Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/IsdbwMANP8WITz6bxCO4Gm-fRM0.roa
File:                     IsdbwMANP8WITz6bxCO4Gm-fRM0.roa (raw, json)
Hash identifier:          hEVaMYOipSgDC8bXbuBmsDvRY8JzdVIeNuZS8VPhBBg=
Subject key identifier:   22:C7:5B:C0:C0:0D:3F:C5:88:4F:3E:9B:C4:23:B8:1A:6F:9F:44:CD
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       A3
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/IsdbwMANP8WITz6bxCO4Gm-fRM0.roa
Signing time:             Fri 22 Jul 2022 06:43:27 +0000
ROA not before:           Fri 22 Jul 2022 06:43:27 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        59.157.128.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 06:43:27 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=22C75BC0C00D3FC5884F3E9BC423B81A6F9F44CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bf:ab:af:49:73:94:c9:0e:f7:f8:2e:e2:12:
                    db:3a:ec:aa:83:4f:18:92:bd:58:04:ac:98:8c:10:
                    38:d3:ca:13:eb:23:ae:62:c4:6f:d4:e1:af:12:c2:
                    e5:58:02:6f:b3:0d:31:f6:f5:86:10:d3:a6:8a:0f:
                    b2:70:62:01:25:10:c8:6e:e2:9a:07:84:e2:8a:28:
                    46:43:04:e5:42:8b:c2:60:35:da:97:f5:fb:4d:e0:
                    5b:d3:c6:ab:e1:ca:99:ca:e4:74:c9:48:d9:60:d2:
                    16:a1:e4:65:95:42:85:c3:ce:c9:5f:34:db:76:61:
                    aa:4e:6e:5b:e4:61:04:6a:07:fb:1b:5d:6f:d0:f9:
                    66:67:32:27:dc:d8:2e:41:47:87:47:01:14:05:17:
                    f1:5f:21:dc:5a:c2:76:b1:b0:ef:df:c4:76:b7:0b:
                    75:47:e9:8d:ec:ef:da:76:e7:a9:6c:54:e1:80:ed:
                    e2:d2:d9:4d:15:f4:34:45:43:34:a2:96:4b:0d:20:
                    1c:61:20:0e:f7:2c:93:76:6d:df:a6:79:e8:bf:94:
                    e2:61:f1:99:e9:b5:5f:0a:e2:cf:77:12:7b:4e:8c:
                    3e:35:12:9c:30:99:86:c2:57:37:f5:d9:ab:7c:a9:
                    ac:16:ba:cd:02:bd:c7:51:10:7a:33:27:4b:76:2d:
                    58:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C7:5B:C0:C0:0D:3F:C5:88:4F:3E:9B:C4:23:B8:1A:6F:9F:44:CD
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/IsdbwMANP8WITz6bxCO4Gm-fRM0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.157.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0b:6e:f3:46:c0:c2:38:43:e0:12:d9:cb:8c:1b:f0:7b:b1:f1:
         f6:40:72:a4:2d:83:12:19:3c:a8:16:c3:24:f0:58:cf:03:8a:
         0c:43:b2:43:f6:72:db:69:a8:3a:52:6b:20:f6:09:8d:2b:3f:
         69:b2:e3:41:c7:36:83:8e:67:42:fd:30:d9:0e:25:9b:cb:09:
         44:14:20:18:37:b4:07:6e:7e:76:a3:50:09:b7:5d:a3:30:4f:
         a7:c8:34:a6:5f:5d:58:46:cf:6b:45:83:80:a9:d6:b5:99:e2:
         52:94:86:4d:46:c2:c2:9c:9d:4c:99:f5:af:2c:c8:1b:f5:c4:
         cd:99:9f:27:02:72:0c:b2:a5:64:38:27:85:93:09:ef:72:ed:
         e7:ea:ba:8a:bf:24:c7:9c:a0:e3:b1:7f:fc:5b:0d:c6:4d:2a:
         ae:be:be:39:34:ca:de:c9:66:a1:fa:30:b0:6f:db:08:81:0d:
         4d:26:cb:f3:b3:c7:27:bc:4d:bc:02:47:1f:5b:ff:0b:af:be:
         81:15:5c:19:3a:ed:42:87:d5:ad:01:3d:88:8c:39:3f:5c:f6:
         3b:f1:df:13:73:c1:83:9b:9e:9c:f1:55:8e:b2:17:76:b9:a1:
         1a:09:eb:9b:84:03:d4:10:6a:33:77:62:48:ad:4a:a2:5a:85:
         f3:c8:e7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:30:53 2025 by rpki-client