Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/tRFR6GqmgUFwHHjmYtQwNB2i53s.roa
File:                     tRFR6GqmgUFwHHjmYtQwNB2i53s.roa (raw, json)
Hash identifier:          LhENuhU7VNWimfCmy9vKw2+WerXGy8vLR3Oyy50zhoo=
Subject key identifier:   B5:11:51:E8:6A:A6:81:41:70:1C:78:E6:62:D4:30:34:1D:A2:E7:7B
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       01CB
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/tRFR6GqmgUFwHHjmYtQwNB2i53s.roa
Signing time:             Fri 07 Jul 2023 04:16:38 +0000
ROA not before:           Fri 07 Jul 2023 04:16:38 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        183.181.104.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459 (0x1cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:16:38 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=B51151E86AA68141701C78E662D430341DA2E77B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6e:15:ac:d5:93:82:2f:a9:5a:92:4c:41:16:
                    29:db:9c:26:f5:de:2c:9c:8a:55:52:d1:10:ff:02:
                    35:26:5a:c5:08:3e:35:cc:77:c1:e2:db:1f:d6:83:
                    fa:0f:4e:33:ff:9e:91:31:a7:4b:49:c9:fe:ca:4a:
                    ba:51:7d:19:ce:2e:61:e6:ce:b5:22:12:c5:f1:dd:
                    4b:7a:9b:da:b7:56:4f:3a:15:b8:00:99:7e:7f:30:
                    91:83:be:72:94:9b:c4:bc:4a:f7:f5:3e:04:cc:31:
                    6d:41:9e:f2:04:2b:c8:20:7f:6f:dc:76:69:9b:95:
                    a5:92:dd:71:a5:23:e3:4b:24:54:53:4f:16:8b:52:
                    b6:5b:1a:54:39:e7:a8:70:dd:43:07:ae:21:5d:15:
                    8d:e8:02:ab:3a:b4:df:38:ac:00:24:41:21:2b:5b:
                    9b:36:48:ee:f1:4e:8a:ce:b0:11:a3:1d:41:8a:6e:
                    1e:52:ed:e3:7a:bc:20:7c:de:41:cf:96:88:8d:a8:
                    89:41:12:c1:ec:e2:fb:80:84:40:e7:9d:2e:d6:3f:
                    20:69:76:dd:c0:1c:96:4d:8e:90:31:42:ca:d0:38:
                    f2:fc:f9:8a:43:1b:e0:30:97:a3:d8:cd:17:0f:80:
                    e8:d2:b1:04:fc:fe:58:59:30:fd:55:0e:d9:76:63:
                    e6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:11:51:E8:6A:A6:81:41:70:1C:78:E6:62:D4:30:34:1D:A2:E7:7B
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/tRFR6GqmgUFwHHjmYtQwNB2i53s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         68:79:58:bf:06:6b:7e:05:91:d1:7d:3d:42:4d:c9:a3:55:63:
         d5:d9:38:f4:87:fa:c7:a7:6f:c5:b5:e2:1c:5c:5e:48:52:8b:
         b2:d4:5c:4f:6a:c6:91:bd:04:54:f6:bb:0e:0d:3d:07:b3:6a:
         af:09:0e:cc:eb:88:6d:0d:d2:9b:1a:89:c2:5f:bd:9d:06:09:
         91:fb:a9:fc:1f:22:77:a9:48:26:04:03:2a:c1:e2:c1:32:69:
         34:d7:d8:17:b1:ad:aa:60:93:a4:ce:3e:40:a6:11:fc:72:ae:
         84:bc:7d:f4:da:b1:ed:e6:f4:ed:f4:04:92:9f:37:0c:4a:80:
         65:95:94:0c:c4:0f:19:8a:b3:1a:81:7f:a8:89:9a:58:77:9f:
         ea:ad:f5:29:00:45:d6:d9:35:22:55:38:84:3e:2d:12:09:4a:
         1d:22:c8:2e:77:3e:6a:fa:f4:fd:c4:fd:9b:73:48:bf:09:28:
         5e:fc:69:12:17:6c:1c:ba:cb:04:2b:a4:fe:2f:94:51:5f:33:
         44:b4:68:d0:85:d0:f4:17:3d:27:52:63:4c:ad:15:ce:6c:3f:
         0d:28:ee:d6:89:2a:bf:06:98:e3:17:29:55:ca:55:7f:09:ce:
         69:34:e3:b4:83:b3:31:dd:ba:66:2f:62:e8:31:9e:ad:2b:3b:
         ac:93:25:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:08 2025 by rpki-client