Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/g7sOPRjGi-uVCirrVdDR-sT5oME.roa
File:                     g7sOPRjGi-uVCirrVdDR-sT5oME.roa (raw, json)
Hash identifier:          4VWErVHA8T05ZnjpKyOxkXXd+nf9x5fxtfJP19QqRss=
Subject key identifier:   83:BB:0E:3D:18:C6:8B:EB:95:0A:2A:EB:55:D0:D1:FA:C4:F9:A0:C1
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0202
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/g7sOPRjGi-uVCirrVdDR-sT5oME.roa
Signing time:             Sat 01 Mar 2025 01:31:03 +0000
ROA not before:           Sat 01 Mar 2025 01:31:03 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     4713
IP address blocks:        61.207.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 514 (0x202)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Mar  1 01:31:03 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=83BB0E3D18C68BEB950A2AEB55D0D1FAC4F9A0C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:aa:b1:99:3c:86:0d:6f:1d:c0:a3:d7:86:53:
                    0d:f5:35:95:36:22:32:8d:36:fb:c2:65:8c:86:06:
                    04:8e:1d:d6:bd:15:1f:06:8b:57:0b:10:e4:35:24:
                    a1:ae:8d:db:30:2a:c7:09:79:94:fa:90:ec:a9:68:
                    96:6c:31:99:0c:4d:8d:97:2e:bd:59:c5:97:a6:05:
                    ad:42:21:eb:c9:5f:f4:7a:0e:2f:0f:36:52:00:1e:
                    e4:eb:15:d9:d8:f2:9d:ea:c3:cb:ca:97:c0:cb:d2:
                    41:31:6d:5e:11:bc:91:45:4b:cf:7d:7a:a5:74:b3:
                    87:43:c1:15:3e:bc:4f:c4:6e:b7:36:85:03:88:ed:
                    5c:c6:e7:34:c1:52:46:0f:0d:5e:f6:a8:f8:7e:0d:
                    dd:4f:a3:26:a8:1a:8e:5b:ff:c1:6f:82:f9:67:3c:
                    b7:56:e9:9e:39:59:5e:2a:35:75:93:c7:a4:72:7d:
                    6d:05:ed:68:0d:5e:0e:79:bd:f6:5f:7d:02:db:45:
                    42:f2:1e:02:e5:fa:f3:65:b9:6e:dd:78:ba:4b:bd:
                    d1:3a:68:68:bc:c8:61:55:ca:04:b4:c6:8c:be:d9:
                    71:e3:8b:89:2a:38:1f:c3:e2:38:9d:05:90:98:8c:
                    92:f8:81:fd:fb:21:75:d1:c0:19:fe:e2:53:3e:9e:
                    7a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BB:0E:3D:18:C6:8B:EB:95:0A:2A:EB:55:D0:D1:FA:C4:F9:A0:C1
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/g7sOPRjGi-uVCirrVdDR-sT5oME.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.207.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9e:53:81:b0:2c:27:7e:34:c5:84:67:06:52:1b:f5:2b:f5:51:
         1e:72:0b:43:da:a8:fe:ae:d2:75:73:56:e8:0d:66:cf:86:65:
         5f:63:63:8a:c2:6c:46:c0:1e:25:8c:3e:e7:ef:e8:fa:72:f6:
         5d:2d:52:ac:98:6d:5f:4e:0b:1a:63:af:9d:94:49:f9:91:06:
         54:45:c1:d7:8b:15:36:8b:48:0a:13:a1:25:2c:d5:3a:a5:5c:
         06:19:ff:85:3e:5f:5e:cc:01:2a:dd:7b:a7:f5:71:53:74:4f:
         e8:a5:a4:0a:18:5d:d9:20:4d:b8:8e:06:27:6b:56:5d:10:3f:
         6c:7d:f4:3c:70:09:72:39:30:94:2e:1b:5c:18:0d:21:23:1f:
         c8:27:3e:34:d3:c1:b9:a3:cb:e4:31:ff:28:a1:47:f5:0d:cf:
         18:9e:89:82:3c:f2:fc:ff:44:62:35:1e:6d:5d:63:93:b4:ce:
         06:18:7e:8e:5e:45:19:3d:30:da:72:d7:ee:83:69:56:25:88:
         f0:24:6f:3b:db:0d:4f:c6:27:96:46:d1:56:a6:a2:06:ef:54:
         97:5c:9f:96:0a:74:94:19:09:d5:62:05:de:fb:55:00:7e:a3:
         74:ed:ca:08:0a:d0:41:00:6c:22:40:1d:ba:f1:9f:37:31:14:
         a7:9d:db:60
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAgIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNTAzMDEw
MTMxMDNaFw0yNjAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDgzQkIwRTNEMThDNjhC
RUI5NTBBMkFFQjU1RDBEMUZBQzRGOUEwQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDvqrGZPIYNbx3Ao9eGUw31NZU2IjKNNvvCZYyGBgSOHda9FR8G
i1cLEOQ1JKGujdswKscJeZT6kOypaJZsMZkMTY2XLr1ZxZemBa1CIevJX/R6Di8P
NlIAHuTrFdnY8p3qw8vKl8DL0kExbV4RvJFFS899eqV0s4dDwRU+vE/Ebrc2hQOI
7VzG5zTBUkYPDV72qPh+Dd1PoyaoGo5b/8FvgvlnPLdW6Z45WV4qNXWTx6RyfW0F
7WgNXg55vfZffQLbRULyHgLl+vNluW7deLpLvdE6aGi8yGFVygS0xoy+2XHji4kq
OB/D4jidBZCYjJL4gf37IXXRwBn+4lM+nnr5AgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUg7sOPRjGi+uVCirrVdDR+sT5oMEwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTMxL2c3c09QUmpHaS11VkNpcnJWZERSLXNUNW9NRS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA9zzANBgkqhkiG9w0BAQsFAAOCAQEAnlOBsCwnfjTFhGcGUhv1K/VRHnIL
Q9qo/q7SdXNW6A1mz4ZlX2NjisJsRsAeJYw+5+/o+nL2XS1SrJhtX04LGmOvnZRJ
+ZEGVEXB14sVNotIChOhJSzVOqVcBhn/hT5fXswBKt17p/VxU3RP6KWkChhd2SBN
uI4GJ2tWXRA/bH30PHAJcjkwlC4bXBgNISMfyCc+NNPBuaPL5DH/KKFH9Q3PGJ6J
gjzy/P9EYjUebV1jk7TOBhh+jl5FGT0w2nLX7oNpViWI8CRvO9sNT8YnlkbRVqai
Bu9Ul1yflgp0lBkJ1WIF3vtVAH6jdO3KCArQQQBsIkAduvGfNzEUp53bYA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 16:26:56 2025 by rpki-client