Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/lkSl1MOI9O5YF8gHsj2l1OTfKJ0.roa
File:                     lkSl1MOI9O5YF8gHsj2l1OTfKJ0.roa (raw, json)
Hash identifier:          hGWii0LVJhGMQfPvSRiQw2URi7n4l8i3aY17gu4Rnqk=
Subject key identifier:   96:44:A5:D4:C3:88:F4:EE:58:17:C8:07:B2:3D:A5:D4:E4:DF:28:9D
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       CF
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/lkSl1MOI9O5YF8gHsj2l1OTfKJ0.roa
Signing time:             Thu 28 Jul 2022 05:25:15 +0000
ROA not before:           Thu 28 Jul 2022 05:25:15 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        175.103.176.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 28 05:25:15 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=9644A5D4C388F4EE5817C807B23DA5D4E4DF289D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:22:ed:78:72:94:46:ca:1d:d2:d6:62:a6:aa:
                    0f:36:d5:b0:62:c8:59:4f:3f:0b:4a:ef:8a:b9:84:
                    33:40:27:94:77:63:93:5b:dd:34:47:9e:6e:c3:e8:
                    4e:f8:4a:15:f6:8c:b1:9b:07:25:48:90:a1:be:f5:
                    2f:04:cd:1a:2b:a8:27:fd:2a:e2:25:2e:6c:41:3f:
                    73:9d:9b:4f:d4:ed:de:85:ef:ad:8d:54:a6:58:3d:
                    49:ec:84:8f:57:04:a2:c1:22:0b:2a:6f:bf:77:fc:
                    c7:a1:eb:f5:fe:63:6d:fb:1c:20:02:5d:08:6e:97:
                    7b:99:35:4a:bf:fb:07:52:d2:43:86:bb:a9:94:6c:
                    06:e6:20:4f:d5:1c:63:46:38:7e:6b:09:5e:c7:f5:
                    4c:22:ae:db:4d:33:8b:2a:4a:7d:f4:73:c0:30:31:
                    f3:4f:5c:6d:87:b9:02:2c:ac:ea:ee:46:d6:6c:fa:
                    3a:c4:0b:73:3d:cd:d1:79:0c:00:6f:1b:7b:f4:b7:
                    21:40:2a:56:64:9e:f9:6d:f1:2c:97:69:3e:5d:04:
                    51:d7:f4:5e:27:8b:02:79:00:65:a4:ff:a7:54:b5:
                    cc:a3:dd:69:6c:b4:5f:29:23:84:95:1d:72:71:54:
                    a7:b4:76:7a:39:68:0e:05:ce:f5:60:91:8f:b0:e7:
                    d5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:44:A5:D4:C3:88:F4:EE:58:17:C8:07:B2:3D:A5:D4:E4:DF:28:9D
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/lkSl1MOI9O5YF8gHsj2l1OTfKJ0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.103.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:1d:14:0c:b8:da:62:82:1e:8c:a1:f5:30:70:7c:54:34:99:
         d9:a1:c3:32:36:ad:a8:21:b1:b2:21:75:a6:6a:28:ac:7d:10:
         5d:83:a3:07:14:61:42:fd:52:ec:88:b7:72:c6:6c:e4:0d:6d:
         ec:e3:b2:93:de:8c:14:fe:3e:f1:97:22:09:6f:b1:03:6d:5f:
         86:78:93:f5:98:b5:18:83:7a:3c:e4:d2:c8:ac:61:45:b1:5a:
         09:72:bf:f8:d8:b7:5e:ba:39:37:67:ba:50:db:36:65:95:6b:
         e7:44:4f:a1:49:d6:40:ef:97:57:3d:79:6c:dd:f6:bd:cf:b8:
         76:83:9d:e4:dc:4b:8b:92:a9:31:df:0a:47:b5:78:0f:31:59:
         5e:92:ad:0e:96:28:74:1b:53:96:a2:d7:72:d3:5b:b9:01:f6:
         4c:8e:f0:d2:97:59:a1:a9:0f:1e:79:31:8b:cf:9b:ec:0c:c5:
         34:c1:23:f2:5b:13:ca:9a:4d:d4:12:78:81:94:b6:41:1d:80:
         70:ca:ba:fd:dc:94:e0:4a:95:ae:b9:88:2c:9f:3c:d1:47:81:
         9b:9d:a1:e6:d1:d5:6d:0a:66:25:43:1f:43:67:b7:77:48:b3:
         cc:d6:b4:a8:c6:94:a5:ac:be:46:46:d0:12:0f:c7:c8:07:89:
         a7:5a:7f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:38 2025 by rpki-client