Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/fy_73XH4cSYjXM6Zr9I-Ak_zVxU.roa
File:                     fy_73XH4cSYjXM6Zr9I-Ak_zVxU.roa (raw, json)
Hash identifier:          wlC46C4/hmmEwiHMtKiSpS1cj2DSzroBPq4XjRJSVAU=
Subject key identifier:   7F:2F:FB:DD:71:F8:71:26:23:5C:CE:99:AF:D2:3E:02:4F:F3:57:15
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       32
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/fy_73XH4cSYjXM6Zr9I-Ak_zVxU.roa
Signing time:             Wed 01 Feb 2023 01:30:29 +0000
ROA not before:           Wed 01 Feb 2023 01:30:29 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     17676
IP address blocks:        126.144.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: Feb  1 01:30:29 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=7F2FFBDD71F87126235CCE99AFD23E024FF35715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:75:90:d2:b7:98:2e:43:37:5f:3d:59:02:d4:
                    79:0f:ec:e4:e7:81:f7:d3:ed:2e:1f:86:6c:e9:e6:
                    a1:72:c6:05:ba:4a:c1:95:9b:a6:84:29:15:19:aa:
                    b8:7b:6d:c6:3b:78:6e:88:9a:a7:42:83:d6:ee:11:
                    bb:36:dc:13:d9:ec:f1:91:fe:1d:c4:9a:05:ed:86:
                    bf:58:f4:16:ea:ab:20:40:1a:0c:22:56:a3:f6:87:
                    eb:ef:15:70:21:ca:a0:17:8f:cb:b9:63:ff:aa:75:
                    f5:e6:a0:eb:e6:5a:70:61:54:8e:f8:33:2e:30:c8:
                    47:17:58:ab:2c:86:19:90:60:0e:be:92:5f:f6:1f:
                    31:4f:57:b4:8b:de:2a:9e:a2:b5:95:b2:af:ca:82:
                    26:47:b8:87:76:1b:e9:32:f4:4f:b0:91:5a:28:60:
                    eb:13:ac:80:05:ad:a9:95:fe:25:19:4c:5e:c2:db:
                    1c:9d:6b:8c:e0:af:c9:d5:6b:c4:f8:8a:4e:12:b0:
                    3d:92:15:17:ed:03:1a:5c:da:03:78:8d:7a:fb:7b:
                    15:8a:09:b0:89:70:d2:cf:28:ed:ea:e9:90:65:e9:
                    f1:39:94:ce:aa:5d:91:d6:4d:70:57:aa:a0:da:59:
                    63:a9:f6:58:53:b3:91:85:4b:ef:1f:19:d5:68:61:
                    b5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2F:FB:DD:71:F8:71:26:23:5C:CE:99:AF:D2:3E:02:4F:F3:57:15
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/fy_73XH4cSYjXM6Zr9I-Ak_zVxU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  126.144.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3c:bb:46:a5:3a:31:cf:ce:4a:60:5f:e9:2b:ee:41:d1:0d:e8:
         14:a1:5b:fe:c5:cb:79:53:e5:14:33:96:d8:1e:1d:6c:2b:a1:
         29:8e:f8:eb:29:ca:a0:eb:ef:c8:40:10:41:9f:8a:9d:d7:e2:
         35:3e:b4:ed:71:d7:3b:26:59:2a:8d:45:17:2b:12:8e:3e:53:
         9d:eb:fb:6b:c6:8a:20:18:35:44:20:45:c3:4b:5d:a8:f9:cb:
         dc:20:65:3f:33:ae:4f:c6:7f:35:02:6c:b2:4a:0e:7f:59:aa:
         51:a9:37:c8:ef:69:be:78:cc:82:af:0a:bb:ee:86:e8:1d:09:
         b7:3b:ab:2c:92:91:8b:59:58:17:98:dc:5d:2d:97:32:0f:3f:
         c0:e9:dc:90:2f:46:70:1f:31:97:70:64:09:84:c9:b6:31:45:
         39:ae:a9:1a:19:79:e0:f5:65:8d:a2:18:11:dd:f7:03:0b:f6:
         c5:14:12:b4:4d:d8:00:2c:9d:50:37:8e:0c:af:df:2b:a9:b9:
         a5:68:31:0b:66:30:ca:55:50:90:c9:a3:82:59:5a:3f:32:11:
         28:b6:00:38:32:8a:ce:d9:7e:68:74:83:9e:02:aa:be:59:d9:
         97:03:9d:f6:54:fe:da:88:1f:e2:9e:5e:db:40:5a:6b:e6:95:
         74:4b:eb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:14 2025 by rpki-client