Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2l5MtB121GiB-W5IFPj_8b8YsVE.roa
File:                     2l5MtB121GiB-W5IFPj_8b8YsVE.roa (raw, json)
Hash identifier:          96vhVXetMA37vOvrnIVkEEVsUWTbzbt7k+fnMpbgO5c=
Subject key identifier:   DA:5E:4C:B4:1D:76:D4:68:81:F9:6E:48:14:F8:FF:F1:BF:18:B1:51
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       04CE
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2l5MtB121GiB-W5IFPj_8b8YsVE.roa
Signing time:             Thu 27 Jul 2023 16:48:20 +0000
ROA not before:           Thu 27 Jul 2023 16:48:20 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        27.230.56.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1230 (0x4ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:48:20 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=DA5E4CB41D76D46881F96E4814F8FFF1BF18B151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:48:b6:22:44:68:fc:a3:3c:a2:4c:f1:57:f2:
                    51:2c:06:4d:96:31:62:12:23:6f:95:a4:91:e7:4e:
                    a1:f6:43:a0:e8:48:e2:9c:7a:8b:77:c1:24:f9:c2:
                    1b:d8:51:4f:01:ac:b9:89:a1:30:11:06:5e:a7:b4:
                    1c:fd:8b:11:83:e7:2a:73:71:66:33:46:39:f8:24:
                    77:17:10:64:89:df:36:4a:da:0c:34:3f:7a:b5:fb:
                    39:7b:cb:e2:cd:a5:94:90:01:be:0f:7a:b3:db:82:
                    8a:93:30:1b:7f:92:0e:cf:dd:c3:c8:1c:0b:f9:6c:
                    aa:df:d2:96:48:de:10:ed:a7:dd:db:e1:0d:44:4f:
                    4d:50:b2:95:46:b4:1b:8f:02:a9:75:ff:8c:db:0d:
                    7e:9e:a2:5f:0a:87:10:25:5a:ac:2b:ad:73:18:6b:
                    a0:ad:51:b9:17:29:09:38:b7:45:d5:4f:9e:e6:1b:
                    df:a6:ce:0c:be:d6:9b:78:b5:81:4b:66:fe:b9:c6:
                    d8:96:bb:7b:7d:fc:2b:d7:9e:d1:7f:92:c6:1c:f8:
                    4e:c6:33:14:e4:53:52:45:88:df:8d:21:25:da:f9:
                    8d:56:81:56:93:d0:97:1f:34:ce:12:06:3f:92:c2:
                    ec:00:4b:a5:ce:29:f0:a2:98:f2:17:9e:51:62:87:
                    7e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:5E:4C:B4:1D:76:D4:68:81:F9:6E:48:14:F8:FF:F1:BF:18:B1:51
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2l5MtB121GiB-W5IFPj_8b8YsVE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c9:d1:c9:60:a4:18:7f:c1:93:0b:73:da:fc:c8:d3:a9:5c:89:
         c3:7b:dc:bd:3c:4e:a5:a1:52:a5:61:13:53:ac:51:48:b5:e8:
         a5:be:62:d5:56:03:6c:75:c9:f2:7a:e0:72:63:65:cc:91:cb:
         5f:7f:a3:31:58:cf:2f:9a:23:bc:13:e1:1d:26:12:35:6a:d7:
         4d:4f:ed:c4:2b:a3:75:5c:9b:f1:e2:4a:96:f1:ac:21:a5:a3:
         bb:ff:26:30:7f:b0:63:99:72:47:b6:f5:56:f4:c6:e4:1f:6b:
         56:ba:56:29:0e:cf:da:5b:f3:e7:0b:b9:33:63:b5:74:f8:8b:
         98:87:ed:92:4d:4a:ae:2d:b8:cd:72:7f:2d:44:c8:d8:ba:f2:
         c0:f7:d1:be:c2:e2:33:a6:be:de:d0:5f:88:1c:58:93:ec:a9:
         6b:4c:85:f2:0d:1d:75:d9:d6:53:b0:17:ce:0a:5a:a4:b6:4b:
         11:e0:e0:d7:02:26:96:22:db:41:1d:70:73:bd:98:aa:e1:f4:
         50:6c:87:35:38:a9:28:81:8d:33:1e:65:e4:4b:b2:73:62:8f:
         1f:90:06:42:9f:c2:4a:08:b9:91:8b:57:2f:bf:63:59:f4:19:
         b5:0c:4c:11:1e:91:15:03:4b:6d:73:16:7c:6f:e7:08:62:8b:
         35:9a:a5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:56:18 2025 by rpki-client