Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/k4Mds2P5FuKpdHUI-bsyYYBloME.roa
File:                     k4Mds2P5FuKpdHUI-bsyYYBloME.roa (raw, json)
Hash identifier:          oo31XjQ6bP3bcgUVhCsl2FbSTqgdbBNMycVNDplDtHQ=
Subject key identifier:   93:83:1D:B3:63:F9:16:E2:A9:74:75:08:F9:BB:32:61:80:65:A0:C1
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       01A5
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/k4Mds2P5FuKpdHUI-bsyYYBloME.roa
Signing time:             Fri 07 Jul 2023 04:14:31 +0000
ROA not before:           Fri 07 Jul 2023 04:14:31 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        220.150.68.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 421 (0x1a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:14:31 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=93831DB363F916E2A9747508F9BB32618065A0C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f1:0b:72:a5:36:2a:4d:76:26:3e:06:21:97:
                    d8:15:30:62:ea:e7:fc:cf:ee:7d:fa:b9:69:08:bf:
                    c2:1e:ab:47:7a:3c:ac:4d:5d:0d:38:7a:f4:52:42:
                    c7:58:43:30:00:a9:30:c3:cb:36:13:16:e7:61:25:
                    b1:d8:71:b2:17:c4:21:59:32:8b:9d:b7:f0:71:f4:
                    2a:a7:22:c4:87:00:93:45:6d:3b:5c:74:4f:d2:b9:
                    6f:a8:7c:32:a6:7a:a0:90:18:62:51:f8:a0:88:db:
                    ec:e9:dd:2c:61:a7:27:37:25:71:57:57:75:d0:88:
                    5c:f5:74:f5:18:05:1a:5f:24:ba:9c:55:73:33:05:
                    da:26:34:77:df:6e:89:61:bc:3d:41:7c:76:0b:7d:
                    f9:6c:0d:fe:73:68:a7:d3:b7:89:96:d3:1b:44:1d:
                    f7:1a:d2:37:4b:3b:08:67:70:1b:0c:a1:bc:b6:42:
                    f1:5a:b3:6c:c3:24:0c:eb:9d:d4:98:25:48:b6:cf:
                    a5:d0:6a:8a:4f:86:f9:0c:3a:00:30:55:1d:72:5a:
                    07:8e:ea:ec:24:c0:90:b2:e5:d2:86:0c:16:68:d0:
                    56:2b:35:e1:d8:ce:8b:b3:ee:d7:c5:2b:a5:37:31:
                    03:1f:ed:49:f0:5a:b5:90:81:ff:29:ea:d1:a2:fe:
                    cb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:83:1D:B3:63:F9:16:E2:A9:74:75:08:F9:BB:32:61:80:65:A0:C1
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/k4Mds2P5FuKpdHUI-bsyYYBloME.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.150.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:a8:38:b2:56:de:4e:37:8f:c6:14:55:dd:93:85:c1:6c:23:
         cb:20:b9:fa:90:05:7c:a7:ee:2d:4f:1d:fb:aa:d2:ae:c2:13:
         91:93:e5:85:9f:1d:db:15:21:2a:96:b1:d4:4e:e6:cf:88:71:
         a8:b0:dd:b2:1b:74:7c:51:1e:f1:8a:34:29:56:7f:d1:b8:45:
         2d:03:dc:3e:64:43:16:07:ee:f5:de:fe:b7:ea:b7:50:89:3e:
         3d:2e:c8:91:10:25:a5:74:92:b0:c1:48:71:56:2a:9c:86:c8:
         8d:05:df:f9:c9:14:dc:c0:64:a3:8a:6d:26:1c:5b:09:37:e2:
         6d:49:16:c5:dd:64:61:df:ff:f9:ef:7d:a5:6f:45:d2:16:9b:
         3b:1d:74:f0:51:9c:90:05:af:36:d0:93:13:94:60:59:5b:cb:
         5f:6d:b8:80:50:d3:3a:04:ec:59:6a:5f:e0:48:e3:09:e6:06:
         27:8f:7f:3d:cb:3f:18:b0:d9:70:da:37:d0:20:00:35:0e:50:
         20:ef:06:24:13:13:82:aa:1c:29:66:6f:a3:02:a2:32:01:63:
         a6:a2:2f:96:dd:3a:46:2d:2e:7d:7b:4b:b4:1a:c9:8a:e8:e8:
         25:f3:44:82:71:a0:3d:5c:bd:42:5c:04:12:02:25:15:8b:5f:
         98:eb:45:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:22:27 2025 by rpki-client