Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/961/MMMYoZW1Juhis0YjEcuCXjHru98.roa
File:                     MMMYoZW1Juhis0YjEcuCXjHru98.roa (raw, json)
Hash identifier:          FMmXylkYYJfbpYo+iRcuetvp0DX/Xz7SlFtDp81RxQQ=
Subject key identifier:   30:C3:18:A1:95:B5:26:E8:62:B3:46:23:11:CB:82:5E:31:EB:BB:DF
Certificate issuer:       /CN=E655C82691325EC8F4425BC0A66B1A6223231D71
Certificate serial:       14
Authority key identifier: E6:55:C8:26:91:32:5E:C8:F4:42:5B:C0:A6:6B:1A:62:23:23:1D:71
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5lXIJpEyXsj0QlvApmsaYiMjHXE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/961/MMMYoZW1Juhis0YjEcuCXjHru98.roa
Signing time:             Tue 10 Jan 2023 00:29:12 +0000
ROA not before:           Tue 10 Jan 2023 00:29:12 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     38648
IP address blocks:        203.76.164.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E655C82691325EC8F4425BC0A66B1A6223231D71
        Validity
            Not Before: Jan 10 00:29:12 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=30C318A195B526E862B3462311CB825E31EBBBDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ce:a9:70:fd:c1:02:c9:90:e9:f4:05:cc:e8:
                    cf:a1:93:3d:59:de:ec:ef:a6:ec:b9:2b:79:07:00:
                    75:81:24:59:df:d9:3c:cb:b8:5d:77:a7:0e:b9:7d:
                    d5:80:d8:97:92:5e:42:e5:3b:bf:9f:b4:d5:66:dc:
                    23:a6:8c:a9:69:42:da:3b:a0:79:40:b5:cd:c9:88:
                    66:03:0c:44:4c:55:74:28:62:ac:c0:cd:e7:43:c2:
                    e8:87:f0:c2:b5:e2:9b:fb:9a:8a:b2:c5:00:44:b7:
                    d7:24:86:af:31:35:f0:3a:65:d6:89:13:2f:3c:e8:
                    02:30:71:9e:04:ee:13:c5:60:e9:ba:0f:b2:ca:58:
                    cd:e6:9b:2c:18:b9:d1:b9:0d:28:eb:f6:1d:02:aa:
                    52:4d:d3:04:e3:6f:cb:5c:a1:eb:34:2b:83:dd:18:
                    a9:e8:70:2d:fd:26:bd:d6:20:96:c2:2c:3e:c8:37:
                    eb:af:47:bd:29:a4:88:69:90:e0:13:af:10:59:ba:
                    47:3e:1c:1c:f2:05:c0:0f:73:26:79:6b:cf:ad:1b:
                    9b:54:a7:a4:99:7a:6e:6d:8d:6d:dd:bd:a5:5c:99:
                    2f:0a:ae:6a:a0:95:b9:c4:f9:8d:72:cb:3a:86:e5:
                    03:41:1f:19:65:3c:16:8b:2e:2d:f6:6d:40:8f:32:
                    bf:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C3:18:A1:95:B5:26:E8:62:B3:46:23:11:CB:82:5E:31:EB:BB:DF
            X509v3 Authority Key Identifier:
                keyid:E6:55:C8:26:91:32:5E:C8:F4:42:5B:C0:A6:6B:1A:62:23:23:1D:71

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/961/5lXIJpEyXsj0QlvApmsaYiMjHXE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5lXIJpEyXsj0QlvApmsaYiMjHXE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/961/MMMYoZW1Juhis0YjEcuCXjHru98.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.76.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:2c:46:52:d9:fd:cd:42:83:6a:29:07:38:59:41:93:89:1a:
         61:29:38:5b:0e:28:fe:e6:4b:a7:91:69:dc:82:5b:be:28:13:
         f2:77:eb:bb:97:2f:e4:34:d9:5c:9d:61:77:9b:bf:8c:2c:63:
         3e:ff:df:6f:35:8a:20:6a:07:ba:d6:72:d7:98:80:2a:f1:fe:
         67:7e:c2:a5:ee:bf:6d:c0:0b:18:e4:d8:5d:a9:80:b7:4e:db:
         ea:2b:3d:ad:77:5b:ba:8b:38:f1:b4:69:8a:c0:87:eb:c5:cd:
         0a:09:13:50:94:7c:d0:99:b8:8b:76:9e:38:4c:d8:37:68:68:
         4e:1b:40:ec:f3:ac:70:f2:85:f9:67:f5:9e:2e:8a:6c:59:d0:
         b5:e2:87:c6:af:03:7f:90:40:72:30:33:38:28:84:83:d0:32:
         a2:d3:ad:85:76:44:b4:f9:c2:76:a8:a9:be:b0:04:51:da:4d:
         9e:a5:b9:b0:df:c7:00:1d:34:93:a8:d7:43:3b:d1:0e:8e:d0:
         a8:b9:6b:c3:f0:dc:25:32:25:fa:28:48:63:76:33:b6:78:74:
         84:b2:95:fb:50:39:e8:6f:20:dd:c5:51:43:46:20:e9:a6:f6:
         13:57:90:ee:de:1f:c7:dd:ba:77:83:f5:0d:31:e8:ac:90:c4:
         05:70:8e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:30:27 2025 by rpki-client