Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/iF8GOu9zvoRTYM6yq3J5vM3pHzg.roa
File:                     iF8GOu9zvoRTYM6yq3J5vM3pHzg.roa (raw, json)
Hash identifier:          +kIWkiwKFt5H5KH1fVxcYJjvUe73vh+cihJd/3Hp5Dc=
Subject key identifier:   88:5F:06:3A:EF:73:BE:84:53:60:CE:B2:AB:72:79:BC:CD:E9:1F:38
Certificate issuer:       /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial:       7D
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/iF8GOu9zvoRTYM6yq3J5vM3pHzg.roa
Signing time:             Tue 05 Nov 2024 10:31:55 +0000
ROA not before:           Tue 05 Nov 2024 10:31:55 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     55900
IP address blocks:        123.100.156.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
        Validity
            Not Before: Nov  5 10:31:55 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=885F063AEF73BE845360CEB2AB7279BCCDE91F38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:38:44:73:5d:19:12:6f:12:96:1e:c7:73:bf:
                    db:a1:95:ea:3b:97:96:b0:14:bd:e7:e8:ca:fb:4b:
                    5a:eb:3a:46:4b:62:5d:35:10:08:07:ad:e2:7c:e3:
                    10:f5:6f:78:fa:d3:ff:38:dc:f2:ce:ae:06:8a:08:
                    97:89:f6:28:74:c6:2c:55:68:7a:26:f8:cb:0b:0b:
                    3d:28:57:97:3e:4c:de:71:c7:eb:0e:bc:8a:6d:f4:
                    7e:53:83:40:cd:e6:28:25:7f:26:94:16:8c:7b:81:
                    f4:f1:3d:41:ff:5e:1c:44:ee:5e:65:00:b5:37:50:
                    da:57:bc:08:33:05:82:77:cc:d1:fe:19:d6:28:70:
                    89:cf:5d:cf:fe:09:8a:51:44:1f:8b:1f:be:99:4f:
                    67:a3:25:4c:3a:a7:e9:09:db:de:62:a6:6f:a7:56:
                    ac:b2:dc:c4:eb:80:fe:0e:09:d4:5d:de:3b:6a:a7:
                    7e:e7:e5:f6:60:70:7c:ef:72:27:b8:27:16:c6:bd:
                    68:be:3d:69:dc:cc:bc:17:34:76:48:22:14:d7:95:
                    97:d5:e7:a2:8c:d2:71:e2:20:18:d2:9a:a8:29:5f:
                    4d:43:56:a9:dc:e4:8b:20:9f:6c:fa:89:31:5f:a3:
                    4c:31:50:f6:f8:48:16:cd:82:cb:07:b1:dc:09:a9:
                    7d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:5F:06:3A:EF:73:BE:84:53:60:CE:B2:AB:72:79:BC:CD:E9:1F:38
            X509v3 Authority Key Identifier:
                keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/iF8GOu9zvoRTYM6yq3J5vM3pHzg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.100.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:14:48:8f:38:37:ea:a7:ac:49:de:46:41:e9:79:75:69:5a:
         1a:6a:34:9f:10:d3:72:3f:a5:23:aa:92:18:2a:1d:bd:dd:64:
         33:be:6e:dc:f0:c6:e1:87:88:cb:06:f5:50:ed:f0:fa:50:90:
         d1:6d:dc:09:92:73:9b:cb:3c:b2:65:3c:90:57:f0:0e:43:b5:
         da:e1:a5:86:8d:15:5b:21:74:08:f4:6d:4e:b4:fe:f3:a0:af:
         bb:a0:b7:7a:77:92:58:c0:73:11:3b:d1:5c:b9:31:41:f8:80:
         3f:f8:b1:e2:6a:0b:23:fd:48:59:c3:df:2d:27:19:55:12:ee:
         a2:89:a0:99:0a:da:16:59:72:f9:c8:72:20:16:21:55:27:0c:
         3c:93:df:5e:d1:e8:71:95:8a:18:3d:2d:29:e2:4f:b1:ec:d6:
         32:af:bd:8a:3e:5d:75:3d:2f:03:e7:79:5d:7a:2e:37:9f:d9:
         ab:de:49:47:c9:90:ca:af:ff:a5:9b:99:94:b1:2c:8b:63:90:
         6f:0d:d7:51:bc:ec:e3:0a:dc:93:38:48:29:d9:5f:bd:1e:c8:
         82:aa:cf:a2:50:e0:00:12:65:aa:56:cb:92:b7:7f:ad:d3:89:
         a6:52:14:c0:86:09:2a:4e:1d:ca:ce:b5:5b:65:44:60:ee:57:
         cd:d5:7f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:37:36 2025 by rpki-client