Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21116/DokmqqLHHXFDq92TfYoXp-ijr9Y.roa
File:                     DokmqqLHHXFDq92TfYoXp-ijr9Y.roa (raw, json)
Hash identifier:          fIVK9lR21YjHyAH5T5Umi590WQRL0TywGoHXlvW3Mns=
Subject key identifier:   0E:89:26:AA:A2:C7:1D:71:43:AB:DD:93:7D:8A:17:A7:E8:A3:AF:D6
Certificate issuer:       /CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
Certificate serial:       18
Authority key identifier: 72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/DokmqqLHHXFDq92TfYoXp-ijr9Y.roa
Signing time:             Sat 02 Oct 2021 08:41:56 +0000
ROA not before:           Sat 02 Oct 2021 08:41:56 +0000
ROA not after:            Thu 15 Sep 2022 01:30:02 +0000
asID:                     24296
IP address blocks:        210.171.32.0/19 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
        Validity
            Not Before: Oct  2 08:41:56 2021 GMT
            Not After : Sep 15 01:30:02 2022 GMT
        Subject: CN=0E8926AAA2C71D7143ABDD937D8A17A7E8A3AFD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:62:8c:8c:92:1a:22:7f:29:1b:d3:f4:81:78:
                    d5:27:31:d9:a4:b9:5d:44:31:29:a5:29:30:02:82:
                    2e:1c:92:e8:7f:cc:02:77:82:78:72:04:0e:9e:2a:
                    47:2e:fd:b7:b2:21:73:db:29:8f:cf:96:df:ad:99:
                    67:7c:71:70:1f:2f:b2:d3:52:a6:b4:d1:14:c0:dd:
                    69:20:f3:e3:62:12:1a:6a:2b:e1:9c:03:c0:a5:f5:
                    23:63:df:bb:80:54:48:a2:7b:8c:55:26:1a:16:24:
                    82:4a:60:bf:87:61:76:60:e7:6b:62:4a:7f:d7:c2:
                    55:b4:b4:8c:9a:6d:8b:43:1b:e5:7d:62:ac:70:e3:
                    a5:ec:f3:ef:92:ae:a3:e2:fd:62:6b:a3:1a:ed:ca:
                    78:11:83:41:97:de:cb:6e:4f:82:d5:8f:89:16:95:
                    9c:7c:f6:7e:ae:e8:12:43:ff:4e:6e:a4:76:c6:5b:
                    9b:80:c4:c0:cc:1d:33:aa:f6:a1:52:50:59:6d:2e:
                    d3:ae:ee:dd:f0:e6:8d:93:ca:27:e9:88:f8:77:ef:
                    c8:d8:dd:4f:b8:e0:2a:18:d1:77:04:55:1d:67:04:
                    71:fe:6b:16:bf:64:6f:7d:4b:98:52:13:42:5b:c8:
                    22:9f:03:7b:5f:3d:e0:37:89:cc:d6:86:f4:cb:48:
                    cc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:89:26:AA:A2:C7:1D:71:43:AB:DD:93:7D:8A:17:A7:E8:A3:AF:D6
            X509v3 Authority Key Identifier:
                keyid:72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/DokmqqLHHXFDq92TfYoXp-ijr9Y.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.171.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ad:08:fd:aa:6c:b5:f2:89:c6:6c:7a:bc:da:74:f4:5f:57:35:
         3c:f7:18:1c:ef:78:d0:fe:02:cc:2a:02:51:eb:b0:d8:40:28:
         79:8c:0a:fe:cf:5b:61:f9:67:bb:ba:18:1e:46:47:cc:b0:8c:
         d0:4a:f7:23:13:74:6e:8c:31:9d:f9:be:54:67:46:fe:50:0f:
         89:55:5f:d5:24:90:59:a0:df:4f:6b:fe:a8:25:64:46:3e:a6:
         79:50:bc:b4:94:ca:6b:7c:cb:e9:d1:4a:d0:39:27:eb:92:f5:
         47:fa:05:a3:93:2c:c0:dd:14:a0:f7:af:2c:be:e0:7d:f9:f2:
         7f:0a:2f:b1:ba:61:81:12:42:bf:96:06:f5:c6:10:1a:b8:eb:
         7d:6f:e5:b6:99:23:f6:64:ee:e1:69:ff:a5:62:db:36:a2:a3:
         9c:0a:6c:39:c2:cb:29:8c:91:0e:31:17:7e:c5:e3:8b:fa:17:
         5c:15:74:fe:ef:c0:35:cd:c9:65:68:17:2e:7b:6a:8d:e2:44:
         d9:cb:69:8d:d1:81:e0:15:9b:f0:b5:c8:c9:5c:86:2d:1f:99:
         6e:07:60:4e:40:ee:41:28:6f:64:a3:75:b4:64:b3:23:63:cc:
         5e:82:aa:a1:26:95:71:6b:0b:9f:4d:02:36:b3:e2:54:d2:69:
         86:f7:7f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:50 2025 by rpki-client