Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/1GnRMSNf2_ECcnUILQcxu7JrGtU.roa
File:                     1GnRMSNf2_ECcnUILQcxu7JrGtU.roa (raw, json)
Hash identifier:          PsGwWTwgTGnjWBSGe4xyu/Sv96feIgXGE1Ky36HqnVY=
Subject key identifier:   D4:69:D1:31:23:5F:DB:F1:02:72:75:08:2D:07:31:BB:B2:6B:1A:D5
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       01BF
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/1GnRMSNf2_ECcnUILQcxu7JrGtU.roa
Signing time:             Fri 07 Jul 2023 04:14:41 +0000
ROA not before:           Fri 07 Jul 2023 04:14:41 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        123.50.0.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447 (0x1bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:14:41 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=D469D131235FDBF1027275082D0731BBB26B1AD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9e:7d:41:66:bd:5d:53:88:ac:50:15:ef:35:
                    47:ba:5b:19:fc:de:c7:22:a8:f9:39:8a:d9:23:02:
                    22:38:7d:aa:ad:5c:7e:83:43:c3:a7:70:d1:b2:0d:
                    00:7c:da:b1:6c:b7:55:0d:cf:3c:e4:97:38:50:4e:
                    fa:bf:dc:b9:13:e1:a5:69:36:7f:31:34:49:7a:48:
                    0d:7f:4b:11:54:d9:ef:b6:3f:72:50:d3:7a:64:ab:
                    a5:5c:0c:e9:3c:5e:c6:9b:e4:1a:3d:fe:80:0f:68:
                    8e:a1:b1:d8:be:9f:93:98:4d:3a:2e:5c:e2:49:bd:
                    f7:2e:62:6d:89:bb:53:4f:ae:32:d8:c3:3a:44:98:
                    14:cb:9f:f0:bf:42:ee:78:31:42:7e:24:0f:76:c0:
                    e3:9e:91:72:22:84:c9:9e:2f:7c:6e:25:5c:b3:c4:
                    55:e7:2c:1d:2b:ae:19:ad:76:d6:a5:5e:a6:31:42:
                    3a:09:9f:35:bd:7f:65:da:9f:27:5f:2b:22:bd:73:
                    de:01:b6:7b:3c:92:fb:8e:c6:ba:c3:e8:bf:6a:9d:
                    27:a2:ec:f0:8c:23:77:4b:33:1c:5a:f6:a0:a5:33:
                    a7:d5:cd:03:0a:98:f1:ef:c9:fd:73:f8:d6:d3:68:
                    96:b4:ac:b9:96:ba:b1:78:fb:d9:d3:d7:92:82:a4:
                    20:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:69:D1:31:23:5F:DB:F1:02:72:75:08:2D:07:31:BB:B2:6B:1A:D5
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/1GnRMSNf2_ECcnUILQcxu7JrGtU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.50.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         02:0a:75:ae:24:87:9b:4b:66:9e:ec:a7:0f:4d:3c:70:b1:bf:
         d0:9c:9b:11:2d:83:28:48:4d:c6:ab:d1:bb:57:b8:8a:e0:28:
         cb:23:ae:c6:fb:26:54:63:52:a4:7b:50:24:4a:e3:0c:d8:67:
         8f:ca:9f:ed:0d:09:3b:de:be:0b:bc:a9:d4:1d:2e:e5:77:ac:
         15:ef:37:15:45:98:a1:d8:72:93:3f:61:f9:aa:d0:ae:37:b3:
         93:8f:49:c7:af:d3:cb:af:39:ba:64:d1:07:c8:0f:df:ba:b3:
         ff:15:f7:b1:92:2c:40:e4:66:60:d7:e8:80:89:da:09:28:1b:
         a4:64:1b:79:c3:5b:be:9c:51:09:1c:0a:77:c5:36:90:b7:22:
         b6:b4:17:24:e8:f6:05:b4:f8:0f:cc:6e:a4:6b:7a:3d:bd:51:
         db:8b:2f:01:c7:67:03:0d:af:0d:88:67:fa:bc:2f:bf:7e:06:
         8a:d7:c2:cd:09:4f:c8:cd:18:d0:c0:f6:61:17:83:8e:e0:1f:
         a3:0d:60:f3:3f:97:7c:26:1a:ef:8f:49:ad:fc:79:25:60:a5:
         b7:bc:61:00:31:91:cb:ea:cf:5d:87:f1:11:f3:c8:46:2c:d6:
         0f:49:4f:e9:61:59:7e:20:b5:59:3b:bf:d0:a4:7e:5d:41:7d:
         1e:6f:e9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:28:01 2025 by rpki-client