Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/MkmNUCV_cHuMedycreh7gZ514tU.roa
File:                     MkmNUCV_cHuMedycreh7gZ514tU.roa (raw, json)
Hash identifier:          egVOmugLCxUhLiFajr0j4b8Dafr9xpPsv+y57/PIPDE=
Subject key identifier:   32:49:8D:50:25:7F:70:7B:8C:79:DC:9C:AD:E8:7B:81:9E:75:E2:D5
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       5F
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/MkmNUCV_cHuMedycreh7gZ514tU.roa
Signing time:             Fri 22 Jul 2022 04:13:15 +0000
ROA not before:           Fri 22 Jul 2022 04:13:15 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        59.156.29.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 04:13:15 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=32498D50257F707B8C79DC9CADE87B819E75E2D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bc:cb:ff:9d:3b:30:b3:de:90:0a:41:1f:2a:
                    3f:65:5f:af:87:cf:f0:24:01:16:32:88:40:8e:3c:
                    94:b7:fe:c9:f3:5a:77:e9:e9:0f:b5:5d:02:e7:f2:
                    18:84:27:03:4f:20:4a:e9:e7:eb:db:e5:ba:9d:6f:
                    cb:26:32:04:86:75:19:e9:b7:71:66:60:1f:d1:f4:
                    84:1a:ba:71:a8:8d:ab:9e:dc:ee:73:03:53:b5:96:
                    cb:1e:d7:58:ab:b6:44:42:f7:ea:bb:63:d8:4f:a6:
                    b6:61:20:97:64:5d:6b:e6:5a:ec:c8:1e:25:90:bc:
                    82:f9:5d:9b:77:36:b1:d4:97:68:d4:ad:a7:8a:c7:
                    52:d6:c6:13:81:7c:5b:f1:cd:ae:9c:35:a9:3a:aa:
                    2d:22:b9:3d:be:bf:42:6f:9f:5c:cd:ba:aa:00:fa:
                    d3:dc:f5:a4:3b:c3:ea:76:61:f5:62:c0:cb:92:3d:
                    87:f2:22:5e:0e:3d:d9:37:ed:ff:74:d9:cb:5e:80:
                    dd:0e:62:f8:80:ca:99:97:dd:a9:ad:60:c1:2b:27:
                    6e:e0:1a:4b:04:82:5e:08:de:c5:c5:9c:ec:d3:6d:
                    23:d8:1f:26:77:68:df:43:3d:54:ca:7e:99:b0:f8:
                    1d:e1:71:5e:5c:f2:03:e0:bf:4b:2c:8f:f1:f0:17:
                    b7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:49:8D:50:25:7F:70:7B:8C:79:DC:9C:AD:E8:7B:81:9E:75:E2:D5
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/MkmNUCV_cHuMedycreh7gZ514tU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.156.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:55:5f:96:44:c0:c7:d0:82:5c:ae:14:ea:03:8e:5a:5c:72:
         93:aa:bd:de:2c:24:4e:cf:d7:fc:65:00:26:68:a1:ff:94:c2:
         83:d4:b9:08:d9:6e:91:a4:d2:c5:20:d2:81:44:c3:a1:d0:a3:
         df:b0:d4:a8:bc:8c:54:96:08:6b:03:0d:da:0c:75:83:ac:e9:
         8f:f6:83:9d:25:d1:63:1d:68:cd:78:0f:4f:27:f8:b4:96:e5:
         6e:9f:ed:36:dc:ff:ee:77:52:b5:74:5c:56:1e:d7:40:fb:c6:
         6d:06:12:d8:d2:e1:a0:2d:90:10:c8:8c:7c:1d:c9:07:80:14:
         6c:66:eb:79:36:2e:81:29:52:2d:86:ca:65:37:f0:db:7b:62:
         f9:b0:a4:b7:f8:b1:a3:d5:94:f0:38:d8:34:7e:21:00:a5:ce:
         0c:f9:38:1d:fa:d5:bc:bd:b3:cf:2e:1f:42:3c:99:32:8e:a0:
         50:ff:0b:46:02:d4:b0:df:5c:5e:1b:56:35:0c:b1:d4:34:e5:
         0d:8c:af:17:96:6c:d5:5c:79:df:18:e5:7e:a6:2f:da:cb:8c:
         f9:5c:94:0b:c3:0c:59:26:be:9b:3a:18:c6:be:b1:2c:6a:01:
         d7:30:c1:23:fe:7c:b2:31:b1:8f:cc:5a:ed:f2:c9:c1:d9:87:
         85:5e:eb:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:48:22 2025 by rpki-client