Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/K6ykT5CT1J7HfAOakxdhrOBP1v4.roa
File:                     K6ykT5CT1J7HfAOakxdhrOBP1v4.roa (raw, json)
Hash identifier:          GchbaAgtdlVWxD1p64TDimH25KzoTi7bx/Pv/TO6DCI=
Subject key identifier:   2B:AC:A4:4F:90:93:D4:9E:C7:7C:03:9A:93:17:61:AC:E0:4F:D6:FE
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       F6
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/K6ykT5CT1J7HfAOakxdhrOBP1v4.roa
Signing time:             Mon 31 Oct 2022 02:38:04 +0000
ROA not before:           Mon 31 Oct 2022 02:38:04 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        221.132.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 31 02:38:04 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=2BACA44F9093D49EC77C039A931761ACE04FD6FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:11:2b:9c:95:0e:bd:ae:e4:51:e3:b9:05:fe:
                    38:43:c2:ba:d6:b9:26:39:71:c3:0e:3b:90:aa:ca:
                    50:2b:c1:e8:5f:c3:aa:31:e1:0f:a8:69:08:ca:bc:
                    04:45:a5:cb:d0:14:31:8e:53:91:74:d0:e5:e9:e6:
                    6b:58:6b:e0:ed:a0:e7:f3:72:04:db:d9:a6:97:99:
                    3e:b2:90:c2:a6:32:8e:83:04:3d:85:73:c5:8b:62:
                    42:26:dc:8a:e2:e0:ee:7a:5d:46:4d:4c:89:43:7a:
                    a0:aa:03:d6:7d:7c:80:09:00:9a:a3:69:1d:af:63:
                    32:05:60:47:88:96:fe:c5:0c:27:c0:e9:5a:82:e5:
                    b0:63:74:61:d6:d9:ad:0a:2d:5e:24:22:af:9c:fb:
                    c0:19:dd:e2:f2:25:1d:bc:83:e8:b6:ad:00:29:6d:
                    35:9d:bd:6f:5a:aa:44:a8:2c:e3:1a:c2:1b:85:de:
                    04:67:66:a9:69:20:49:5b:a6:18:01:f1:ea:97:ec:
                    5a:d3:26:94:40:58:9d:94:d6:14:25:e2:3e:7c:28:
                    bf:23:01:da:a5:87:e2:ad:83:71:54:84:88:9b:52:
                    a5:42:06:c3:02:ac:7d:d4:0f:01:32:a7:6e:ab:d3:
                    c3:16:c7:a9:00:85:08:2a:df:4f:ff:5a:f8:79:2c:
                    d1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:AC:A4:4F:90:93:D4:9E:C7:7C:03:9A:93:17:61:AC:E0:4F:D6:FE
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/K6ykT5CT1J7HfAOakxdhrOBP1v4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  221.132.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7d:79:8f:59:af:be:d6:95:31:f7:d2:d1:ed:a0:cb:cc:c0:4e:
         ec:83:15:34:88:9e:03:19:80:89:22:81:87:86:b8:99:9b:1c:
         19:c7:4c:64:55:de:2a:23:7e:91:96:8c:77:3e:e0:39:55:b8:
         d8:d0:92:e1:67:d6:61:86:d0:ee:1c:bd:48:aa:9c:67:23:dc:
         5a:89:91:7b:b9:ac:b8:9c:d8:0f:20:9e:09:f4:b6:c2:7b:bb:
         da:9f:55:ab:2b:ab:14:5d:7e:5a:97:f1:4a:6d:1f:ba:d6:c0:
         a5:9f:46:98:93:b3:2f:1d:25:6d:fa:47:a3:b8:9a:e1:1a:58:
         c9:80:95:90:1c:82:90:61:59:4f:d4:55:07:b3:bd:0f:9d:11:
         39:35:ff:5b:72:25:78:5f:4c:9e:7c:7d:32:53:9f:84:f8:61:
         c0:44:6e:2f:64:1b:7f:b0:8e:87:06:9a:e0:dc:e5:c3:0e:9e:
         23:05:95:ea:c6:c4:89:21:a4:14:2f:e9:06:41:e5:22:3b:5e:
         ec:ae:f4:4d:a4:c3:46:3b:9b:11:0f:5b:9c:d2:1b:2b:f2:56:
         df:b1:2e:aa:e4:a2:85:6d:6d:e2:df:1e:99:6b:db:0c:e6:f8:
         ee:29:2f:7c:c0:e4:c3:45:20:5a:23:67:03:1e:1d:4e:90:0a:
         6c:5e:a9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:02:36 2025 by rpki-client