Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/lhTfC9qKtSwq3MZdFb9pFvNoLOM.roa
File:                     lhTfC9qKtSwq3MZdFb9pFvNoLOM.roa (raw, json)
Hash identifier:          kXbGqG3SbdtKoaFFTgq8SaT45Nd62hl2KK8tSjnRJ8s=
Subject key identifier:   96:14:DF:0B:DA:8A:B5:2C:2A:DC:C6:5D:15:BF:69:16:F3:68:2C:E3
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       2C
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/lhTfC9qKtSwq3MZdFb9pFvNoLOM.roa
Signing time:             Tue 01 Mar 2022 08:33:58 +0000
ROA not before:           Tue 01 Mar 2022 08:33:58 +0000
ROA not after:            Wed 15 Feb 2023 01:30:03 +0000
asID:                     9351
IP address blocks:        218.216.160.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Mar  1 08:33:58 2022 GMT
            Not After : Feb 15 01:30:03 2023 GMT
        Subject: CN=9614DF0BDA8AB52C2ADCC65D15BF6916F3682CE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e2:94:6c:54:b3:f2:fa:05:6b:9c:85:30:7a:
                    61:9b:89:5b:d1:a7:c2:2e:bb:14:1e:dc:7b:c4:ea:
                    0a:07:ac:23:1c:91:3c:36:ee:3b:4f:02:0d:91:77:
                    7a:30:68:6f:69:d0:20:f9:86:38:c3:d3:ad:c9:30:
                    b5:2b:6f:f7:5e:97:de:d0:b0:e4:6a:9f:6f:b5:16:
                    c0:f7:29:36:9a:18:30:70:3a:f8:3f:bc:42:14:e9:
                    9a:af:be:d4:73:15:82:e7:3d:92:98:1a:db:43:8b:
                    26:86:8e:5f:1d:7e:18:0a:5f:d9:a0:8a:8e:22:78:
                    8c:1a:ed:e8:b9:27:f4:72:0a:fa:78:1d:97:54:05:
                    10:23:61:ce:4b:ec:96:da:86:4b:da:7a:6b:c5:71:
                    fd:d8:05:dc:f9:e4:63:9a:b9:d3:55:7c:a5:bd:09:
                    b5:6d:0a:9f:eb:4b:07:58:7e:fd:63:30:8c:29:ad:
                    85:4e:38:6b:da:71:b6:3f:ae:88:e2:f8:9c:fc:59:
                    3e:fd:a4:40:bf:0d:9f:de:78:d6:51:25:98:25:21:
                    dd:47:a5:22:e2:33:9f:62:e9:f6:c1:57:21:03:37:
                    21:22:32:53:9c:4c:92:c1:54:4d:00:17:7d:72:85:
                    6d:8b:9c:55:a4:9d:49:45:fd:2f:34:99:cd:56:5d:
                    5c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:14:DF:0B:DA:8A:B5:2C:2A:DC:C6:5D:15:BF:69:16:F3:68:2C:E3
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/lhTfC9qKtSwq3MZdFb9pFvNoLOM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.216.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         12:44:89:1c:62:fd:3c:25:4c:92:d5:13:54:fd:24:08:46:54:
         36:21:3c:90:43:30:cf:f2:98:74:f8:ab:9d:c4:90:91:47:5c:
         1d:1f:bc:7a:7a:4c:15:62:3d:20:5e:ad:5f:1e:02:55:88:2f:
         0e:66:eb:df:48:33:1b:a2:a2:cd:7c:3f:ff:85:b9:73:72:16:
         0b:3f:21:be:6c:60:04:cf:e5:9c:e7:31:d0:7e:e6:b3:f8:e6:
         79:bd:cf:ff:aa:bf:b7:ce:c5:15:af:39:70:fe:e9:e6:c4:5a:
         fe:3c:8b:3d:1b:ac:f8:3c:f2:a5:bf:5e:ee:38:de:7a:3e:53:
         ce:e0:54:5c:33:5b:56:9e:51:14:e0:ed:25:4c:1b:d0:66:be:
         39:97:2e:6e:13:28:c6:0a:c6:0c:e1:43:b6:a3:64:e3:c3:85:
         bc:e6:9a:18:b2:09:b7:bb:ba:92:4d:95:70:95:78:cb:d8:0c:
         23:bb:ab:57:c6:db:b7:30:a0:be:73:47:59:16:ef:aa:1e:08:
         d0:b6:9e:43:79:a3:89:aa:f7:77:78:b1:35:38:a3:49:67:b7:
         d4:85:e0:8d:cf:cf:0e:5f:05:ff:7d:94:fc:a6:c3:9e:05:36:
         46:4a:0c:e5:90:c1:17:01:1f:87:af:61:09:bc:0f:4b:9e:6d:
         5b:9a:e2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:05 2025 by rpki-client