Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/y6T6GC6vcavcTiAjTLH6vDjjq4E.roa
File:                     y6T6GC6vcavcTiAjTLH6vDjjq4E.roa (raw, json)
Hash identifier:          ytqxgzVx5OCoxDPmbEdYogeb6zvFmGyxKhJZBEEEHOI=
Subject key identifier:   CB:A4:FA:18:2E:AF:71:AB:DC:4E:20:23:4C:B1:FA:BC:38:E3:AB:81
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       51
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/y6T6GC6vcavcTiAjTLH6vDjjq4E.roa
Signing time:             Fri 22 Jul 2022 02:04:17 +0000
ROA not before:           Fri 22 Jul 2022 02:04:17 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        61.12.128.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 02:04:17 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=CBA4FA182EAF71ABDC4E20234CB1FABC38E3AB81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:0f:ba:de:ba:8a:fe:02:b4:af:62:76:0f:2d:
                    91:2c:52:58:67:59:54:d1:0b:bc:54:d1:7f:bc:66:
                    e4:c4:b8:9b:9a:ae:b2:53:be:2b:2b:8d:67:9a:36:
                    a1:3b:1c:b8:8d:56:bd:43:54:af:51:8b:35:d7:bb:
                    f9:44:d7:01:b0:5e:e4:ae:b1:34:1a:a8:e6:2e:bf:
                    38:ae:01:52:42:4b:64:d4:77:4f:56:c5:db:a1:ba:
                    c9:da:93:d6:6d:bd:52:b4:df:97:18:04:d7:c8:5d:
                    07:39:e1:94:42:55:a6:c0:e1:dc:d1:af:95:22:ea:
                    7d:ae:cc:ce:81:f3:39:94:2e:aa:53:8a:e7:3a:0e:
                    71:57:69:ba:8e:f8:a5:88:05:78:67:ce:61:f5:63:
                    b3:6a:89:91:9c:f9:a8:ea:02:29:a4:dd:d0:e1:f7:
                    9f:4e:fa:7e:42:de:0b:88:6d:f2:eb:3d:5a:31:b8:
                    9a:1b:55:1c:cf:7b:6d:d8:68:f8:9b:ed:07:e9:0e:
                    31:76:e7:85:ad:61:d7:ab:9c:a2:5f:46:00:17:c7:
                    f4:0e:3b:fc:74:3d:f1:71:0b:34:ba:4b:fe:a1:1d:
                    18:c6:bb:e1:9c:23:95:43:3f:a9:2f:89:49:01:7f:
                    42:f1:95:dc:f5:d1:10:a8:2a:5c:a9:92:e4:43:f7:
                    71:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A4:FA:18:2E:AF:71:AB:DC:4E:20:23:4C:B1:FA:BC:38:E3:AB:81
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/y6T6GC6vcavcTiAjTLH6vDjjq4E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.12.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         8b:16:65:1e:4e:c3:58:a8:c7:bc:84:66:04:2e:b1:37:4f:7d:
         c5:04:b9:2c:a7:41:49:14:9b:bf:65:81:4e:0b:c5:81:ba:ab:
         f5:19:1a:e2:28:76:ba:f6:92:b4:d0:83:f9:b0:9b:39:9f:38:
         7a:ab:be:cb:db:03:88:4b:9d:35:61:c2:53:b6:a6:20:33:21:
         c1:ff:5d:c8:43:56:f2:2c:9e:56:9a:d7:a9:d5:94:7e:c4:e3:
         a3:dd:5c:21:66:dc:c0:00:94:dd:7a:2f:04:59:a6:13:85:95:
         f4:7d:45:7f:21:3a:0f:cd:88:69:1d:57:3d:32:83:89:c6:32:
         c6:17:9e:07:bd:4c:d2:87:eb:b2:41:25:c6:6e:71:35:2f:70:
         8d:ca:08:c8:35:9e:1f:10:da:43:7c:c2:ca:f8:2d:60:07:d8:
         3d:0c:31:6e:e3:f2:7a:ed:19:a0:a8:4c:2c:3c:d9:5c:22:b0:
         e2:26:4c:19:0c:52:76:0f:d6:6a:51:61:cb:ef:e4:bf:2c:48:
         30:fe:e9:56:56:de:b2:67:24:d6:09:9a:e1:0e:f8:8d:59:e0:
         f3:a9:95:5c:2c:f1:87:6c:c3:ee:c1:0c:e6:0f:93:f0:89:90:
         ed:2b:64:f0:de:06:62:56:36:e4:da:30:65:21:a1:1c:ad:3a:
         6c:3f:ed:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:30 2025 by rpki-client