Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/UCJeS82R124g6ilG3u6gLSEKj1o.roa
File:                     UCJeS82R124g6ilG3u6gLSEKj1o.roa (raw, json)
Hash identifier:          8Jzespb9hgQQjQ4HExlPaywrMbMNlkGggEOT5XA11+c=
Subject key identifier:   50:22:5E:4B:CD:91:D7:6E:20:EA:29:46:DE:EE:A0:2D:21:0A:8F:5A
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       0F
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/UCJeS82R124g6ilG3u6gLSEKj1o.roa
Signing time:             Thu 20 Oct 2022 06:24:19 +0000
ROA not before:           Thu 20 Oct 2022 06:24:19 +0000
ROA not after:            Fri 20 Oct 2023 06:07:19 +0000
asID:                     9374
IP address blocks:        202.165.112.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Oct 20 06:24:19 2022 GMT
            Not After : Oct 20 06:07:19 2023 GMT
        Subject: CN=50225E4BCD91D76E20EA2946DEEEA02D210A8F5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:14:87:5d:a4:e8:55:e9:5d:cb:6e:87:8a:13:
                    48:a6:cc:65:17:bd:34:5b:25:2b:c4:b6:61:12:45:
                    6c:d5:75:d3:68:95:a9:0a:d9:05:cc:0c:75:d6:fa:
                    87:dd:3a:39:a4:05:0c:33:3d:72:19:15:f5:33:c7:
                    33:25:b5:35:b1:21:49:94:aa:2b:1d:ac:30:46:6d:
                    69:9c:79:21:13:96:27:40:bb:cf:f4:82:fa:04:2f:
                    a0:62:02:2b:93:2a:6b:68:a2:b8:09:93:ec:68:b2:
                    0c:f3:6e:a0:19:77:bd:81:2c:f3:a6:73:a9:86:64:
                    bd:85:7c:31:8b:33:c5:43:1b:7d:43:82:00:f9:cc:
                    85:86:ba:55:d7:07:72:0d:f6:7d:80:1e:3d:73:12:
                    f0:16:36:42:83:af:19:f3:1a:c6:97:ba:6b:e5:5e:
                    d7:72:bc:c9:07:37:52:f3:84:5f:d6:a4:cf:a2:f2:
                    a6:a2:0a:0c:5b:b1:3e:d8:47:ae:d2:02:ef:14:b5:
                    f4:83:00:02:d6:2e:c3:23:2b:92:66:46:b5:0d:0e:
                    7a:d8:00:a4:bd:b0:5c:cd:76:36:ec:c0:99:6b:88:
                    fc:20:65:f3:f4:d0:e9:07:6e:a3:18:57:80:f0:c4:
                    57:f5:4e:9d:46:87:6d:c4:ce:a3:9c:77:35:c5:1c:
                    8d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:22:5E:4B:CD:91:D7:6E:20:EA:29:46:DE:EE:A0:2D:21:0A:8F:5A
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/UCJeS82R124g6ilG3u6gLSEKj1o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.165.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3c:d0:b9:4d:50:c1:2f:08:0f:72:85:32:8e:e5:b4:c6:fe:5f:
         22:2b:06:db:45:7e:1e:20:fa:d6:02:50:2b:8e:50:be:85:c9:
         ba:7a:84:bb:4d:55:c3:5d:a7:b5:1e:f2:8c:b2:2f:ca:f5:b0:
         e8:38:b8:9f:f5:09:00:68:04:02:9a:06:6b:c7:ab:4a:af:65:
         e4:10:e8:68:ee:1d:3d:7e:89:80:7e:f0:a9:86:01:e7:d5:62:
         a5:e4:ac:12:96:5c:07:93:8f:62:67:e0:f5:49:28:4f:d0:f1:
         53:22:3c:56:6d:4f:1a:a7:53:9d:34:e4:69:59:40:95:8d:ce:
         54:44:8f:87:bd:15:dc:11:5f:62:fe:98:56:f4:05:11:7d:03:
         7a:e5:85:05:54:5b:fd:9d:87:f0:cd:c0:f5:4e:dd:ea:58:96:
         ee:2c:09:31:3e:73:b3:3c:40:07:c6:51:a5:5c:a2:48:9f:c1:
         f4:9a:2c:75:69:a9:ba:5c:a2:23:c0:61:02:2f:be:2e:97:8a:
         24:4a:8b:fa:80:63:1b:64:28:dc:22:2f:00:59:be:c9:45:77:
         cd:2b:e2:e1:7b:00:da:e3:e6:9f:f0:1e:fa:13:5d:2c:5e:b8:
         d0:71:69:0d:96:80:10:06:f5:f8:08:05:c7:27:4c:df:28:f2:
         b6:ca:a1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:17 2025 by rpki-client