Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/AcWAtfoZtWoQGq8TLxbmZOGGtZg.roa
File:                     AcWAtfoZtWoQGq8TLxbmZOGGtZg.roa (raw, json)
Hash identifier:          lB7yjJz/AZ0O06+oSNwztGKegXOxBYZqHVdXkLOLQCQ=
Subject key identifier:   01:C5:80:B5:FA:19:B5:6A:10:1A:AF:13:2F:16:E6:64:E1:86:B5:98
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       86
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/AcWAtfoZtWoQGq8TLxbmZOGGtZg.roa
Signing time:             Sat 01 Jul 2023 01:28:29 +0000
ROA not before:           Sat 01 Jul 2023 01:28:29 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     2518
IP address blocks:        218.227.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Jul  1 01:28:29 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=01C580B5FA19B56A101AAF132F16E664E186B598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fe:27:27:b3:f1:3f:fa:cb:19:ad:35:65:79:
                    60:6b:62:14:e0:03:d8:3b:e5:03:79:1b:b6:85:0c:
                    4d:5a:29:94:87:6e:78:3a:0b:4c:71:67:8a:a6:e0:
                    d5:d1:b7:83:f5:bc:03:fd:6c:24:71:f9:7d:a8:0d:
                    19:fe:bd:2d:d7:80:d8:09:3c:77:d4:f8:f0:a3:4c:
                    2a:81:8e:55:db:df:35:99:c2:62:32:52:71:31:08:
                    ea:14:72:00:b9:67:c5:2e:91:f9:bd:29:49:46:7b:
                    06:65:1d:65:9e:ef:ee:27:e3:a9:fb:d7:e7:b4:f2:
                    b1:1b:b7:71:e7:6b:f8:eb:bf:e8:d6:e8:a2:5d:28:
                    92:5c:81:d9:c8:32:bd:08:1a:6e:e2:da:02:85:40:
                    5d:dd:3e:01:49:5a:fa:e0:5e:bb:c9:fc:c2:15:aa:
                    5f:fc:b7:06:c9:42:a5:c9:f6:10:20:eb:a2:48:37:
                    ad:c0:d2:b4:f8:38:b7:ed:8c:c1:30:44:a1:17:68:
                    13:69:e2:59:11:05:e2:af:f3:ac:ba:76:8a:df:1a:
                    5b:b6:d5:51:72:0c:40:6f:6b:bc:6f:c8:ac:b9:2f:
                    06:d2:d9:7b:61:f7:98:7a:58:be:f8:5b:a2:d8:60:
                    18:68:b0:12:d6:48:04:7e:85:7d:a4:0d:bc:38:2f:
                    99:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C5:80:B5:FA:19:B5:6A:10:1A:AF:13:2F:16:E6:64:E1:86:B5:98
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/AcWAtfoZtWoQGq8TLxbmZOGGtZg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.227.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1a:42:22:cb:38:72:fa:24:29:1f:58:81:64:02:b3:4c:15:9d:
         f3:f4:25:0e:1b:61:97:64:8f:4d:3d:63:f9:1a:52:bb:ac:18:
         3f:3d:93:2a:15:7f:e2:8f:82:cc:f3:75:6b:d6:e7:81:48:42:
         23:91:23:b0:2d:c4:05:2c:fa:75:0e:3a:aa:93:bf:c1:60:de:
         a5:ce:e1:71:b5:0c:a8:18:30:66:aa:e8:d1:2b:d7:04:b5:26:
         2f:1a:c5:c1:7e:1f:0c:76:7c:94:e8:ba:75:95:61:5f:68:ba:
         f7:8b:69:be:8e:d0:5e:48:86:18:5d:d8:e2:fd:93:8a:ef:8c:
         9a:86:93:5b:d9:c3:6c:85:ea:b5:8d:13:06:88:52:14:1e:ba:
         85:ab:eb:22:55:97:ac:ec:c2:f4:b0:d9:12:f4:be:b8:f4:bb:
         c1:1a:2f:d9:c9:6d:20:f3:45:97:f7:b2:0e:5f:06:a2:c6:77:
         c8:fc:b7:5e:b1:b8:26:b0:74:71:ef:4f:53:77:8c:09:0f:8b:
         15:2c:27:e3:fe:7a:77:42:cb:e2:54:e6:3b:6b:d0:b2:7b:51:
         9b:fb:86:63:d9:e8:c9:6d:f4:cb:57:66:b4:2a:87:9e:eb:98:
         19:a5:57:e2:d9:0c:f0:ac:aa:4d:fa:1c:9e:14:87:0b:d3:59:
         53:d9:6f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:43:58 2025 by rpki-client