Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/1VMs4GLsBhJjtEH5vKlDP09okew.roa
File:                     1VMs4GLsBhJjtEH5vKlDP09okew.roa (raw, json)
Hash identifier:          Rw6Dnl1vVyVHkZ2Mlmt7gGzmaptNQdVYqNe1NJJruYM=
Subject key identifier:   D5:53:2C:E0:62:EC:06:12:63:B4:41:F9:BC:A9:43:3F:4F:68:91:EC
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       04FA
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/1VMs4GLsBhJjtEH5vKlDP09okew.roa
Signing time:             Wed 18 Dec 2024 02:40:07 +0000
ROA not before:           Wed 18 Dec 2024 02:40:07 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        124.109.149.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1274 (0x4fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:40:07 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=D5532CE062EC061263B441F9BCA9433F4F6891EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f8:dc:f9:28:c3:37:78:fb:17:f6:48:99:00:
                    5d:17:94:0f:e2:f6:6c:58:45:c3:84:a5:13:45:d1:
                    a4:e5:77:fd:84:94:df:c0:92:c0:0d:fb:7d:02:3e:
                    6d:de:5f:c6:a4:07:75:3e:a7:a5:ec:a4:bd:a6:96:
                    d4:0d:df:45:08:e1:6d:50:0f:79:e7:eb:f6:3c:54:
                    f5:78:b7:09:a6:79:8f:b3:fa:8e:b1:ae:bf:2f:6f:
                    97:48:47:82:69:8d:c6:36:72:8b:b7:9b:af:ba:38:
                    ef:0c:16:fc:9a:ca:9c:dd:97:df:c2:a0:4c:8a:ab:
                    54:06:bc:c9:ea:9d:bd:a3:10:21:12:12:71:fc:fe:
                    ad:fd:a6:cf:1f:b2:15:a0:38:ff:8f:35:10:ee:91:
                    b1:56:75:fc:aa:88:75:ba:62:b9:ac:a2:2a:34:60:
                    8b:77:70:22:74:c9:a7:fd:3c:0b:ce:fc:17:80:50:
                    b0:63:1c:b1:84:c5:c1:a8:33:d7:3c:06:29:c8:8c:
                    80:0d:c6:6d:83:f2:4a:59:cc:4f:f2:0d:ab:16:ed:
                    c7:67:47:11:2f:0c:87:06:3d:ff:99:47:7b:6a:a2:
                    19:07:14:98:56:d1:da:4c:30:0e:a6:bb:96:75:a4:
                    c3:df:93:a8:61:d8:02:d4:b1:9b:a0:48:be:50:18:
                    0a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:53:2C:E0:62:EC:06:12:63:B4:41:F9:BC:A9:43:3F:4F:68:91:EC
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/1VMs4GLsBhJjtEH5vKlDP09okew.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.109.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:bb:0a:b7:52:ca:5c:5d:bb:eb:e4:2a:52:49:54:5c:3d:0b:
         79:a4:13:cd:fa:86:de:f1:ea:cf:42:36:94:a4:20:6b:94:ed:
         5a:83:a9:c4:95:eb:86:f4:58:45:60:4a:47:99:c3:18:01:fe:
         33:95:f6:46:f1:45:25:14:16:7d:a0:a8:65:92:60:ff:04:23:
         77:53:ed:2b:5c:d5:ad:e0:28:1b:46:ff:3f:8b:7b:f8:57:3e:
         db:cf:90:f0:d4:18:e7:a7:fb:b2:43:91:80:61:f7:5a:b5:50:
         99:e6:10:c0:e4:a5:30:f8:11:d0:a3:f0:b7:e0:ee:12:9b:7b:
         e3:48:3e:e4:dd:fd:40:67:74:c5:ea:14:24:78:61:8b:6c:b9:
         b8:7f:d5:f1:c1:78:e0:c2:74:3c:39:77:33:1a:0c:8c:f0:ce:
         5d:62:cb:ea:32:41:44:af:b1:6d:54:da:fc:2a:c6:3c:7e:ed:
         49:b7:47:4d:99:15:4a:01:00:f0:a7:28:df:bc:c1:9f:43:27:
         a3:4a:99:43:9b:eb:b3:5c:75:1d:a3:90:8b:e5:42:79:dd:1b:
         c3:d0:bd:a0:5d:d2:a9:c6:66:2f:d0:16:97:89:0a:2c:5f:94:
         35:d7:6b:a3:9d:43:ae:f5:79:b6:79:bf:c5:e0:82:21:c0:d5:
         1b:7d:30:95
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBPowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw
MjQwMDdaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEQ1NTMyQ0UwNjJFQzA2
MTI2M0I0NDFGOUJDQTk0MzNGNEY2ODkxRUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDU+Nz5KMM3ePsX9kiZAF0XlA/i9mxYRcOEpRNF0aTld/2ElN/A
ksAN+30CPm3eX8akB3U+p6XspL2mltQN30UI4W1QD3nn6/Y8VPV4twmmeY+z+o6x
rr8vb5dIR4JpjcY2cou3m6+6OO8MFvyaypzdl9/CoEyKq1QGvMnqnb2jECESEnH8
/q39ps8fshWgOP+PNRDukbFWdfyqiHW6Yrmsoio0YIt3cCJ0yaf9PAvO/BeAULBj
HLGExcGoM9c8BinIjIANxm2D8kpZzE/yDasW7cdnRxEvDIcGPf+ZR3tqohkHFJhW
0dpMMA6mu5Z1pMPfk6hh2ALUsZugSL5QGArDAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU1VMs4GLsBhJjtEH5vKlDP09okewwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxLzFWTXM0R0xzQmhKanRFSDV2S2xEUDA5b2tldy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAB8bZUwDQYJKoZIhvcNAQELBQADggEBAEy7CrdSylxdu+vkKlJJVFw9C3mk
E836ht7x6s9CNpSkIGuU7VqDqcSV64b0WEVgSkeZwxgB/jOV9kbxRSUUFn2gqGWS
YP8EI3dT7Stc1a3gKBtG/z+Le/hXPtvPkPDUGOen+7JDkYBh91q1UJnmEMDkpTD4
EdCj8Lfg7hKbe+NIPuTd/UBndMXqFCR4YYtsubh/1fHBeODCdDw5dzMaDIzwzl1i
y+oyQUSvsW1U2vwqxjx+7Um3R02ZFUoBAPCnKN+8wZ9DJ6NKmUOb67NcdR2jkIvl
QnndG8PQvaBd0qnGZi/QFpeJCixflDXXa6OdQ671ebZ5v8XggiHA1Rt9MJU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:33 2025 by rpki-client