Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/I5Kph9k81Q1L4gT-ac2L6BvH9tc.roa
File:                     I5Kph9k81Q1L4gT-ac2L6BvH9tc.roa (raw, json)
Hash identifier:          e1CvC6LbdLd9ka0U/SgZJ54EYlXQ3HSlpr3NhRY+EHk=
Subject key identifier:   23:92:A9:87:D9:3C:D5:0D:4B:E2:04:FE:69:CD:8B:E8:1B:C7:F6:D7
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       C7
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/I5Kph9k81Q1L4gT-ac2L6BvH9tc.roa
Signing time:             Thu 28 Jul 2022 05:13:23 +0000
ROA not before:           Thu 28 Jul 2022 05:13:23 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        122.145.136.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 28 05:13:23 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=2392A987D93CD50D4BE204FE69CD8BE81BC7F6D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bd:45:2a:c8:c9:d0:dd:53:c5:03:44:48:15:
                    84:73:73:ed:dd:d9:bf:55:85:76:73:47:ff:97:45:
                    15:c8:08:f6:41:d4:19:f6:29:15:22:37:67:5f:44:
                    8c:52:eb:e8:e6:11:91:7f:83:42:c7:68:bc:b8:d2:
                    af:c6:dd:85:fa:94:e0:2d:21:ba:72:55:d3:5c:48:
                    b9:5b:46:fc:b8:cf:74:cb:33:30:f4:c2:59:79:f4:
                    b9:33:e2:9f:98:97:07:0b:50:7c:a5:4a:d4:91:58:
                    04:ea:eb:c3:bb:4b:32:df:2b:19:bc:84:58:d5:1d:
                    eb:b4:30:20:73:e6:95:47:06:32:08:39:81:e9:64:
                    c2:04:ea:49:31:45:ba:29:ae:81:fa:a2:c3:69:df:
                    b4:47:a8:ce:f0:c6:04:58:d8:e8:93:7c:33:07:b2:
                    89:cc:6a:49:e2:b8:78:4d:ab:90:46:86:83:dd:15:
                    3c:32:f8:87:80:19:d2:cf:d6:b0:8b:c5:78:d6:16:
                    1f:fe:cd:49:34:1e:96:f9:b6:35:ac:4c:4f:cb:85:
                    58:fb:ed:51:08:f3:88:fc:1a:cc:29:d3:99:d5:72:
                    5a:b4:b4:0f:4e:f2:4d:f3:76:3c:0f:fb:63:dd:ee:
                    74:b9:ba:52:b3:a5:b8:62:85:bf:8a:b3:63:4d:c2:
                    c1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:92:A9:87:D9:3C:D5:0D:4B:E2:04:FE:69:CD:8B:E8:1B:C7:F6:D7
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/I5Kph9k81Q1L4gT-ac2L6BvH9tc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.145.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         31:98:31:6d:8e:c7:46:6d:2f:da:7e:f3:04:62:e1:d0:c5:83:
         52:27:26:96:7a:c3:41:79:5c:85:96:e8:98:a9:7f:56:42:ec:
         34:96:04:f3:a1:c3:e9:1d:22:4c:02:11:1d:6f:da:fd:60:11:
         a9:95:db:8b:e3:03:bd:6c:1f:21:ff:86:11:5a:54:65:aa:0e:
         cf:70:54:37:d2:66:e8:77:3a:6a:7a:4e:b2:7b:8d:53:f6:1f:
         1f:10:ed:6e:51:3e:11:c3:71:d3:ab:2b:9b:b3:87:c9:91:00:
         80:3d:a5:78:ab:78:95:5a:44:8d:0e:22:48:0a:3c:9b:63:63:
         cb:2b:40:70:2b:46:d4:93:77:66:33:2a:29:72:a4:7f:04:e9:
         61:2c:63:af:e1:19:1d:f7:b3:94:b6:aa:e7:2b:a5:f3:6e:48:
         5b:bf:68:fc:c4:70:44:e2:5a:92:5e:b5:34:e3:4c:2f:b1:f0:
         24:25:09:d9:43:ca:1e:91:4c:31:fa:b8:65:87:7c:14:52:10:
         92:be:0f:7b:4d:4b:ce:1f:e1:4d:f5:98:f9:35:10:3a:b7:28:
         81:cd:14:2a:33:7a:95:d5:97:21:09:2e:35:fd:7c:2c:6b:d1:
         02:fd:63:30:fd:88:90:0b:8e:b1:0d:80:9d:9c:74:7a:53:69:
         e1:28:e3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:46 2025 by rpki-client