Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/446/Cd4HDhR7dqTECSevNL78HesSkUE.roa
File:                     Cd4HDhR7dqTECSevNL78HesSkUE.roa (raw, json)
Hash identifier:          pajN2xYzQgotv33sRXof6duZpYHCnUNSdxW81T0gt5Y=
Subject key identifier:   09:DE:07:0E:14:7B:76:A4:C4:09:27:AF:34:BE:FC:1D:EB:12:91:41
Certificate issuer:       /CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
Certificate serial:       22
Authority key identifier: 93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/Cd4HDhR7dqTECSevNL78HesSkUE.roa
Signing time:             Wed 31 Jul 2024 01:32:32 +0000
ROA not before:           Wed 31 Jul 2024 01:32:32 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     9997
IP address blocks:        203.171.8.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
        Validity
            Not Before: Jul 31 01:32:32 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=09DE070E147B76A4C40927AF34BEFC1DEB129141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:20:e7:f6:5f:2e:0d:72:36:28:e0:5f:e3:4a:
                    b9:f0:b4:a5:5f:0a:21:10:5a:71:67:08:49:bd:b9:
                    ac:06:5d:93:30:21:8b:a3:31:2d:c2:5b:2f:94:a4:
                    47:5d:2e:ff:c3:44:56:9e:a0:80:c1:87:ed:cc:38:
                    47:95:b1:e5:f5:f9:81:15:56:77:b4:19:33:35:7a:
                    01:1e:7b:22:56:2f:e2:d7:a6:0c:b8:c1:df:58:a4:
                    52:19:c6:7c:15:f2:01:fa:7b:14:3b:c3:8c:85:10:
                    9f:10:cf:69:73:1b:2f:fd:fc:27:20:a0:f1:96:82:
                    cf:8b:ee:cd:83:e5:df:8c:95:05:09:61:b2:cc:fa:
                    14:47:36:a1:66:5b:f4:55:58:8d:e1:ad:59:02:2e:
                    50:f4:12:3a:5a:9a:01:75:ce:21:52:b9:79:71:5e:
                    5c:56:a7:62:b1:2c:27:78:43:99:b7:d9:a6:f0:86:
                    3e:43:fa:77:de:1c:a5:a5:0f:af:ed:9c:fa:36:9a:
                    fc:7f:0a:2c:c7:be:52:d3:db:a5:89:b1:e0:6a:e8:
                    e2:56:b2:a6:80:98:c5:32:dc:e3:62:f9:d4:1c:4c:
                    c1:5a:26:c3:3a:76:96:7a:29:ea:5f:ea:d6:a7:f4:
                    89:67:af:10:82:32:b4:35:b8:71:62:9b:cb:7c:66:
                    5f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:DE:07:0E:14:7B:76:A4:C4:09:27:AF:34:BE:FC:1D:EB:12:91:41
            X509v3 Authority Key Identifier:
                keyid:93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/Cd4HDhR7dqTECSevNL78HesSkUE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.171.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ad:f2:04:2f:97:bb:1a:f9:4d:61:b6:ee:76:b2:2a:a0:69:72:
         88:db:51:b4:10:c5:c9:8d:af:c1:0b:82:94:ae:28:74:0b:80:
         47:c3:8c:e7:5b:7e:b3:fa:ec:ea:f2:0a:59:09:8d:a4:bb:c6:
         0b:74:90:31:97:41:70:15:32:17:b3:88:05:bd:b0:54:fa:b5:
         9c:e5:3f:8e:1f:f0:83:42:b6:60:3c:94:f6:c2:8a:d2:bc:54:
         71:c0:94:4f:90:76:36:01:db:02:b5:b4:1b:37:83:40:46:37:
         86:3a:d2:50:7a:cc:37:39:0a:e4:e1:a8:2b:0f:d9:ba:61:a0:
         e8:76:7c:2f:e1:fb:1c:e2:fc:0c:48:95:98:59:dd:31:d9:cf:
         00:e7:25:de:e8:85:71:48:69:cc:36:30:58:37:51:a2:d9:9d:
         f4:a8:15:a1:8d:ab:4f:b9:32:f1:09:b2:62:38:af:c8:95:37:
         a0:71:4f:f8:10:26:d8:80:0e:8d:f1:b3:30:3d:d5:3f:4d:2c:
         97:04:b5:4a:b4:75:34:cf:34:51:67:39:8c:97:f3:fe:3c:70:
         5e:ce:3c:df:01:8b:1d:11:6b:fa:d6:f7:58:7d:1e:a3:f7:2a:
         de:51:41:6d:e2:46:1c:ee:af:90:cd:a4:73:f8:ab:be:74:2d:
         f2:8b:70:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:31 2025 by rpki-client