Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/YKpwi7ViJilFGKNZVCdCZ4PDfIY.roa
File:                     YKpwi7ViJilFGKNZVCdCZ4PDfIY.roa (raw, json)
Hash identifier:          KpTeLdlAZ3tNJfLlDEJAzewN1qj7km79ljN/VlKDiZE=
Subject key identifier:   60:AA:70:8B:B5:62:26:29:45:18:A3:59:54:27:42:67:83:C3:7C:86
Certificate issuer:       /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial:       30
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/YKpwi7ViJilFGKNZVCdCZ4PDfIY.roa
Signing time:             Wed 20 Apr 2022 09:22:25 +0000
ROA not before:           Wed 20 Apr 2022 09:22:25 +0000
ROA not after:            Sat 15 Apr 2023 01:30:02 +0000
asID:                     4725
IP address blocks:        210.134.80.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
        Validity
            Not Before: Apr 20 09:22:25 2022 GMT
            Not After : Apr 15 01:30:02 2023 GMT
        Subject: CN=60AA708BB56226294518A3595427426783C37C86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bf:97:4f:ed:46:49:b8:95:25:87:cf:4d:2d:
                    b5:7d:fc:ad:ce:25:34:49:80:75:cb:3f:e0:f0:df:
                    a0:04:59:64:9a:23:a1:1c:69:f7:5c:be:75:19:76:
                    d9:e3:2f:94:4f:f8:aa:49:78:f6:79:c5:8a:53:c1:
                    8d:43:13:4d:f8:3d:6e:7d:d7:d3:4a:6b:d3:0b:2d:
                    bd:29:fc:5e:11:af:90:fc:6d:36:34:aa:2c:47:e0:
                    d0:f5:d9:51:fa:b4:17:ef:25:5d:74:49:ac:73:17:
                    01:50:62:85:06:a6:b7:68:cb:31:6d:bc:1d:98:6b:
                    45:cd:93:ba:49:31:ae:56:03:ee:4d:ee:08:80:48:
                    09:d0:d8:48:74:b7:39:25:21:8a:ff:e2:ae:35:a8:
                    7e:0b:dc:d5:49:41:9e:44:8d:b6:f8:ab:b7:29:d3:
                    96:44:36:b8:71:58:e7:46:ea:bf:e6:fe:33:63:da:
                    4b:0b:a8:57:95:4f:b1:41:a2:5c:3e:1b:52:5a:c7:
                    58:3a:c2:dc:35:93:9c:3b:5c:a0:ec:34:9c:41:2c:
                    cd:bd:8f:27:d3:5e:60:e5:8f:64:01:3a:0a:7e:e5:
                    ff:d7:90:f0:c3:8f:8b:2f:0c:de:33:4d:33:bd:af:
                    50:ac:24:03:c5:3f:c4:e0:1d:0f:66:0b:94:ed:70:
                    0b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:AA:70:8B:B5:62:26:29:45:18:A3:59:54:27:42:67:83:C3:7C:86
            X509v3 Authority Key Identifier:
                keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/YKpwi7ViJilFGKNZVCdCZ4PDfIY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.134.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7c:fb:a2:ab:88:19:3e:c7:b6:bd:45:64:15:39:f6:2f:7c:ac:
         32:35:cf:82:3f:99:e1:a8:60:8e:03:90:0b:dc:e6:de:47:d5:
         be:49:03:11:06:c2:b9:81:49:f9:15:b3:1d:5a:73:2c:dd:06:
         3b:cc:9d:aa:06:89:17:12:43:a2:82:d3:1d:5d:fd:c1:2d:dc:
         b8:6a:5f:00:73:0e:37:10:8d:c7:e8:51:12:30:28:c4:ac:e2:
         69:82:7a:bf:61:f0:c1:a8:45:5f:ac:f7:04:b0:05:c1:55:14:
         d8:f3:44:68:51:c9:43:09:90:8e:f3:55:ab:27:5b:5d:62:5f:
         1c:34:b3:27:1f:db:b5:b5:75:b4:7f:22:9d:62:19:69:3a:f9:
         ce:6a:e2:e1:ee:d5:75:af:3f:48:a2:61:5a:1b:b1:c6:12:45:
         2e:4f:05:92:31:e3:ee:1d:23:0f:64:11:1f:ae:ff:c1:c5:ea:
         7f:3a:b9:b7:52:58:7a:2b:80:ee:d8:81:cb:c0:d8:ba:e2:0b:
         c2:ab:e5:44:5c:df:bb:a6:b5:25:06:76:17:9c:a6:27:5e:9c:
         76:5d:b8:70:cf:e7:e4:d5:57:4f:44:69:3c:f5:1b:88:7f:ab:
         02:19:c0:c6:4a:66:98:0c:24:92:54:5a:01:35:af:64:b2:bb:
         21:ad:0b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:33 2025 by rpki-client