Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/924/B6Q8VBGkr535z5jvM-qs9N0JzrE.roa
File:                     B6Q8VBGkr535z5jvM-qs9N0JzrE.roa (raw, json)
Hash identifier:          YtjXgdOlzK1xYWhp+wq+PvPbPA2I0QLNlNqjP/kQEso=
Subject key identifier:   07:A4:3C:54:11:A4:AF:9D:F9:CF:98:EF:33:EA:AC:F4:DD:09:CE:B1
Certificate issuer:       /CN=06A8484DF4FBAFE5C48D988A046B6AB6A81B2DF3
Certificate serial:       12
Authority key identifier: 06:A8:48:4D:F4:FB:AF:E5:C4:8D:98:8A:04:6B:6A:B6:A8:1B:2D:F3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/B6Q8VBGkr535z5jvM-qs9N0JzrE.roa
Signing time:             Mon 08 Nov 2021 06:33:46 +0000
ROA not before:           Mon 08 Nov 2021 06:33:46 +0000
ROA not after:            Sat 15 Oct 2022 01:30:02 +0000
asID:                     63790
IP address blocks:        103.167.206.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06A8484DF4FBAFE5C48D988A046B6AB6A81B2DF3
        Validity
            Not Before: Nov  8 06:33:46 2021 GMT
            Not After : Oct 15 01:30:02 2022 GMT
        Subject: CN=07A43C5411A4AF9DF9CF98EF33EAACF4DD09CEB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:34:f4:7c:b0:2a:a9:b4:08:47:fd:f0:6f:2d:
                    8d:5a:2d:6e:83:a4:e6:9a:22:2d:f3:5d:52:99:87:
                    23:73:b6:07:c9:64:84:3f:ca:39:9a:37:a8:75:7c:
                    4c:25:26:ee:15:47:93:94:bb:cb:bf:5c:f2:20:53:
                    29:b3:07:23:c0:db:91:e2:c3:67:c5:33:64:fb:35:
                    fe:91:c0:2b:ab:32:3d:8c:f9:86:d2:19:d7:d7:81:
                    25:f0:04:93:c9:a0:01:fe:b9:99:ff:db:2c:11:37:
                    8d:d5:73:29:38:52:5f:da:27:67:9e:c2:09:62:be:
                    5f:40:d5:c0:c1:42:96:e6:8c:74:b1:f5:85:83:da:
                    1c:dc:e0:ba:d8:2f:c7:0d:e3:a3:2b:01:90:61:34:
                    a8:60:3d:e5:ef:47:65:0d:75:a6:42:f7:25:e2:0a:
                    89:1e:94:01:a0:c4:31:ad:a6:a0:67:04:69:0c:85:
                    14:5e:84:05:7e:f3:b9:28:34:15:4c:d2:f2:73:e6:
                    77:63:2b:5b:94:b5:1b:f8:c8:44:8e:7e:c7:22:78:
                    3d:8c:2f:3b:e6:03:ef:2c:21:bd:32:c2:b2:d5:3a:
                    12:d6:c1:58:f3:19:49:f6:a1:6f:27:08:b5:c7:74:
                    0f:22:e9:96:13:6b:7c:8f:68:d2:c2:5d:b6:3f:97:
                    43:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A4:3C:54:11:A4:AF:9D:F9:CF:98:EF:33:EA:AC:F4:DD:09:CE:B1
            X509v3 Authority Key Identifier:
                keyid:06:A8:48:4D:F4:FB:AF:E5:C4:8D:98:8A:04:6B:6A:B6:A8:1B:2D:F3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/B6Q8VBGkr535z5jvM-qs9N0JzrE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:38:6f:04:82:1c:5c:8e:f3:3e:d0:b0:0f:80:49:07:a4:03:
         6c:77:11:c8:11:1a:0a:34:d0:de:44:aa:b8:9e:2a:13:be:af:
         b6:25:d6:e9:1d:2d:83:a7:dc:da:f7:09:d8:25:14:67:f7:62:
         a5:89:84:d7:57:cf:60:93:e7:bc:02:2b:53:5a:f2:59:d6:a2:
         30:c6:09:35:46:bc:0d:44:08:d6:df:93:22:fb:a1:6c:90:4f:
         9c:e2:fe:bc:48:e3:ea:8f:9e:2c:3c:16:e0:eb:1c:ee:13:b7:
         21:8e:57:2e:0c:49:2a:01:6b:be:e3:1a:1e:e4:9a:12:08:40:
         76:d2:d4:a0:58:9f:d2:fc:0e:b2:72:d5:b9:19:a2:f0:3a:64:
         41:1b:31:39:90:9a:e5:d8:92:8f:6e:3a:38:74:6f:ea:6d:73:
         c7:b2:0f:f2:29:45:4f:32:ff:9f:6a:b5:f2:5a:9a:61:ba:c1:
         fb:23:1f:cc:71:1d:94:fd:ef:76:4c:1a:2f:0c:b4:aa:e7:e9:
         84:82:72:f8:46:81:43:78:2a:3e:7b:d0:21:ad:ca:61:76:d2:
         1f:19:b9:2f:b0:05:79:47:22:07:d6:c2:df:6c:c5:40:18:6e:
         eb:cf:c7:a4:c2:90:bb:51:44:dc:0e:67:89:c0:2e:13:6d:76:
         2e:f7:5b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:48:13 2025 by rpki-client