Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9/D7xQD9mV537AAHgkklqDGTOclik.roa
File:                     D7xQD9mV537AAHgkklqDGTOclik.roa (raw, json)
Hash identifier:          FflzxzM1GuK1OUAxnmH+Lrp6CC7Wza+PJKRlskmPp4c=
Subject key identifier:   0F:BC:50:0F:D9:95:E7:7E:C0:00:78:24:92:5A:83:19:33:9C:96:29
Certificate issuer:       /CN=16851F56697ED9D56929BD0242D43B0278FC16E0
Certificate serial:       63
Authority key identifier: 16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/D7xQD9mV537AAHgkklqDGTOclik.roa
Signing time:             Thu 27 Mar 2025 05:01:16 +0000
ROA not before:           Thu 27 Mar 2025 05:01:16 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     2500
IP address blocks:        203.178.136.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16851F56697ED9D56929BD0242D43B0278FC16E0
        Validity
            Not Before: Mar 27 05:01:16 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=0FBC500FD995E77EC0007824925A8319339C9629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:54:97:50:ba:ee:b4:6f:23:7b:bb:e1:d9:18:
                    c2:72:af:3d:49:ba:4e:1a:32:c2:7e:7c:cc:5f:5d:
                    33:22:7d:70:7a:18:20:fd:22:7a:7d:5d:c2:12:ae:
                    2f:38:6c:09:9e:45:d2:7a:23:74:b6:98:c4:f6:7d:
                    ac:a2:76:fd:07:22:1c:9c:b4:05:bc:c4:60:ca:40:
                    bc:e2:54:cc:c2:22:7e:ef:6c:40:71:14:86:64:97:
                    81:17:13:8f:6c:6b:b0:8c:a8:1c:3e:56:2d:3f:5b:
                    74:ae:d7:2d:fd:74:c2:99:c2:3d:fb:03:f4:06:2c:
                    bc:63:1e:24:9a:1a:ea:98:16:f6:37:6b:e5:08:8e:
                    6d:cc:b7:38:c7:95:69:60:32:36:94:7a:67:fd:11:
                    95:5c:d0:2f:fc:ad:2f:13:7c:5a:2a:27:a8:3a:a8:
                    ea:2c:af:bf:39:4f:81:b7:32:ad:79:bb:bf:2e:9d:
                    d8:a3:58:5c:93:92:61:1c:36:2c:80:61:b0:b3:cd:
                    32:dc:25:51:77:50:3b:48:13:0f:63:c8:61:ee:b7:
                    cb:0e:9b:20:42:6f:51:50:e0:31:49:68:48:1c:d5:
                    d2:0b:e6:68:d5:86:d9:d6:1f:b7:fa:9f:18:62:cd:
                    80:0c:5a:ed:d1:be:ae:38:74:48:fd:7b:93:b7:88:
                    79:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:BC:50:0F:D9:95:E7:7E:C0:00:78:24:92:5A:83:19:33:9C:96:29
            X509v3 Authority Key Identifier:
                keyid:16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/D7xQD9mV537AAHgkklqDGTOclik.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.178.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         65:f8:97:a3:a1:17:0f:ef:41:34:ae:1b:2f:a5:af:12:d0:47:
         fc:73:94:cf:15:38:2b:3c:7e:fc:3c:67:47:2e:f5:3a:2b:a2:
         88:d5:0d:9f:b4:a7:2d:54:2c:5e:10:6a:60:ae:d9:76:4e:26:
         4f:39:f5:a6:a8:88:4c:d0:f7:f8:95:89:22:70:d2:30:9e:b7:
         4f:a0:ec:03:ac:fe:b9:b0:2c:eb:11:4f:84:5e:2f:0f:01:d4:
         50:65:50:e2:26:1b:03:be:26:d9:be:5c:cc:e7:6b:b6:75:ec:
         fc:e0:80:b9:d5:f7:5a:8b:62:2c:6f:03:6e:06:9f:09:bd:b7:
         4c:95:78:34:59:cd:22:42:74:ac:c9:20:8b:7d:df:a0:d3:f5:
         7c:26:6a:da:30:d3:79:d6:10:27:0d:87:2f:d5:a0:52:d5:ad:
         45:23:cb:e6:36:f4:d0:b0:49:5d:4b:56:06:7d:93:af:4d:91:
         51:e1:c3:6a:a1:21:e6:a6:34:87:6d:ec:ad:db:5e:28:80:68:
         68:74:ea:24:9d:2f:39:c5:12:c1:b3:b9:f0:fe:43:35:16:f6:
         b7:ce:76:59:d8:e2:be:e7:79:ca:4c:eb:a8:bc:1e:14:83:06:
         2e:bc:ae:6a:94:c2:fc:05:65:1e:5c:8e:62:bb:91:87:21:b3:
         cc:82:9f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:28:10 2025 by rpki-client