Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-9Z1hkbZXQNtY03TyTOItXGAEKQ.roa
File:                     -9Z1hkbZXQNtY03TyTOItXGAEKQ.roa (raw, json)
Hash identifier:          RDMrKVQ9psqC2yLRGI/qWKnDCuaxOnkOak6zeNqddJE=
Subject key identifier:   FB:D6:75:86:46:D9:5D:03:6D:63:4D:D3:C9:33:88:B5:71:80:10:A4
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0261
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-9Z1hkbZXQNtY03TyTOItXGAEKQ.roa
Signing time:             Tue 30 May 2023 16:34:13 +0000
ROA not before:           Tue 30 May 2023 16:34:13 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        27.230.56.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 609 (0x261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:34:13 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=FBD6758646D95D036D634DD3C93388B5718010A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:dc:5f:41:46:a9:20:41:b7:9c:fb:36:7f:bf:
                    6e:00:a2:7c:0b:86:fb:8f:31:bf:a3:b2:c7:12:d0:
                    5a:4f:d3:1e:05:03:7a:9c:4e:82:17:64:90:91:68:
                    c1:2d:5d:b7:b1:78:63:fa:43:1b:28:ce:f5:a8:0a:
                    f0:a6:76:0c:71:05:d1:0c:d9:36:3f:54:c7:b3:eb:
                    86:b6:ab:80:a9:24:7f:7a:f1:6c:9e:51:66:ac:2a:
                    b5:06:bc:27:da:d2:0f:14:e7:67:92:df:6a:99:4e:
                    9a:36:76:c4:7e:de:11:d5:51:a0:ec:42:1d:0b:3e:
                    b6:cd:27:8d:0a:aa:11:f2:db:97:d5:9f:51:93:a5:
                    c8:6f:0f:4a:c2:ed:17:32:98:77:59:51:01:77:6e:
                    26:7f:f6:68:0d:30:7d:fb:06:45:e9:d6:77:c6:df:
                    68:56:bf:6d:b6:a3:a4:de:04:03:fc:38:63:2e:b0:
                    92:61:21:9f:8c:5b:48:d3:69:48:a9:16:bf:bc:92:
                    f4:1e:5c:0b:e4:12:b2:00:3d:c3:1b:5c:15:c1:40:
                    6d:be:b6:ec:3b:51:d6:e1:17:32:32:28:ea:44:28:
                    97:c9:c8:65:e2:e5:83:b9:bb:5e:bd:85:71:24:71:
                    fd:14:4b:31:7c:22:81:5d:f8:c3:9f:e0:99:b0:04:
                    b0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D6:75:86:46:D9:5D:03:6D:63:4D:D3:C9:33:88:B5:71:80:10:A4
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-9Z1hkbZXQNtY03TyTOItXGAEKQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         71:56:01:8c:bc:90:e2:8a:b4:3f:7d:28:dd:f7:b2:8c:04:30:
         33:ec:6e:be:ea:c4:53:d4:0a:0c:e0:fb:cc:bd:ea:8c:2a:b8:
         1a:50:6f:80:2b:59:ad:59:51:9d:f8:1a:a6:d8:4a:de:41:0f:
         ca:32:2e:18:47:f0:3b:50:56:0a:4a:47:5c:44:4b:d7:ac:fd:
         64:cc:dd:7b:d2:23:f8:9d:bb:21:0d:a3:b2:df:68:e5:47:4f:
         bd:fc:7f:1d:a8:d3:9f:ae:31:28:d8:33:4b:89:ae:29:41:3f:
         9c:16:b4:0c:15:28:43:4e:bc:b9:7e:91:23:6d:85:f9:b2:ff:
         d5:20:cf:3c:b4:d2:a0:b1:28:a2:b4:a0:cf:51:d3:7d:45:24:
         eb:ec:9a:23:d1:89:e9:fa:91:3c:b2:42:48:04:54:15:70:43:
         a1:be:da:16:77:0b:35:3f:4a:b8:07:58:34:df:90:e6:a8:13:
         7b:9f:ab:15:d9:36:81:6e:5f:8d:8c:35:61:6d:b3:e8:a1:93:
         c2:d5:88:6a:74:22:33:4f:ce:ee:a0:9b:01:d8:2b:4e:e3:3b:
         d8:8c:9a:e5:23:0e:33:5e:c1:6a:53:c0:6c:6e:d3:24:a7:e3:
         e1:34:25:9d:11:f7:32:48:ca:fb:e0:7f:c4:f9:3e:00:10:61:
         92:f0:c8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:02 2025 by rpki-client