:e6:e7:9e:40:1e:4c:9a:60:d2:cb:76:f2:53:a0:
                    9b:d6:61:d0:f6:ba:dc:79:ad:bd:90:eb:b7:a0:2f:
                    42:05:ca:e3:88:43:02:3c:b1:ed:88:a4:a6:df:c8:
                    3b:a2:6b:72:90:4e:1f:03:da:92:dc:86:14:40:d1:
                    47:ca:5f:1b:6b:59:16:56:55:5e:3e:b4:88:b9:8b:
                    24:e2:92:71:c1:93:e3:c2:c0:d7:f7:45:ea:73:4b:
                    0c:7b:62:15:38:f2:68:48:5f:33:4a:6e:52:07:5b:
                    2c:87:1a:3e:dd:05:b9:c3:9c:d9:e6:10:75:a0:eb:
                    f4:48:69:50:f1:f6:6c:6a:cc:3e:ca:66:e0:64:9b:
                    e8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:64:F4:78:A2:57:2E:12:DC:D6:6C:61:B6:53:20:0D:0D:67:42:D9
            X509v3 Authority Key Identifier:
                keyid:72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/0GT0eKJXLhLc1mxhtlMgDQ1nQtk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.95.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:2e:cc:a5:64:62:20:d2:4e:3f:b9:c6:65:9a:ef:db:f5:62:
         9b:20:89:ce:96:a9:f4:97:11:d7:a5:47:2f:05:de:3f:b5:da:
         f8:85:f5:79:39:27:6a:b8:3a:a1:eb:89:46:fd:1f:c4:e9:74:
         6f:bc:fc:18:37:b7:5e:2d:b8:3a:4f:a4:45:21:1a:21:3d:6f:
         09:a2:3c:60:ea:78:f9:f6:ae:72:84:2e:ef:25:12:ad:8c:52:
         46:52:63:56:df:ab:2e:6e:b0:70:4e:3a:c7:62:1d:c6:23:da:
         f1:a8:61:9d:f3:19:82:79:90:90:ef:07:2e:d1:ab:f8:b4:84:
         a3:41:59:f9:d7:d0:5e:33:38:45:ae:9b:e3:f3:d3:49:65:1d:
         05:27:5b:df:65:aa:a0:a6:e4:cc:b2:02:74:02:36:ec:7a:d6:
         96:83:7b:1c:55:d7:ed:e0:5a:dd:71:c0:10:3f:af:73:06:bc:
         74:5b:28:26:3f:ae:e2:bc:4a:56:4f:cd:90:5f:01:07:8c:4f:
         d3:56:f9:ad:3c:27:91:b2:9b:ba:0a:9b:68:3b:e6:9d:bd:59:
         a5:a0:4d:a7:8c:1d:d4:ff:c1:d2:c0:fd:ef:21:78:e9:ea:91:
         d6:b5:3e:09:9e:e2:6a:e8:f9:d7:96:79:66:48:80:64:a4:19:
         20:20:fc:22
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:15 2025 by rpki-client