Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21116/ts1hZOKX-NZcAy2t7gOMSVnAia4.roa
File:                     ts1hZOKX-NZcAy2t7gOMSVnAia4.roa (raw, json)
Hash identifier:          QY9LmD3oMfUZQ1E6ahXPy7e/orU47FbZeTmXh9KN8Vs=
Subject key identifier:   B6:CD:61:64:E2:97:F8:D6:5C:03:2D:AD:EE:03:8C:49:59:C0:89:AE
Certificate issuer:       /CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
Certificate serial:       17
Authority key identifier: 72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/ts1hZOKX-NZcAy2t7gOMSVnAia4.roa
Signing time:             Sat 02 Oct 2021 08:41:55 +0000
ROA not before:           Sat 02 Oct 2021 08:41:55 +0000
ROA not after:            Thu 15 Sep 2022 01:30:02 +0000
asID:                     24296
IP address blocks:        210.189.192.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
        Validity
            Not Before: Oct  2 08:41:55 2021 GMT
            Not After : Sep 15 01:30:02 2022 GMT
        Subject: CN=B6CD6164E297F8D65C032DADEE038C4959C089AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:13:19:d1:48:4d:d8:c9:f4:90:c6:c4:8d:62:
                    97:ef:89:bb:1c:f2:7f:16:ee:9d:3d:53:71:fa:44:
                    11:c0:f4:90:98:55:16:3d:90:04:b8:19:ef:6b:f3:
                    4f:61:c8:4b:48:b6:bc:09:56:30:d4:ec:9b:bb:1e:
                    e2:76:f0:53:78:99:ef:08:e9:34:4d:f7:0c:14:4d:
                    7d:37:78:19:e1:6d:ac:66:30:4d:a5:bd:fa:79:b7:
                    a3:c6:e3:71:13:a0:c8:ac:43:d7:5d:34:f3:33:f2:
                    01:93:3b:b9:4f:c2:6a:f7:04:6e:4e:d0:c7:cb:3a:
                    f2:b0:b5:f8:ae:80:78:83:27:7d:c4:22:f7:2f:fa:
                    60:f6:64:e0:2b:ff:d9:de:b4:d0:a4:22:d5:d5:c6:
                    a2:98:bf:f7:64:4b:e6:65:f9:6f:7a:58:20:67:e2:
                    f0:fa:35:39:1f:ba:83:d1:80:69:3e:63:ac:c6:9f:
                    49:df:1e:48:93:d8:51:94:30:6a:32:d9:a6:56:02:
                    7f:55:8d:5f:d1:9f:34:4e:21:90:e8:34:6d:bf:a1:
                    50:3a:f3:44:6d:62:65:1c:0a:8e:a7:2c:57:46:ce:
                    38:a3:28:79:4b:cc:9c:52:fb:c9:9d:89:1b:8f:d5:
                    33:25:b3:5f:08:fc:d9:3e:cc:2b:8c:04:d8:08:15:
                    0f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:CD:61:64:E2:97:F8:D6:5C:03:2D:AD:EE:03:8C:49:59:C0:89:AE
            X509v3 Authority Key Identifier:
                keyid:72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/ts1hZOKX-NZcAy2t7gOMSVnAia4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.189.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0c:87:48:5c:c0:2c:66:38:2f:a2:fd:1e:76:de:01:c7:4d:70:
         eb:47:b6:94:4b:06:47:d3:bd:f8:47:b4:b8:29:2a:68:5a:64:
         77:9e:2f:2b:23:b7:67:b0:fd:d1:29:cd:95:5d:72:eb:3e:b8:
         d5:47:58:bd:26:45:1a:05:f6:0c:85:f5:60:91:c2:49:f3:3a:
         ae:94:98:00:75:26:06:77:4f:70:0b:da:f4:46:eb:cf:b9:ce:
         88:41:d5:d5:a7:5b:37:b8:21:6a:b4:2c:40:84:27:4a:4a:ed:
         8f:42:7f:31:da:50:70:6a:b4:46:82:a0:9a:15:7e:4b:ce:24:
         77:91:50:f6:39:27:b9:cb:0e:06:bc:ad:a5:e3:c7:f0:20:da:
         21:44:77:f4:e0:bb:29:60:9a:02:13:10:fb:6a:f2:19:9f:f7:
         4f:65:03:63:bd:a8:c6:af:90:7b:b2:36:8a:4c:f7:ad:c7:f1:
         f6:bc:25:08:37:c4:82:d1:6a:b4:ed:b0:5f:e6:b7:d6:d7:c7:
         16:50:dd:a0:08:b5:2a:d5:55:c6:63:f9:7b:58:67:f0:d1:12:
         b0:6d:bd:df:6e:dd:42:36:5d:85:25:2c:0d:e8:08:b8:93:64:
         87:0e:e7:34:29:03:e1:24:d9:90:f1:01:4a:0b:e8:81:b6:ef:
         7e:dc:5a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:12 2025 by rpki-client