Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/8wkfTA9hoTswbqYaEYBtr8BjxR4.roa
File:                     8wkfTA9hoTswbqYaEYBtr8BjxR4.roa (raw, json)
Hash identifier:          ZV8aNW5JzztdndXPMNt5hFqnqgL6/r+xAU2xkstlFjM=
Subject key identifier:   F3:09:1F:4C:0F:61:A1:3B:30:6E:A6:1A:11:80:6D:AF:C0:63:C5:1E
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       01AF
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/8wkfTA9hoTswbqYaEYBtr8BjxR4.roa
Signing time:             Fri 07 Jul 2023 04:14:35 +0000
ROA not before:           Fri 07 Jul 2023 04:14:35 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        122.145.192.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 431 (0x1af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:14:35 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=F3091F4C0F61A13B306EA61A11806DAFC063C51E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:06:2c:5a:b1:33:d1:21:81:c5:68:96:6f:0d:
                    15:a7:72:8c:e5:22:fd:6a:81:44:25:7d:bc:44:fa:
                    e8:e1:18:6a:bf:54:bb:e2:0d:03:46:78:7f:ff:12:
                    ff:65:0f:92:d6:e2:04:c2:89:3d:32:f3:b3:7c:b3:
                    42:df:7d:a8:4b:48:1a:45:5b:10:74:39:1e:53:56:
                    c1:53:2b:ca:cb:79:81:75:9b:7f:73:ed:05:28:a1:
                    75:44:d9:91:af:19:27:07:0f:ee:9b:bc:1b:b3:ba:
                    9a:58:3c:c7:26:86:2d:a0:b2:7b:7f:1d:54:33:25:
                    c8:00:61:52:7e:b2:3d:e5:c8:6a:82:92:7c:ad:0b:
                    5d:58:15:a5:46:01:06:e6:44:bd:b4:d9:f7:1c:98:
                    95:37:3c:da:3c:e4:a2:27:08:c6:3a:d8:37:09:12:
                    ac:65:aa:e2:bb:48:d9:72:a3:c9:9d:92:3f:82:01:
                    38:1e:56:f6:e4:87:5e:90:d8:f8:f6:42:82:21:ab:
                    e2:79:d0:15:1f:7b:c5:56:9f:3c:27:11:9a:20:5e:
                    c1:cc:02:4e:ae:8f:b9:1e:15:7c:f9:b8:a9:c5:80:
                    38:ca:3e:32:ba:be:93:56:e1:90:3b:a8:96:b9:10:
                    07:ac:7d:6a:6f:ee:65:dc:1f:6e:b4:ed:58:85:85:
                    d2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:09:1F:4C:0F:61:A1:3B:30:6E:A6:1A:11:80:6D:AF:C0:63:C5:1E
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/8wkfTA9hoTswbqYaEYBtr8BjxR4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.145.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         16:0e:90:e3:6e:c1:24:48:8d:17:5a:27:62:b1:76:a0:45:d2:
         7a:c8:47:6c:f4:05:47:cc:1d:fc:a3:7b:fb:17:dd:71:f9:4e:
         a3:12:cd:4f:a0:ac:a4:02:00:b5:d4:f9:46:18:42:f6:69:21:
         5f:d0:8d:8c:1a:34:47:f9:8b:f3:20:da:cc:da:03:78:ff:a4:
         8f:d5:81:b0:0b:4d:fd:84:d4:8f:24:cf:47:22:5b:5f:f7:da:
         db:ef:1d:6a:d2:9d:b6:0e:87:fa:ac:88:f3:90:f1:ca:c0:ca:
         ac:df:ca:74:8a:38:63:b6:e3:c5:60:9c:0b:5e:ce:30:c4:e9:
         87:c2:bf:a7:19:a7:56:40:bd:0a:01:c9:60:b6:d7:fe:5c:c2:
         c0:dd:72:c0:a7:1a:8c:e3:69:c6:1d:f4:e0:04:92:bb:9c:dd:
         16:3e:ee:ab:5c:95:de:8b:ed:43:05:ab:a6:d1:d3:be:e0:60:
         b5:75:39:5d:71:4c:6d:eb:21:5b:a1:ff:95:db:60:10:e2:e8:
         25:07:99:0f:cc:64:17:a9:d5:d4:0e:8f:0c:e9:c3:ee:81:b3:
         25:0b:20:e9:84:c5:1e:cc:ce:d4:68:b6:5e:3c:75:b3:7a:66:
         48:22:f7:7c:f3:18:35:3e:f4:5a:2d:18:e0:de:9e:87:df:a1:
         bb:37:7d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:13 2025 by rpki-client