Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/SSktm-zmSegQhxqvewjIxypFfj0.roa
File:                     SSktm-zmSegQhxqvewjIxypFfj0.roa (raw, json)
Hash identifier:          3XJ8R2W3xEEy47ccFR6h+clhpeAkKRr1hHFadr6Vhbk=
Subject key identifier:   49:29:2D:9B:EC:E6:49:E8:10:87:1A:AF:7B:08:C8:C7:2A:45:7E:3D
Certificate issuer:       /CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Certificate serial:       1C
Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/SSktm-zmSegQhxqvewjIxypFfj0.roa
Signing time:             Tue 24 May 2022 04:50:27 +0000
ROA not before:           Tue 24 May 2022 04:50:27 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     10019
IP address blocks:        61.115.240.0/20 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318
        Validity
            Not Before: May 24 04:50:27 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=49292D9BECE649E810871AAF7B08C8C72A457E3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:05:48:f8:de:4a:82:44:f9:33:4d:88:b2:5c:
                    48:57:54:7e:99:30:d8:63:07:04:dd:9f:12:6e:49:
                    5c:5e:35:19:e2:1f:a1:85:1f:ff:b8:87:3c:cd:25:
                    44:e0:54:1a:c4:1d:ea:af:69:0b:6d:1a:d4:f4:fb:
                    84:e6:d4:9d:f3:6d:d2:98:a8:1b:9e:c0:59:35:5b:
                    22:96:55:9d:48:4b:38:f0:14:a3:3a:c0:93:df:83:
                    8f:33:db:7b:9f:2d:10:a7:10:99:0b:4f:16:82:89:
                    46:a1:29:bb:bd:e5:3b:5e:b4:02:25:7d:2d:5e:20:
                    7d:59:d8:b1:00:26:ea:26:c8:7b:d0:74:fb:b2:de:
                    c1:9f:2f:d5:88:fc:d1:33:af:c2:ea:fe:5f:c1:d5:
                    b4:f5:f7:3e:57:0c:be:67:8f:db:6d:21:54:f9:d1:
                    09:1a:ce:e9:f9:b2:c6:15:b8:fc:32:17:26:2d:9b:
                    5a:7c:7a:ca:ff:10:f4:5a:93:6d:c2:2c:2f:50:10:
                    d5:9e:68:3f:df:c0:bd:66:f6:7b:f7:4d:a1:cf:e6:
                    76:56:4b:71:fe:3c:4c:4c:8e:9f:1d:35:1f:b1:39:
                    63:f1:41:17:e6:b3:28:08:c7:64:45:00:b7:37:1f:
                    00:93:db:2c:12:41:24:aa:35:60:2e:56:52:38:5a:
                    d8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:29:2D:9B:EC:E6:49:E8:10:87:1A:AF:7B:08:C8:C7:2A:45:7E:3D
            X509v3 Authority Key Identifier:
                keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/SSktm-zmSegQhxqvewjIxypFfj0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.115.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a9:be:a3:a3:a7:30:11:5e:75:e4:84:17:b4:cb:10:11:c8:59:
         a9:ff:38:6b:38:c0:04:2c:28:8c:4b:71:3d:ee:e3:ae:1e:73:
         d3:68:df:3e:54:48:0b:fb:4f:f8:0a:fd:0f:f9:ac:cf:cc:84:
         48:cf:b4:57:b0:38:3b:28:19:27:12:df:eb:d8:a2:1c:24:2b:
         a5:36:4b:5e:54:0c:b0:ab:7a:6c:a1:a2:48:cb:46:e1:95:cc:
         38:35:30:bd:19:2c:98:2d:0c:65:78:bf:94:b4:9d:7d:8d:ce:
         f2:8b:96:1e:5d:ec:9c:d9:55:ff:57:d7:63:05:14:43:99:67:
         80:22:d5:50:73:d2:54:a6:4b:21:7c:40:7f:a4:d2:77:42:2e:
         3a:d7:0d:9f:27:9a:3c:4b:a2:4f:6c:52:8d:33:fd:88:b0:8b:
         f4:54:b9:75:7e:2f:fe:0b:1e:c0:27:4b:1f:fd:29:5b:fe:1c:
         44:71:f9:13:b4:8f:11:cb:f6:e1:c3:35:fa:1e:87:dd:e1:bf:
         2e:97:7d:9e:68:c0:e8:24:9c:e1:57:c8:1c:ac:c2:c6:fc:07:
         ca:6a:10:fc:a1:f4:06:8f:e1:76:14:31:9a:fc:a9:3b:f9:0c:
         9f:79:ac:ea:0d:1a:00:b4:58:1f:27:58:b6:96:3a:20:82:d6:
         97:5a:a3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:37 2025 by rpki-client