Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/958/rXryY5A8rWowj57sadeL_ZRXwto.roa
File:                     rXryY5A8rWowj57sadeL_ZRXwto.roa (raw, json)
Hash identifier:          /Itqdj1IovH0tUzM9kLZy56DD29fh4SWcY8hQoi1OwY=
Subject key identifier:   AD:7A:F2:63:90:3C:AD:6A:30:8F:9E:EC:69:D7:8B:FD:94:57:C2:DA
Certificate issuer:       /CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
Certificate serial:       71
Authority key identifier: 99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/rXryY5A8rWowj57sadeL_ZRXwto.roa
Signing time:             Fri 17 Mar 2023 13:10:31 +0000
ROA not before:           Fri 17 Mar 2023 13:10:31 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     38631
IP address blocks:        43.223.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
        Validity
            Not Before: Mar 17 13:10:31 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=AD7AF263903CAD6A308F9EEC69D78BFD9457C2DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a8:38:b0:ea:62:8e:88:5b:97:83:84:05:59:
                    32:b5:22:8b:e7:26:43:a1:de:cf:c6:5f:1e:5b:39:
                    1a:9a:32:0c:30:82:7e:1b:01:d5:70:f8:f1:2a:a6:
                    50:9c:e6:eb:58:87:a6:e8:8f:91:9e:bd:66:79:39:
                    13:c5:a7:78:7a:b8:0a:0f:e8:37:99:5d:85:ed:b3:
                    e1:e6:4e:4b:d0:f9:e9:05:86:9b:29:56:b8:75:bc:
                    86:19:60:e2:0d:6a:1a:2e:32:99:3e:9d:9f:94:e2:
                    74:6d:85:09:77:a7:3c:71:25:aa:7d:a9:9b:67:57:
                    3e:e2:a9:4f:3a:7c:54:23:47:4e:45:d4:97:fc:57:
                    63:0c:36:47:cf:01:bc:82:d5:e8:d1:c6:09:11:34:
                    fd:fd:cd:47:14:1f:cc:df:98:8c:6d:da:ae:ba:7b:
                    00:2b:3b:6a:98:5e:4f:22:e8:0a:75:b2:59:52:f7:
                    bb:f2:8e:79:9b:ec:9b:1c:42:22:87:7d:c7:a5:42:
                    da:ab:c2:a7:74:9b:60:bb:82:ff:d6:89:7d:6b:c3:
                    54:39:e9:7c:74:bc:ec:a3:4d:9e:ba:65:0e:eb:2e:
                    f6:9b:c2:12:30:c4:71:91:25:13:2b:25:4a:09:79:
                    e2:6b:b9:d8:3c:9c:b9:80:22:e4:6b:2c:d4:d0:ef:
                    dd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:7A:F2:63:90:3C:AD:6A:30:8F:9E:EC:69:D7:8B:FD:94:57:C2:DA
            X509v3 Authority Key Identifier:
                keyid:99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/rXryY5A8rWowj57sadeL_ZRXwto.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.223.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a2:11:bc:a1:c4:35:bd:8d:7e:0f:7c:df:89:b1:3e:fa:a4:5f:
         63:13:d7:f1:cf:01:95:df:8d:0a:a2:e6:63:5f:45:72:a8:a0:
         77:60:28:db:cb:8c:76:9d:3d:de:b1:05:1c:1e:84:97:be:74:
         ce:5b:ea:6c:a6:65:db:6b:5d:2f:6e:eb:31:cb:6b:f0:03:55:
         69:ea:df:02:dc:c1:a1:97:4e:5f:39:76:4b:3b:b9:e3:ca:49:
         ad:6d:fc:0c:79:ff:22:c9:fd:a3:71:f4:0f:9d:68:0f:0d:ed:
         1c:9c:9c:02:c1:85:e8:e7:03:66:c7:bd:d8:52:20:cf:c9:0f:
         d4:a2:87:7d:8b:6b:43:3c:e1:2f:6d:d1:46:f4:b0:61:6d:32:
         92:e5:8b:61:62:d0:14:af:41:21:0d:70:f9:6d:0b:dc:a1:dc:
         16:ef:2a:23:84:a2:ba:0e:86:46:c3:4e:f7:ec:87:b8:6d:6a:
         6e:f9:9a:16:b4:c3:a4:c9:22:87:c7:23:51:85:56:67:bb:45:
         65:fe:7d:63:db:71:0a:ee:21:b5:48:46:9b:21:df:86:87:3d:
         33:18:bb:7d:77:23:2b:43:ab:e9:a4:cc:c2:21:08:c3:ce:01:
         85:b7:1c:81:0e:d9:70:67:f5:37:90:30:96:4e:04:9e:13:02:
         d6:52:91:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 01:57:03 2025 by rpki-client