Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/HKlFOY8JXzn311TY-iusijmW4wA.roa
File:                     HKlFOY8JXzn311TY-iusijmW4wA.roa (raw, json)
Hash identifier:          Wz6+MVums7EA894U86b7QmnsYsBHMlZiiNnmQGgrT4o=
Subject key identifier:   1C:A9:45:39:8F:09:5F:39:F7:D7:54:D8:FA:2B:AC:8A:39:96:E3:00
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       7A
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/HKlFOY8JXzn311TY-iusijmW4wA.roa
Signing time:             Sat 01 Jul 2023 01:28:25 +0000
ROA not before:           Sat 01 Jul 2023 01:28:25 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     2518
IP address blocks:        210.151.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Jul  1 01:28:25 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=1CA945398F095F39F7D754D8FA2BAC8A3996E300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7e:03:f4:25:07:24:9d:e9:ce:55:a2:6a:1d:
                    ac:1a:77:2a:2d:bd:ef:8a:ca:f6:d1:cf:a7:b7:c5:
                    f4:a4:12:1f:f1:0d:a6:d2:02:16:cf:69:1a:d8:b6:
                    aa:04:46:6e:3d:56:e1:32:81:2b:f8:4b:ad:0d:00:
                    22:f3:e1:b0:c8:d5:eb:e1:9b:3a:62:61:70:f3:37:
                    c9:5d:c4:2e:c7:6d:dd:03:8a:85:e7:6a:6b:57:43:
                    34:8a:c5:4b:0e:0e:56:af:36:20:47:01:4c:f2:dc:
                    ca:0c:e6:40:14:fc:3d:b4:b6:ec:98:8a:97:57:8b:
                    99:a2:44:dc:5c:35:c2:70:2b:e5:4a:96:b2:54:96:
                    42:67:77:aa:91:f6:4b:ee:47:ad:10:44:69:1b:e5:
                    20:ac:c3:88:7f:d3:ad:e0:e0:f7:d3:30:4d:c4:c0:
                    7e:59:54:7b:07:28:ea:93:e0:55:7a:0d:16:9c:f4:
                    a9:e8:cb:87:82:af:36:32:ae:95:39:01:2d:ea:50:
                    07:ee:58:a6:2c:61:d5:28:c6:10:cb:40:0b:51:38:
                    d9:6e:7f:86:23:a8:a7:5c:88:de:d4:37:2e:8f:19:
                    2d:3b:f5:47:15:47:3b:aa:25:ae:0e:5a:da:72:56:
                    98:2d:56:6a:46:16:09:0e:f9:a1:a4:f6:bb:7b:8d:
                    4b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A9:45:39:8F:09:5F:39:F7:D7:54:D8:FA:2B:AC:8A:39:96:E3:00
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/HKlFOY8JXzn311TY-iusijmW4wA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.151.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         ba:a4:a5:cf:6e:77:c6:53:36:73:26:e7:6f:90:b8:f8:5f:0c:
         de:c2:26:04:35:75:54:e3:bf:0d:23:9b:5c:d7:ab:91:5e:4b:
         3a:e9:e5:72:b3:d0:61:cd:e1:48:08:2a:17:ad:99:0f:bf:87:
         9f:3b:85:40:71:60:36:6d:de:86:56:50:db:bb:6f:1a:e4:55:
         a7:db:14:c1:62:ad:bb:3f:44:1f:80:f4:39:91:de:e5:c3:ad:
         12:ac:3c:75:e8:b1:d3:be:76:2c:d2:87:6e:25:33:eb:fe:83:
         eb:27:ec:c3:fa:22:ea:74:d8:2a:ec:8f:02:a3:9c:69:97:e9:
         5d:a6:ad:c2:92:87:a1:42:cb:99:bb:96:c2:00:1c:10:f5:70:
         36:5a:12:8f:3d:6c:bb:34:87:0d:b9:21:5a:76:e9:0b:84:7a:
         99:10:4d:ef:e4:17:2c:41:d9:e1:4b:66:8b:4f:56:43:11:80:
         70:63:b6:9f:08:3b:12:f8:56:fa:19:6b:bb:ec:1c:88:0d:a9:
         fe:6d:31:08:3c:70:43:59:9c:34:68:c8:22:59:7d:84:4b:f5:
         39:88:5a:7b:5d:bc:83:e2:d8:cd:d0:26:db:c7:8c:a9:89:a8:
         75:88:8b:02:5d:32:e8:af:a3:72:d8:b4:a2:0d:13:11:1a:6b:
         cc:f4:a0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:19 2025 by rpki-client