Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/iRHC06bF69PBnqpylOSGgxP8AwM.roa
File:                     iRHC06bF69PBnqpylOSGgxP8AwM.roa (raw, json)
Hash identifier:          TgKgWsXEqx4R9rEEEkJLmyTTUfP44IKfvdiqo6fPWmU=
Subject key identifier:   89:11:C2:D3:A6:C5:EB:D3:C1:9E:AA:72:94:E4:86:83:13:FC:03:03
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0132
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/iRHC06bF69PBnqpylOSGgxP8AwM.roa
Signing time:             Fri 07 Jul 2023 04:08:14 +0000
ROA not before:           Fri 07 Jul 2023 04:08:14 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        36.52.26.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:08:14 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=8911C2D3A6C5EBD3C19EAA7294E4868313FC0303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:24:3e:57:03:29:ac:41:09:fa:f4:af:e4:ac:
                    98:0f:58:72:20:9e:a6:2b:9e:d5:d3:9c:13:5e:17:
                    54:59:4b:0e:a5:69:78:8d:85:fe:6c:da:07:df:cd:
                    f3:f8:37:c7:4f:b2:b1:48:9f:7d:89:a2:94:a1:cf:
                    15:9c:0d:2f:f0:db:17:21:50:e7:12:e9:b5:a7:1d:
                    8d:eb:b5:1b:db:a6:79:88:51:24:b1:03:07:34:a4:
                    8b:a8:f6:65:82:40:71:99:7a:a8:ca:06:e5:74:1b:
                    2e:07:d1:57:98:86:40:a1:23:89:50:9d:dd:aa:34:
                    b5:74:ee:52:8f:e2:ec:54:cc:2c:4d:ea:cb:72:70:
                    2c:cb:fb:bc:42:86:f5:8e:80:7d:74:e2:d1:a8:ca:
                    20:c3:45:77:22:b3:a1:af:6c:2d:86:8d:e5:57:6f:
                    00:9a:02:4a:49:a4:7b:3b:70:80:c5:02:46:96:f2:
                    a8:ef:be:b8:dc:aa:d9:2a:e2:51:3d:5f:b9:22:fb:
                    6c:56:0f:66:40:ec:af:ed:b8:8a:af:b3:01:78:eb:
                    f7:e4:e7:61:ce:47:8b:49:92:86:02:0f:a1:7e:42:
                    76:3f:dc:95:71:0e:e5:38:28:08:89:2f:5a:6c:e5:
                    3c:f4:e4:59:ec:09:18:c7:e0:86:25:8d:7c:72:24:
                    dd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:11:C2:D3:A6:C5:EB:D3:C1:9E:AA:72:94:E4:86:83:13:FC:03:03
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/iRHC06bF69PBnqpylOSGgxP8AwM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.52.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:b7:70:56:8e:6a:77:b4:a6:ec:0d:36:d0:2f:74:61:d7:57:
         45:64:02:93:a6:66:42:16:a8:a8:a9:f5:99:99:d6:a8:c9:66:
         4c:62:f5:51:25:9c:a8:5b:f3:17:4a:b6:af:f1:9b:ce:12:00:
         7b:12:92:3c:e9:83:04:55:6d:42:b0:b4:a5:f7:cb:e7:e1:8d:
         2f:63:81:57:b3:83:8a:d3:a6:1e:47:77:0a:83:4a:f5:5f:ea:
         c6:07:a1:43:9e:2e:73:68:dd:cb:aa:3e:0e:4d:43:32:c5:92:
         fe:ae:0e:38:49:90:a0:d6:bb:90:e2:c9:47:5e:51:bb:b4:8c:
         a9:a5:87:9c:db:c5:95:57:20:c2:4b:ee:9a:7a:ea:58:b6:02:
         ae:9d:9e:d2:7f:5d:85:54:d5:30:2c:7b:90:7c:41:aa:2f:cc:
         8c:3f:44:80:37:2e:df:09:46:0d:76:77:a2:e5:d3:60:b6:dc:
         18:4d:4e:ee:c3:ae:f7:14:2e:3f:01:e7:87:18:2d:2a:cb:41:
         1a:ff:3f:0d:0d:8f:32:d1:16:9d:26:6b:91:31:58:da:ed:50:
         ab:f3:7f:ac:4a:39:17:2d:44:71:33:91:be:a9:25:42:c1:55:
         6d:c9:2e:e4:75:06:1b:d7:91:7a:85:7e:5d:02:39:63:b2:5b:
         7e:ef:5e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:44:25 2025 by rpki-client