Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/942/5FaRTCnvWJxvaf7JzbfIl0Ca_XU.roa
File:                     5FaRTCnvWJxvaf7JzbfIl0Ca_XU.roa (raw, json)
Hash identifier:          q0iyNP/zQoPnoywpf9arE9ZAk1uAxb/WAeJTl3z54eI=
Subject key identifier:   E4:56:91:4C:29:EF:58:9C:6F:69:FE:C9:CD:B7:C8:97:40:9A:FD:75
Certificate issuer:       /CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578
Certificate serial:       04
Authority key identifier: 8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/5FaRTCnvWJxvaf7JzbfIl0Ca_XU.roa
Signing time:             Wed 20 Apr 2022 07:22:13 +0000
ROA not before:           Wed 20 Apr 2022 07:22:13 +0000
ROA not after:            Thu 20 Apr 2023 02:53:00 +0000
asID:                     37908
IP address blocks:        175.103.0.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578
        Validity
            Not Before: Apr 20 07:22:13 2022 GMT
            Not After : Apr 20 02:53:00 2023 GMT
        Subject: CN=E456914C29EF589C6F69FEC9CDB7C897409AFD75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2c:35:a0:e9:10:57:0b:e8:f0:6b:0e:1c:16:
                    fa:62:ae:39:7d:17:d6:55:db:f1:e8:de:9e:74:35:
                    f7:21:55:23:d6:33:2d:f4:27:e6:0c:dc:6f:0c:18:
                    c1:2c:aa:87:d3:4d:de:f7:37:c1:fc:eb:81:05:76:
                    a8:54:a1:a9:31:bb:ca:9d:0f:2d:84:7e:13:eb:fd:
                    83:6d:3c:8a:4e:d1:00:1d:e9:69:14:45:da:9c:8e:
                    34:21:f7:be:5a:75:e6:bc:51:7d:ea:c6:19:e0:7b:
                    8e:31:c6:96:e8:6b:ab:c0:05:02:05:6e:ae:fa:1f:
                    6a:aa:2f:3e:16:b7:78:cc:14:85:43:35:ee:09:74:
                    94:cd:6c:dc:59:5e:f3:8c:3c:2a:81:13:a0:e3:ae:
                    59:dc:9d:de:9f:86:fa:57:40:0f:ee:84:b9:bc:ee:
                    cc:c3:d0:ef:cf:a8:b9:b7:59:8c:aa:08:21:af:7e:
                    1b:54:52:97:1a:1f:11:da:27:9b:a0:91:cd:88:1c:
                    2c:a4:ef:96:3e:3d:e3:4b:a1:39:b5:36:bb:0b:1e:
                    96:a0:13:5d:86:9a:b9:74:ae:f9:1b:20:75:71:59:
                    33:5d:ee:5e:4d:11:ca:f4:03:ef:5f:5f:6b:6b:0c:
                    0c:2c:0b:e4:a8:38:6c:88:82:aa:72:3b:a0:7c:78:
                    cf:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:56:91:4C:29:EF:58:9C:6F:69:FE:C9:CD:B7:C8:97:40:9A:FD:75
            X509v3 Authority Key Identifier:
                keyid:8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/5FaRTCnvWJxvaf7JzbfIl0Ca_XU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.103.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:d4:16:4b:ee:f6:25:a6:67:8f:2b:79:0c:9b:ec:11:35:be:
         b5:2a:59:d3:12:53:5c:8c:2a:20:c7:9d:a0:9f:58:c2:8e:e4:
         fd:38:7a:37:49:3d:08:3d:74:52:ac:e1:98:eb:4d:1d:5f:dc:
         57:9f:fc:dc:f5:18:97:1c:10:27:60:e5:c2:5d:3b:8c:a1:20:
         4e:92:34:4a:72:2f:fe:2d:d3:7a:ce:37:6c:3d:58:14:42:e2:
         52:d0:93:f9:f9:d2:cc:2d:5c:56:7a:3d:72:ed:91:30:43:ca:
         ea:ab:ca:70:e6:8b:4e:97:42:04:d7:6c:f6:21:8a:00:44:2c:
         f7:85:f4:cb:c4:1b:d8:9f:06:c7:c5:0a:b9:2c:32:ab:0c:d1:
         8f:8a:4e:7c:69:c9:32:23:76:4a:d5:91:12:91:88:ef:7c:e7:
         34:70:70:f7:cb:94:d0:5f:21:3c:47:43:ec:d9:c2:3d:1c:f7:
         f6:ac:98:84:99:e4:19:c3:c3:c1:7d:82:7f:34:56:f1:9e:ae:
         7c:37:07:57:f1:46:e5:9a:4c:f2:74:fe:b7:e8:c5:86:d0:ec:
         d0:35:94:40:d4:00:4a:f4:98:b0:78:e5:b3:36:de:ea:56:33:
         e8:8e:5b:76:46:e8:0d:ce:51:9c:c9:ad:f2:7f:30:c3:f7:42:
         ea:fb:ae:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:06:50 2025 by rpki-client