Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/2ED6OQrhrMeUyNgklJIl8zZ1QIU.roa
File:                     2ED6OQrhrMeUyNgklJIl8zZ1QIU.roa (raw, json)
Hash identifier:          T0OeizIvTE8goO+TTJVLQDDQYnzxW8FvPVTZPIUShgA=
Subject key identifier:   D8:40:FA:39:0A:E1:AC:C7:94:C8:D8:24:94:92:25:F3:36:75:40:85
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       C6
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/2ED6OQrhrMeUyNgklJIl8zZ1QIU.roa
Signing time:             Sun 01 Jan 2023 01:29:16 +0000
ROA not before:           Sun 01 Jan 2023 01:29:16 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     10021
IP address blocks:        203.167.32.0/20 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Jan  1 01:29:16 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=D840FA390AE1ACC794C8D824949225F336754085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:43:00:82:61:d4:8f:a0:e6:4e:3e:74:78:2c:
                    17:7d:6d:7e:6e:b7:0b:fb:b5:0a:ee:39:73:12:75:
                    e8:b6:40:0d:7b:73:17:2f:94:eb:85:6c:78:21:2b:
                    b3:59:62:35:9d:48:57:96:89:c5:a6:aa:68:b6:eb:
                    86:4d:8d:f5:10:9f:08:7a:fc:a6:7d:dc:94:e7:25:
                    d2:5b:2a:4c:6c:a9:c8:1f:5d:44:48:ee:09:5c:b5:
                    e8:56:9d:be:dd:c9:e8:b6:c5:46:37:30:29:91:7a:
                    4a:7f:54:cf:7b:b4:ba:bd:77:f8:54:28:24:42:af:
                    ed:1f:7e:9b:2c:56:c0:67:73:22:a6:45:2a:ef:fd:
                    ba:8b:70:f3:46:c5:20:bd:87:10:93:a0:4a:a1:4a:
                    39:93:8c:e3:94:c8:51:48:9f:29:63:bc:f7:d3:73:
                    07:ff:e1:20:0e:69:d7:ad:5d:b4:f3:a6:d2:fa:a0:
                    26:38:03:7e:36:5c:7c:2d:62:94:02:3a:a7:74:42:
                    92:03:ee:24:b7:f7:58:87:35:33:4e:d1:95:37:31:
                    ec:18:5f:ba:6f:fb:53:8e:dc:fb:59:5b:67:f2:08:
                    42:12:32:6a:3f:38:12:1c:a9:88:3c:cb:45:bb:83:
                    14:4f:1b:4e:a7:9d:1f:de:51:d0:4a:97:be:5c:b8:
                    51:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:40:FA:39:0A:E1:AC:C7:94:C8:D8:24:94:92:25:F3:36:75:40:85
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/2ED6OQrhrMeUyNgklJIl8zZ1QIU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.167.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         05:05:a1:09:f6:e8:58:3e:27:78:8d:54:fb:0e:e4:ba:e1:b9:
         b8:3d:74:19:87:19:c1:f9:da:d8:f5:d9:8d:7b:44:fa:fa:06:
         00:22:1d:db:f1:e1:5b:17:0c:b4:ff:9e:4a:d4:ad:15:b5:3c:
         15:5d:16:32:36:22:4c:2d:1b:d0:c2:c5:19:81:98:23:2a:17:
         da:eb:6b:52:39:82:c6:51:2c:88:6e:35:89:23:c2:b3:1b:57:
         21:a4:73:6b:a8:8d:9b:28:b0:1d:e9:e0:c3:c7:2e:38:a1:b8:
         4a:5f:23:b9:0e:9e:6c:b2:9c:7b:cb:8f:67:a8:8d:e3:95:a1:
         66:cd:5c:76:6e:7a:75:9d:99:87:eb:46:88:df:77:49:3b:40:
         9a:b4:99:ba:e7:5f:1b:9a:c1:d0:9d:96:0b:4b:59:32:78:a2:
         7f:ac:55:03:1f:53:55:9b:59:d3:16:95:b7:31:25:3a:ee:24:
         02:31:6a:2e:49:52:b5:bb:5d:5c:41:42:bf:1c:ce:61:d6:4a:
         2f:05:f6:f1:cc:94:35:4f:b7:12:fe:58:2c:58:5d:18:b1:14:
         1a:78:ae:f1:b4:d4:da:61:06:6d:10:93:b7:4a:71:ef:4b:f6:
         9d:bc:40:0e:1f:a7:3b:31:74:dc:a3:e7:51:03:11:43:62:4f:
         cb:52:0e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:08 2025 by rpki-client