Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/b_c6LIj_XFf8mhftKfaUBhW4XNs.roa
File:                     b_c6LIj_XFf8mhftKfaUBhW4XNs.roa (raw, json)
Hash identifier:          cktz1geGfWHGIEvQjG23UNkh8W1miNBdG26xytYicFI=
Subject key identifier:   6F:F7:3A:2C:88:FF:5C:57:FC:9A:17:ED:29:F6:94:06:15:B8:5C:DB
Certificate issuer:       /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial:       44
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/b_c6LIj_XFf8mhftKfaUBhW4XNs.roa
Signing time:             Sat 01 Mar 2025 01:29:44 +0000
ROA not before:           Sat 01 Mar 2025 01:29:44 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     17698
IP address blocks:        203.174.192.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
        Validity
            Not Before: Mar  1 01:29:44 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=6FF73A2C88FF5C57FC9A17ED29F6940615B85CDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a3:88:de:66:03:eb:d6:d5:21:43:8f:c9:72:
                    f1:f7:19:8b:5b:8f:ff:d0:7f:c5:34:80:e4:ca:c1:
                    ed:15:c4:98:01:e8:bb:e3:f3:46:84:cb:4f:6c:9f:
                    16:5f:22:bf:3a:18:2c:72:0c:84:12:0a:e2:b5:d0:
                    bb:c2:f8:99:dc:29:d5:39:a7:dd:17:54:e4:bc:75:
                    ad:9d:2c:a7:61:86:5b:0b:c6:cf:ee:04:c4:0f:8a:
                    d5:de:6a:3d:56:05:78:d8:fc:b4:65:5c:00:3d:98:
                    fe:79:74:61:c9:39:83:d7:77:d5:55:02:74:26:d2:
                    e0:c1:8c:25:5d:5e:22:d1:25:80:7b:d6:1f:b5:ed:
                    90:08:ca:ab:41:45:78:5a:39:0c:74:e4:80:b2:81:
                    43:6e:fe:e5:74:22:3a:95:d3:94:21:ed:e1:8f:2b:
                    47:80:9d:e0:85:94:4b:00:f1:ac:52:4c:09:1f:b9:
                    16:b7:55:0f:89:6a:a4:13:03:2a:df:84:b3:51:fe:
                    8f:ed:51:7f:d0:60:28:65:a2:f3:a2:27:37:11:b4:
                    bb:bb:f3:04:a8:8e:8a:ca:b9:5e:90:f4:d6:3c:8a:
                    9d:1e:27:84:16:21:22:21:d0:37:94:85:c4:be:b3:
                    15:50:e4:0e:93:46:60:e6:ef:72:18:58:89:5b:aa:
                    8e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F7:3A:2C:88:FF:5C:57:FC:9A:17:ED:29:F6:94:06:15:B8:5C:DB
            X509v3 Authority Key Identifier:
                keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/b_c6LIj_XFf8mhftKfaUBhW4XNs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.174.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         bb:63:9a:6a:ff:64:ac:b4:0b:73:3d:ba:11:6a:20:9d:63:00:
         22:fa:a5:e2:f1:54:52:c1:07:2a:42:58:96:89:22:95:47:68:
         95:1e:ef:a1:5a:b0:0f:a0:c7:d9:1f:88:71:61:2a:d1:16:6a:
         7d:5f:6f:47:41:90:99:ee:9e:b6:5a:8d:fc:4b:12:b3:75:6a:
         02:85:c9:8d:6a:4c:e6:10:8e:f0:32:65:1b:db:30:5d:76:04:
         37:ed:cf:65:4d:14:73:53:5f:62:62:b6:b8:2b:c7:ef:42:8d:
         7f:47:6c:18:a5:67:66:77:d3:69:6c:f8:b1:a3:47:4b:48:97:
         23:31:be:fe:f4:98:6e:41:53:7d:81:97:cf:aa:59:d2:59:40:
         40:68:12:73:a9:08:48:21:be:86:1b:b5:ec:bd:90:03:f8:3b:
         6e:44:62:22:fd:7d:f0:c4:52:24:ed:a9:3b:eb:2f:80:1c:bf:
         70:bc:d1:c6:2a:4d:ed:fe:fb:ee:cf:fe:b1:bb:63:9d:c4:37:
         80:73:3f:81:a1:2c:44:7f:74:1b:24:54:fd:53:12:c7:79:79:
         63:c6:5c:7f:66:da:c7:8e:42:53:0e:e2:20:7d:48:65:d6:e9:
         dc:9a:98:03:f7:1b:c8:7d:9e:9c:aa:fd:b4:c8:a2:5c:3e:15:
         df:e3:28:76
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBRDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzM0RG
OUIyNEY1M0JCQ0FDMzQ3QkE1QjVBOEM0OUJGRjQxNjY2QTI2MB4XDTI1MDMwMTAx
Mjk0NFoXDTI2MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoNkZGNzNBMkM4OEZGNUM1
N0ZDOUExN0VEMjlGNjk0MDYxNUI4NUNEQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALWjiN5mA+vW1SFDj8ly8fcZi1uP/9B/xTSA5MrB7RXEmAHou+Pz
RoTLT2yfFl8ivzoYLHIMhBIK4rXQu8L4mdwp1Tmn3RdU5Lx1rZ0sp2GGWwvGz+4E
xA+K1d5qPVYFeNj8tGVcAD2Y/nl0Yck5g9d31VUCdCbS4MGMJV1eItElgHvWH7Xt
kAjKq0FFeFo5DHTkgLKBQ27+5XQiOpXTlCHt4Y8rR4Cd4IWUSwDxrFJMCR+5FrdV
D4lqpBMDKt+Es1H+j+1Rf9BgKGWi86InNxG0u7vzBKiOisq5XpD01jyKnR4nhBYh
IiHQN5SFxL6zFVDkDpNGYObvchhYiVuqjsMCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBRv9zosiP9cV/yaF+0p9pQGFbhc2zAfBgNVHSMEGDAWgBQz35sk9Tu8rDR7pbWo
xJv/QWZqJjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTA4MjIvTTktYkpQVTd2S3cwZTZXMXFNU2JfMEZtYWlZLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvTTktYkpQVTd2S3cwZTZXMXFNU2Jf
MEZtYWlZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEwODIyL2JfYzZMSWpfWEZmOG1oZnRLZmFVQmhXNFhOcy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAXLrsAwDQYJKoZIhvcNAQELBQADggEBALtjmmr/ZKy0C3M9uhFqIJ1j
ACL6peLxVFLBBypCWJaJIpVHaJUe76FasA+gx9kfiHFhKtEWan1fb0dBkJnunrZa
jfxLErN1agKFyY1qTOYQjvAyZRvbMF12BDftz2VNFHNTX2Jitrgrx+9CjX9HbBil
Z2Z302ls+LGjR0tIlyMxvv70mG5BU32Bl8+qWdJZQEBoEnOpCEghvoYbtey9kAP4
O25EYiL9ffDEUiTtqTvrL4Acv3C80cYqTe3+++7P/rG7Y53EN4BzP4GhLER/dBsk
VP1TEsd5eWPGXH9m2seOQlMO4iB9SGXW6dyamAP3G8h9npyq/bTIolw+Fd/jKHY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:13 2025 by rpki-client