Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/YeTWPvQAcazukU9-ZFgQd47epL0.roa
File:                     YeTWPvQAcazukU9-ZFgQd47epL0.roa (raw, json)
Hash identifier:          yrha97ppDnUELGKtmjc7xpHdY3y88+08sgoWog6g804=
Subject key identifier:   61:E4:D6:3E:F4:00:71:AC:EE:91:4F:7E:64:58:10:77:8E:DE:A4:BD
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       AF
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/YeTWPvQAcazukU9-ZFgQd47epL0.roa
Signing time:             Sat 01 Jul 2023 01:31:12 +0000
ROA not before:           Sat 01 Jul 2023 01:31:12 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     9370
IP address blocks:        153.121.64.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Jul  1 01:31:12 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=61E4D63EF40071ACEE914F7E645810778EDEA4BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:15:9d:67:53:99:26:11:16:91:93:2b:c1:72:
                    72:1e:f9:89:11:df:9c:8f:07:17:01:15:31:61:41:
                    43:a0:17:4f:f9:20:2a:5e:ad:f0:b4:ec:aa:4e:5b:
                    da:38:ed:ec:12:48:5e:46:28:87:1c:bf:4a:79:18:
                    f8:77:e4:3e:51:b4:1f:4a:04:46:0b:9f:ff:33:54:
                    a2:b9:c1:60:bc:e5:45:15:f9:81:cc:c4:06:54:43:
                    be:40:7d:52:55:e4:0a:a9:b2:d8:39:36:85:cc:17:
                    8e:07:50:ea:8f:2f:75:61:e5:37:05:74:d7:81:e7:
                    c0:20:10:e3:59:fb:0e:d7:d3:4b:3b:9e:9a:51:33:
                    4b:19:4c:a3:58:66:ff:4d:38:e6:a6:b0:18:5c:d1:
                    26:a5:70:c1:b9:31:d9:0d:45:fa:36:23:82:30:3d:
                    5f:47:c3:76:f1:cf:12:f5:9f:a1:93:91:1d:12:0b:
                    6d:19:99:6c:71:8f:d2:7a:9e:3e:48:72:17:7b:fd:
                    bf:06:11:17:b3:d6:aa:df:31:52:a1:1a:4b:99:5f:
                    64:0e:47:d0:ff:0d:d2:ac:c8:a2:49:c3:68:73:68:
                    81:da:2f:2f:c2:9c:80:2b:c5:37:bb:1c:25:81:cb:
                    a6:8e:de:40:cb:c2:0c:2d:d4:f6:13:6f:ea:ed:b9:
                    1a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E4:D6:3E:F4:00:71:AC:EE:91:4F:7E:64:58:10:77:8E:DE:A4:BD
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/YeTWPvQAcazukU9-ZFgQd47epL0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.121.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         89:5b:1a:2b:0e:9d:d5:ce:1c:f4:c6:ae:93:3a:d8:5c:7f:6b:
         9c:d5:9e:6c:20:18:28:e8:ef:77:17:be:e9:ca:53:8a:6f:3a:
         39:ce:77:cc:8d:be:65:4b:17:ff:cb:2a:8b:78:e4:84:6e:67:
         50:9f:92:f0:a4:e4:68:8c:ac:97:a3:f7:96:91:24:46:4f:fa:
         6c:0c:df:5f:28:34:26:41:d5:4f:9d:71:f3:47:f9:e8:41:63:
         54:e7:15:26:d6:c5:5b:c9:dd:b1:2a:78:14:bd:ca:7e:4f:0c:
         64:f7:d1:00:ec:9f:b0:41:5a:05:30:a3:5f:9f:3b:4a:17:06:
         8c:ed:ed:10:21:7b:72:33:4e:93:f0:eb:3e:2a:cb:7e:c3:f7:
         00:5d:d9:86:3a:d9:9e:e1:ee:90:66:43:a1:65:b7:49:5f:c1:
         a8:71:b4:9c:77:6c:a4:fd:ca:e9:78:9f:48:40:29:80:b2:bc:
         a2:32:45:df:cf:21:94:10:7c:c6:aa:c8:b4:93:97:cd:c4:f0:
         f0:b0:90:80:32:7f:f4:7e:76:81:4b:b8:ad:a5:24:14:ba:29:
         1a:dc:4f:15:73:99:7b:d8:d1:fa:5c:d5:51:b0:09:93:88:65:
         97:b8:a5:1a:ee:7f:c1:7d:f2:12:ce:8c:b5:2e:a2:65:56:96:
         73:e1:ee:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:42 2025 by rpki-client