Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/nugV61oh0yYmSfJY3RtYbAS_sts.roa
File:                     nugV61oh0yYmSfJY3RtYbAS_sts.roa (raw, json)
Hash identifier:          e/kU7KrpJzpsixnZH1XGYvV2Il2qa+by1i40cPEN+Pk=
Subject key identifier:   9E:E8:15:EB:5A:21:D3:26:26:49:F2:58:DD:1B:58:6C:04:BF:B2:DB
Certificate issuer:       /CN=1850341C0E586CF47547FD06E54EDBE6902A0E24
Certificate serial:       03
Authority key identifier: 18:50:34:1C:0E:58:6C:F4:75:47:FD:06:E5:4E:DB:E6:90:2A:0E:24
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/nugV61oh0yYmSfJY3RtYbAS_sts.roa
Signing time:             Tue 16 Mar 2021 04:45:39 +0000
ROA not before:           Tue 16 Mar 2021 04:45:39 +0000
ROA not after:            Tue 15 Mar 2022 08:34:35 +0000
asID:                     9351
IP address blocks:        193.117.64.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1850341C0E586CF47547FD06E54EDBE6902A0E24
        Validity
            Not Before: Mar 16 04:45:39 2021 GMT
            Not After : Mar 15 08:34:35 2022 GMT
        Subject: CN=9EE815EB5A21D3262649F258DD1B586C04BFB2DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:65:f3:ad:9f:13:60:fb:27:5f:70:af:0b:16:
                    b4:94:51:5e:a8:b7:d6:c4:0e:14:f7:cd:26:32:fd:
                    ba:1d:c3:7a:54:c1:d3:c8:3e:30:a3:fc:f9:c2:34:
                    e4:46:4f:0f:5e:82:43:30:d5:64:f1:07:e7:d2:e2:
                    0c:8c:6c:7f:dc:d2:7a:71:3f:50:cf:97:63:52:8f:
                    d3:ba:40:e6:d3:4b:0e:ee:88:d3:01:23:64:81:cd:
                    df:ff:7b:7d:ca:92:85:e8:8e:03:64:e0:1b:23:b1:
                    44:a7:df:51:af:be:92:68:1f:8d:74:26:46:d1:35:
                    83:b0:60:f2:e3:f7:74:2d:be:2d:0c:36:ad:53:e4:
                    2f:3c:24:87:c3:12:7f:8b:6b:38:48:e3:fa:e1:16:
                    af:f4:b3:92:1d:7c:c5:ee:cd:cd:35:b8:67:6b:6c:
                    88:a4:e0:d8:52:d4:cf:0b:cf:ff:2f:4f:44:0c:92:
                    89:0a:d8:2f:e0:ea:18:05:92:30:12:2f:c3:ef:65:
                    3c:30:0a:00:98:c7:c0:50:2e:d6:f8:f6:23:76:51:
                    ce:bd:1c:53:27:df:bc:45:b1:0f:54:b8:b8:c8:f5:
                    00:05:28:1e:49:0d:3e:62:12:ad:78:60:40:67:d3:
                    7b:06:a2:22:5e:26:d4:c4:0b:38:5e:72:b6:35:c3:
                    27:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E8:15:EB:5A:21:D3:26:26:49:F2:58:DD:1B:58:6C:04:BF:B2:DB
            X509v3 Authority Key Identifier:
                keyid:18:50:34:1C:0E:58:6C:F4:75:47:FD:06:E5:4E:DB:E6:90:2A:0E:24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/nugV61oh0yYmSfJY3RtYbAS_sts.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.117.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2c:02:8b:c3:0c:51:ff:8e:20:27:49:f6:86:7b:5f:8c:46:1d:
         d2:16:ce:47:f4:f2:c0:90:06:8a:91:e6:b3:25:94:31:4e:ac:
         7b:b8:4c:25:ac:b7:1a:23:f4:3b:fb:70:49:b9:c7:98:17:16:
         a5:0e:e2:15:4a:68:e6:04:9d:50:32:59:5b:4e:11:75:50:0f:
         7f:63:ee:e5:62:34:f1:93:b0:5c:f3:34:2a:60:12:55:c1:e0:
         e6:2a:9d:6d:93:c0:7b:1a:22:2c:65:77:aa:3d:59:7a:2f:f9:
         e4:11:39:ab:78:1c:6f:03:a0:5a:e8:ec:3a:50:13:7a:db:2e:
         1d:e1:b3:3b:46:a3:1b:ef:35:8f:86:b8:03:e4:07:e1:1c:97:
         f5:b1:20:70:a8:5f:63:60:dd:24:5f:27:04:6e:a7:af:86:69:
         80:42:b4:6c:90:81:c4:80:2e:18:00:9d:7d:da:b6:14:33:1e:
         ab:ff:f3:e0:25:79:95:c7:73:49:c4:a1:39:30:d3:3d:b2:5d:
         ac:5b:20:a2:eb:aa:57:50:8f:00:f7:8f:21:e8:91:68:eb:f8:
         02:9e:bf:41:fb:06:d1:a2:06:23:9f:e9:c8:86:f4:c5:84:99:
         53:96:66:07:02:cb:68:83:da:7a:37:3f:8d:6e:f8:98:82:21:
         85:64:4d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 12:33:30 2025 by rpki-client