Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/aCKUeZU3WSLhACxmTMwCPJCZLUw.roa
File:                     aCKUeZU3WSLhACxmTMwCPJCZLUw.roa (raw, json)
Hash identifier:          gTGxvDID6/8y43sm1M1aG0OHolLQnUlbjN1MRV66t2Y=
Subject key identifier:   68:22:94:79:95:37:59:22:E1:00:2C:66:4C:CC:02:3C:90:99:2D:4C
Certificate issuer:       /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial:       C0
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/aCKUeZU3WSLhACxmTMwCPJCZLUw.roa
Signing time:             Fri 31 Jan 2025 01:31:35 +0000
ROA not before:           Fri 31 Jan 2025 01:31:35 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     18126
IP address blocks:        202.62.160.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192 (0xc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
        Validity
            Not Before: Jan 31 01:31:35 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=6822947995375922E1002C664CCC023C90992D4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:86:14:49:77:68:d9:6e:75:55:e5:da:1a:b4:
                    5c:f8:bf:94:08:ce:45:4b:03:df:97:34:ca:4d:2b:
                    17:47:75:22:d0:ea:82:c8:8b:b4:ea:4f:23:0b:14:
                    87:b9:5f:50:0f:b2:09:52:65:81:27:ab:96:0e:f6:
                    80:cb:6e:c6:9c:04:6b:83:98:d1:ab:8e:27:21:8e:
                    3b:4b:88:35:5e:3b:66:e9:e5:ec:bc:3c:b0:45:f0:
                    e1:cb:c5:53:7d:7c:a9:ef:00:42:b8:92:77:d5:f7:
                    79:63:55:b8:1e:fb:be:b3:b0:fd:ee:bb:45:4a:39:
                    ef:60:13:7a:2d:80:ff:e2:5a:4d:c7:98:33:bb:e8:
                    f3:e0:37:35:9e:56:d6:78:09:1d:46:a9:ba:f2:7f:
                    60:5a:08:72:63:71:2b:99:ba:28:ef:ec:f6:c7:19:
                    9e:73:7c:64:36:6d:82:92:e4:5f:19:61:fd:1c:b9:
                    cf:6a:8c:52:65:8b:2b:84:b2:d1:6a:6f:59:53:e2:
                    88:a4:06:b0:4d:c0:9f:ed:ce:8a:51:da:43:76:aa:
                    14:58:d4:f8:bc:c3:04:90:0a:1d:7f:ec:af:30:3f:
                    e9:39:d3:5d:2e:7e:b5:28:4f:fd:f4:5f:96:e6:c5:
                    cb:ec:80:9d:ba:ef:5f:df:79:48:71:a0:2a:cc:e6:
                    57:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:22:94:79:95:37:59:22:E1:00:2C:66:4C:CC:02:3C:90:99:2D:4C
            X509v3 Authority Key Identifier:
                keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/aCKUeZU3WSLhACxmTMwCPJCZLUw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.62.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         30:6a:d0:0e:56:fd:ea:69:11:b9:e6:e1:12:50:2d:8f:57:23:
         2e:fa:d8:7e:2d:33:e4:98:89:1d:c4:c3:d3:89:7d:f6:56:aa:
         68:38:4a:13:b9:17:08:ab:99:a4:e2:22:5c:55:1e:24:a2:18:
         13:6a:07:58:16:50:cc:43:47:28:20:a7:0e:4a:0e:74:e9:85:
         e2:fd:6b:9f:f0:51:8c:cc:9e:ab:a2:65:f8:1b:85:78:85:3c:
         48:53:9b:8b:9e:71:d5:8c:48:71:2b:f3:41:23:ae:8e:3d:f4:
         d5:94:84:85:e5:de:9d:ce:bd:32:db:7f:a9:df:98:2d:5d:b3:
         46:5c:c2:29:30:2f:d4:5b:4a:c9:01:f7:cf:24:5b:08:ad:40:
         21:dc:a0:85:12:a6:56:a7:cc:c1:7a:94:54:33:68:1c:a7:2e:
         2e:7f:b6:b8:06:52:08:f5:3b:b0:e0:c1:76:50:5e:b7:a7:c1:
         13:6b:36:ef:69:24:ad:a0:d2:a4:4e:d5:be:b8:7e:2a:3a:0f:
         97:75:e2:16:e7:44:27:12:42:ad:3c:f2:15:81:eb:34:45:25:
         5f:bf:0c:3a:6f:7a:bd:6d:24:0f:34:7e:68:b1:7d:10:70:91:
         e9:7e:c4:16:c2:e4:89:b4:90:a0:be:79:81:6a:c8:ca:d1:fc:
         1c:5c:26:9b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTAx
QTkwRTRFNzRDNDAzQUJFOEU1RTBBMUZFOEU0MTU3QUJEMkFFNzAeFw0yNTAxMzEw
MTMxMzVaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDY4MjI5NDc5OTUzNzU5
MjJFMTAwMkM2NjRDQ0MwMjNDOTA5OTJENEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBhhRJd2jZbnVV5doatFz4v5QIzkVLA9+XNMpNKxdHdSLQ6oLI
i7TqTyMLFIe5X1APsglSZYEnq5YO9oDLbsacBGuDmNGrjichjjtLiDVeO2bp5ey8
PLBF8OHLxVN9fKnvAEK4knfV93ljVbge+76zsP3uu0VKOe9gE3otgP/iWk3HmDO7
6PPgNzWeVtZ4CR1Gqbryf2BaCHJjcSuZuijv7PbHGZ5zfGQ2bYKS5F8ZYf0cuc9q
jFJliyuEstFqb1lT4oikBrBNwJ/tzopR2kN2qhRY1Pi8wwSQCh1/7K8wP+k5010u
frUoT/30X5bmxcvsgJ2671/feUhxoCrM5ldnAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUaCKUeZU3WSLhACxmTMwCPJCZLUwwHwYDVR0jBBgwFoAUEBqQ5OdMQDq+jl4K
H+jkFXq9KucwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMTczL0VCcVE1T2RNUURxLWpsNEtILWprRlhxOUt1Yy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0VCcVE1T2RNUURxLWpsNEtILWpr
RlhxOUt1Yy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMDE3My9hQ0tVZVpVM1dTTGhBQ3htVE13Q1BKQ1pMVXcu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQEyj6gMA0GCSqGSIb3DQEBCwUAA4IBAQAwatAOVv3qaRG55uESUC2P
VyMu+th+LTPkmIkdxMPTiX32VqpoOEoTuRcIq5mk4iJcVR4kohgTagdYFlDMQ0co
IKcOSg506YXi/Wuf8FGMzJ6romX4G4V4hTxIU5uLnnHVjEhxK/NBI66OPfTVlISF
5d6dzr0y23+p35gtXbNGXMIpMC/UW0rJAffPJFsIrUAh3KCFEqZWp8zBepRUM2gc
py4uf7a4BlII9Tuw4MF2UF63p8ETazbvaSStoNKkTtW+uH4qOg+XdeIW50QnEkKt
PPIVges0RSVfvww6b3q9bSQPNH5osX0QcJHpfsQWwuSJtJCgvnmBasjK0fwcXCab
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:34 2025 by rpki-client