Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/oLcb-qMmzBHqYTYuWmSE0Ya9j9g.roa
File:                     oLcb-qMmzBHqYTYuWmSE0Ya9j9g.roa (raw, json)
Hash identifier:          TKlW8FZ/FHMnH5txbQ36hS2WU6MNlht8jtT7mus1f0E=
Subject key identifier:   A0:B7:1B:FA:A3:26:CC:11:EA:61:36:2E:5A:64:84:D1:86:BD:8F:D8
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       B9
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/oLcb-qMmzBHqYTYuWmSE0Ya9j9g.roa
Signing time:             Tue 26 Jul 2022 05:03:12 +0000
ROA not before:           Tue 26 Jul 2022 05:03:12 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        219.99.80.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185 (0xb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 26 05:03:12 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=A0B71BFAA326CC11EA61362E5A6484D186BD8FD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:20:23:fc:8e:e9:ac:ca:f4:c0:5c:2c:65:cc:
                    95:aa:08:5c:4a:20:de:a9:7b:3f:21:bf:a7:b9:9c:
                    17:2b:50:5b:1c:ec:09:f7:49:24:ef:8f:b6:a9:a6:
                    e8:52:e7:59:a5:47:4a:b1:1c:5a:0b:d0:a8:06:3d:
                    a7:91:8d:ea:91:44:5c:df:31:2b:e7:ad:7b:3d:65:
                    83:9d:96:e4:39:c1:5c:f0:01:c7:4a:e0:77:51:d2:
                    18:58:44:63:74:b7:89:e5:8e:64:c0:43:25:6b:fc:
                    ee:ce:37:e2:37:1b:5b:3c:fc:cc:bc:8e:9c:3c:51:
                    83:a0:ed:a8:8f:27:90:8b:e0:05:5a:2c:b2:be:fb:
                    f6:f0:37:01:06:60:96:87:c5:fe:da:b2:48:95:2d:
                    42:10:fe:18:f5:f4:b7:ec:30:51:ab:aa:5c:f4:9a:
                    7c:ec:9e:df:e0:33:82:e7:3c:4f:b4:3d:cc:85:f1:
                    62:90:14:40:fb:49:11:0e:dc:f9:00:0a:86:d4:55:
                    04:19:62:f5:55:05:64:f3:6e:13:db:69:19:dc:61:
                    a9:88:a1:b4:96:ff:f2:3e:d2:f0:4a:9c:35:9e:c2:
                    bb:c0:51:9e:7f:5b:90:b0:ed:cd:29:1b:76:48:4f:
                    d6:49:b8:0e:ef:50:ed:6b:9e:87:27:02:50:f9:07:
                    ec:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B7:1B:FA:A3:26:CC:11:EA:61:36:2E:5A:64:84:D1:86:BD:8F:D8
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/oLcb-qMmzBHqYTYuWmSE0Ya9j9g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.99.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         27:cb:ab:eb:e0:33:15:3d:f4:3d:79:13:65:f8:66:a2:a5:f4:
         18:83:49:ca:84:0b:4c:71:b4:7b:78:3a:46:b8:14:33:b2:1e:
         53:d2:28:72:e8:d1:fa:e2:ec:97:e4:ca:73:83:1e:8c:6d:ce:
         6c:29:5a:54:e7:75:0b:02:ae:f0:e4:d5:11:a2:64:a8:01:fc:
         49:2a:77:3f:84:78:bb:50:3c:60:59:87:93:83:39:2b:09:6b:
         20:37:b9:99:66:ca:ae:c4:10:85:83:30:a1:00:e5:a7:07:51:
         41:2f:a8:95:69:ce:7e:4e:c3:06:a8:48:8e:4d:42:01:a2:5b:
         4b:89:2f:b8:2e:cf:d5:60:09:55:1b:e8:bb:a8:be:a6:3c:6f:
         d9:87:46:05:f2:8d:44:d2:b9:58:a5:2b:24:77:35:bf:f8:79:
         a5:40:3e:b9:0f:65:4b:2e:aa:5f:ec:07:3d:82:a6:a1:b5:a3:
         c8:3e:4e:0a:c3:d1:ef:bd:19:c7:1b:b7:73:05:2e:cf:8d:31:
         88:67:0c:30:94:45:9d:21:56:2e:6b:2c:56:b0:76:ce:cf:64:
         12:c1:00:aa:98:67:d4:01:fa:7d:d2:d8:5e:df:15:06:e9:48:
         bd:2f:c7:53:05:93:10:fd:d8:40:52:a1:47:9e:35:cf:ee:72:
         fb:11:2e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:51:51 2025 by rpki-client