Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/eE7RbFHlmK6cS9va5NVQSpX8bfA.roa
File:                     eE7RbFHlmK6cS9va5NVQSpX8bfA.roa (raw, json)
Hash identifier:          7Vf0aAkpYtLulBwqGt71C3xpyQ+YYKB4bw/u0lSB6W4=
Subject key identifier:   78:4E:D1:6C:51:E5:98:AE:9C:4B:DB:DA:E4:D5:50:4A:95:FC:6D:F0
Certificate issuer:       /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial:       6C
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/eE7RbFHlmK6cS9va5NVQSpX8bfA.roa
Signing time:             Thu 31 Oct 2024 01:31:03 +0000
ROA not before:           Thu 31 Oct 2024 01:31:03 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     7514
IP address blocks:        120.89.128.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
        Validity
            Not Before: Oct 31 01:31:03 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=784ED16C51E598AE9C4BDBDAE4D5504A95FC6DF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a1:af:cc:63:36:fe:1c:42:a4:a2:ed:15:90:
                    c4:ad:e9:d9:52:67:81:4d:3a:c0:f7:99:a3:e7:ee:
                    44:39:df:b9:ae:0f:80:6f:70:6f:e1:b9:98:f0:63:
                    aa:a5:04:66:d9:7f:b8:dd:f4:13:7d:1b:41:07:41:
                    67:16:26:ee:4f:12:49:e6:00:d8:14:10:94:cf:05:
                    36:89:9a:03:06:75:5e:1e:91:ff:bb:25:c4:1e:ed:
                    0b:40:bc:8f:c4:25:16:31:77:97:04:c9:b7:12:4c:
                    89:fd:e3:59:72:cc:12:0e:07:eb:1f:47:21:7b:5c:
                    85:43:2c:92:e3:2c:78:f9:f9:dc:ca:50:a7:d6:eb:
                    0f:d1:46:cd:18:b7:c8:ac:c2:62:8a:c6:6f:d6:3e:
                    9d:d0:60:fd:de:bd:b0:ea:91:f2:1f:1a:75:e8:e9:
                    23:be:a5:3f:18:e3:43:b3:4d:52:c3:f8:c1:72:df:
                    61:22:ee:50:28:fb:31:54:5a:38:b8:64:2e:45:5c:
                    11:23:9c:61:ba:03:60:7e:60:a9:ee:0a:1f:1a:08:
                    11:0f:c0:38:fd:15:4f:c4:09:bd:0d:86:0a:95:c2:
                    10:16:e6:c3:b8:c8:2f:ca:7d:ae:c1:e3:ba:36:14:
                    a3:59:ac:b6:9e:16:e3:d8:ab:1b:1a:d3:84:3a:ea:
                    15:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4E:D1:6C:51:E5:98:AE:9C:4B:DB:DA:E4:D5:50:4A:95:FC:6D:F0
            X509v3 Authority Key Identifier:
                keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/eE7RbFHlmK6cS9va5NVQSpX8bfA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.89.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         76:7a:59:7a:72:4a:c5:42:de:2f:a9:ee:0f:92:73:fb:d8:b5:
         38:b4:de:0e:19:f4:2a:82:4a:96:fa:86:13:cf:82:98:c8:a1:
         ea:bd:d5:18:4b:b4:68:49:1c:0b:b1:a1:f5:65:ed:55:8b:e4:
         40:74:46:0f:04:1b:46:1a:a9:58:0d:a3:10:a7:c5:b4:45:bc:
         b4:eb:39:b8:55:8b:5b:74:d9:cd:c5:57:d9:d9:7f:77:c1:86:
         d5:51:7f:ce:ee:3b:d1:4c:0b:0e:f0:68:6f:ae:51:0a:e3:df:
         81:7b:28:5a:a8:cc:af:b7:17:e2:eb:bb:75:26:a8:60:39:66:
         2e:55:69:2c:f0:7c:87:23:c8:b4:48:8a:b6:d7:2e:fc:3c:3c:
         d3:43:4d:79:73:91:69:0c:7e:ce:8d:ce:22:04:b3:f6:e1:7c:
         65:db:e6:9e:4a:27:fd:9f:b7:ba:0c:ef:0a:6a:dd:f9:90:20:
         8b:bf:57:c0:1a:c8:55:05:ef:8b:26:29:25:48:01:49:f8:19:
         fc:8f:d6:57:f7:78:19:bd:72:22:3a:f2:19:a6:d0:97:eb:79:
         1b:e0:08:96:c1:5c:a2:08:2c:b8:6b:f5:68:7f:70:10:87:f8:
         2e:0a:b0:b2:1a:fa:91:d8:cf:33:46:e5:b5:19:e3:c1:02:8f:
         a1:c9:66:53
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBbDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyODM5
M0ZBRTEyOUI1MDE4MjQ2OTZCQUUyNEI2NDczNEEyMDNDMzc2MB4XDTI0MTAzMTAx
MzEwM1oXDTI1MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoNzg0RUQxNkM1MUU1OThB
RTlDNEJEQkRBRTRENTUwNEE5NUZDNkRGMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKChr8xjNv4cQqSi7RWQxK3p2VJngU06wPeZo+fuRDnfua4PgG9w
b+G5mPBjqqUEZtl/uN30E30bQQdBZxYm7k8SSeYA2BQQlM8FNomaAwZ1Xh6R/7sl
xB7tC0C8j8QlFjF3lwTJtxJMif3jWXLMEg4H6x9HIXtchUMskuMsePn53MpQp9br
D9FGzRi3yKzCYorGb9Y+ndBg/d69sOqR8h8adejpI76lPxjjQ7NNUsP4wXLfYSLu
UCj7MVRaOLhkLkVcESOcYboDYH5gqe4KHxoIEQ/AOP0VT8QJvQ2GCpXCEBbmw7jI
L8p9rsHjujYUo1mstp4W49irGxrThDrqFe0CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBR4TtFsUeWYrpxL29rk1VBKlfxt8DAfBgNVHSMEGDAWgBQoOT+uEptQGCRpa64k
tkc0ogPDdjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTA3NjIvS0RrX3JoS2JVQmdrYVd1dUpMWkhOS0lEdzNZLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS0RrX3JoS2JVQmdrYVd1dUpMWkhO
S0lEdzNZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEwNzYyL2VFN1JiRkhsbUs2Y1M5dmE1TlZRU3BYOGJmQS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAd4WYAwDQYJKoZIhvcNAQELBQADggEBAHZ6WXpySsVC3i+p7g+Sc/vY
tTi03g4Z9CqCSpb6hhPPgpjIoeq91RhLtGhJHAuxofVl7VWL5EB0Rg8EG0YaqVgN
oxCnxbRFvLTrObhVi1t02c3FV9nZf3fBhtVRf87uO9FMCw7waG+uUQrj34F7KFqo
zK+3F+Lru3UmqGA5Zi5VaSzwfIcjyLRIirbXLvw8PNNDTXlzkWkMfs6NziIEs/bh
fGXb5p5KJ/2ft7oM7wpq3fmQIIu/V8AayFUF74smKSVIAUn4GfyP1lf3eBm9ciI6
8hmm0JfreRvgCJbBXKIILLhr9Wh/cBCH+C4KsLIa+pHYzzNG5bUZ48ECj6HJZlM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:46 2025 by rpki-client