Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9/c-E5uV943M6gfADaesvDjvMzHcw.roa
File:                     c-E5uV943M6gfADaesvDjvMzHcw.roa (raw, json)
Hash identifier:          OB8flhhFjaANeWjOvcpvhYTpd4bwfpEWpmvejuETKmU=
Subject key identifier:   73:E1:39:B9:5F:78:DC:CE:A0:7C:00:DA:7A:CB:C3:8E:F3:33:1D:CC
Certificate issuer:       /CN=16851F56697ED9D56929BD0242D43B0278FC16E0
Certificate serial:       61
Authority key identifier: 16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/c-E5uV943M6gfADaesvDjvMzHcw.roa
Signing time:             Thu 27 Mar 2025 05:01:15 +0000
ROA not before:           Thu 27 Mar 2025 05:01:15 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     2500
IP address blocks:        203.178.128.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16851F56697ED9D56929BD0242D43B0278FC16E0
        Validity
            Not Before: Mar 27 05:01:15 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=73E139B95F78DCCEA07C00DA7ACBC38EF3331DCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3c:16:fe:62:0d:d3:54:d2:34:b4:97:ab:2c:
                    9f:a2:09:3b:5f:ef:1d:42:b4:0b:dd:18:22:db:1c:
                    43:bd:c1:7c:4e:02:01:1d:fa:48:cc:30:90:73:76:
                    c3:e6:7f:12:6e:fc:b2:42:f4:87:79:48:d2:95:74:
                    5f:c8:6f:3a:c2:d5:3f:52:ea:97:99:9d:94:c4:39:
                    ce:75:f8:34:6b:38:5c:e0:f4:e4:36:69:20:51:c7:
                    60:9c:17:54:6f:b5:e3:d0:e3:62:1b:39:df:90:a5:
                    ac:d8:d2:e9:96:70:33:5e:2d:47:41:fd:08:f8:c0:
                    75:3f:d0:97:82:73:c2:bf:c2:fc:ab:52:a8:9e:df:
                    56:ad:b6:06:ca:7b:9c:91:40:bf:71:1c:87:63:e5:
                    15:a5:42:85:da:2b:0b:0d:b8:a2:8f:7c:cd:bf:b8:
                    6d:08:27:a6:d4:aa:97:9d:58:54:d9:b9:bb:76:54:
                    19:4f:db:bb:6a:b7:7d:3e:8d:fc:69:d9:46:31:43:
                    d6:91:00:49:76:35:b1:7f:89:14:c7:dc:fc:11:88:
                    e3:cc:c1:f6:c0:ea:89:57:1f:91:69:8f:4d:ee:eb:
                    f0:b8:1c:99:1a:6a:1b:25:fd:3f:42:34:44:5f:50:
                    be:4b:f0:41:19:1c:a6:99:cb:34:8d:0d:92:f6:bf:
                    87:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E1:39:B9:5F:78:DC:CE:A0:7C:00:DA:7A:CB:C3:8E:F3:33:1D:CC
            X509v3 Authority Key Identifier:
                keyid:16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/c-E5uV943M6gfADaesvDjvMzHcw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.178.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5f:29:05:c9:7f:34:da:82:87:f4:c7:81:3b:74:20:79:97:5e:
         f7:8d:ec:1c:4c:43:d3:36:2d:f6:fd:64:3c:42:1a:9b:f0:63:
         b0:a1:96:4b:cc:9e:38:79:7c:ee:0e:d9:32:5b:bf:2f:20:43:
         3d:78:e3:68:ac:e8:03:da:11:f1:fb:92:3d:b3:ad:d8:a1:58:
         47:2d:eb:64:06:cf:f9:63:07:26:d7:4c:4f:5a:73:6b:d7:33:
         12:87:b0:d4:69:b5:e1:79:83:63:fe:2e:47:31:ea:1e:0a:79:
         66:ba:10:18:29:ce:4f:2d:4f:ad:f4:31:27:43:90:e1:24:ca:
         23:38:c4:80:36:65:e6:f8:a1:04:5c:b2:0b:a7:b1:72:1d:8f:
         43:28:70:5c:32:52:81:65:24:06:c5:50:e6:76:de:f2:30:c8:
         78:a9:d3:e8:26:f9:a7:8a:29:e2:e4:f2:35:20:52:40:53:10:
         16:b6:d6:35:10:46:5f:23:0c:1d:92:1e:35:92:60:e3:f9:3f:
         57:5d:d4:f4:72:7c:06:01:3d:30:82:6c:d1:43:a9:ac:09:f5:
         28:93:89:b6:52:fd:08:db:54:2a:28:8c:a1:26:3c:e9:9d:9d:
         1e:2c:e1:56:45:b1:d2:b5:d3:97:ae:f2:1a:69:c1:08:42:89:
         b0:70:13:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:18:20 2025 by rpki-client