Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/DOeX2zuzRJzUFH94XI2rwk6jmIg.roa
File:                     DOeX2zuzRJzUFH94XI2rwk6jmIg.roa (raw, json)
Hash identifier:          dUvWQDqQf749b0Hqd8Iwyhp+iMIp5GL7uP6wTTt9vjs=
Subject key identifier:   0C:E7:97:DB:3B:B3:44:9C:D4:14:7F:78:5C:8D:AB:C2:4E:A3:98:88
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       03C4
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/DOeX2zuzRJzUFH94XI2rwk6jmIg.roa
Signing time:             Wed 18 Dec 2024 02:13:04 +0000
ROA not before:           Wed 18 Dec 2024 02:13:04 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        210.132.96.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 964 (0x3c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:13:04 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=0CE797DB3BB3449CD4147F785C8DABC24EA39888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:16:13:19:70:c2:b7:5e:5c:86:f0:9c:76:29:
                    db:12:f5:78:bb:be:fe:9a:34:da:07:17:30:ae:e4:
                    e7:bf:be:78:dc:55:43:d5:bd:6e:5d:b8:ab:a1:e9:
                    de:49:b3:9f:b5:6a:12:e4:e6:12:ff:e1:0d:e2:a7:
                    dd:e6:c2:b5:3d:fa:8f:11:58:29:09:1b:7e:5d:0a:
                    ff:01:67:c9:82:dc:10:68:4d:9a:4c:27:40:01:e1:
                    1b:ac:e3:b7:7b:86:45:a0:83:a8:00:40:62:13:54:
                    1e:ef:3a:23:2f:26:07:46:eb:6f:cd:f8:86:80:9d:
                    be:6e:36:6e:7c:16:9d:fc:71:25:64:e4:04:41:9a:
                    7d:79:e4:ef:98:ac:e1:b0:2c:ea:d5:e7:f5:85:ed:
                    26:46:96:b9:8d:9f:4f:f3:1c:22:4e:94:f2:32:ee:
                    d5:59:02:e7:49:69:0c:fd:66:a7:f8:3a:0e:1d:46:
                    e9:4c:b4:61:9b:ea:09:55:5e:57:0d:b1:ca:14:ee:
                    8e:fb:7d:71:62:2c:8b:b7:8f:60:cf:71:7f:a6:8a:
                    1b:22:29:a1:61:db:32:3f:ff:d0:58:ef:20:33:7d:
                    af:c9:5d:8a:a2:a6:fb:4d:09:9c:90:78:bd:11:69:
                    f9:99:3a:db:60:d0:75:43:54:5a:16:23:30:27:94:
                    d5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E7:97:DB:3B:B3:44:9C:D4:14:7F:78:5C:8D:AB:C2:4E:A3:98:88
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/DOeX2zuzRJzUFH94XI2rwk6jmIg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.132.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         19:ee:03:8e:cd:60:ab:68:7d:e6:d9:ca:fb:4a:8f:d2:c6:6c:
         28:73:8f:4f:98:b6:e9:89:a7:e6:75:e1:df:3a:6f:23:6d:b2:
         69:b6:b9:d7:6f:a5:82:dd:4c:33:ce:c2:05:26:b7:74:af:74:
         a1:87:67:20:a3:cd:bd:a3:01:81:7c:32:86:3c:ea:2b:6d:d9:
         04:3f:ee:48:40:19:7d:41:6d:73:e1:c8:9d:a0:02:21:3e:60:
         62:8a:fe:3c:f2:cc:13:d7:b2:ec:21:35:a9:07:8a:83:85:a3:
         e6:ac:18:63:e0:87:a2:be:22:0d:eb:0c:94:9d:15:5e:4a:07:
         26:aa:aa:ca:2b:11:cc:5b:06:0a:0e:d0:96:ed:c6:9a:c5:ad:
         55:26:f5:97:42:47:b1:c2:51:5e:c6:13:30:e3:f5:6a:d6:ea:
         af:05:d7:1a:01:de:a4:13:31:47:d5:53:68:6e:01:e2:f1:ee:
         6b:22:b2:0d:85:78:d4:cf:96:7d:a6:cd:ae:78:0f:39:fa:5e:
         85:fe:83:42:63:97:f5:37:aa:a7:72:42:27:4a:33:1d:c9:a4:
         b6:3c:19:32:a3:8c:91:0d:c5:1b:54:79:cc:b5:51:16:7a:b3:
         4c:38:7a:7a:03:83:4a:98:9c:c3:9f:67:d0:65:08:df:4b:d1:
         74:73:6f:a4
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw
MjEzMDRaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDBDRTc5N0RCM0JCMzQ0
OUNENDE0N0Y3ODVDOERBQkMyNEVBMzk4ODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5FhMZcMK3XlyG8Jx2KdsS9Xi7vv6aNNoHFzCu5Oe/vnjcVUPV
vW5duKuh6d5Js5+1ahLk5hL/4Q3ip93mwrU9+o8RWCkJG35dCv8BZ8mC3BBoTZpM
J0AB4Rus47d7hkWgg6gAQGITVB7vOiMvJgdG62/N+IaAnb5uNm58Fp38cSVk5ARB
mn155O+YrOGwLOrV5/WF7SZGlrmNn0/zHCJOlPIy7tVZAudJaQz9Zqf4Og4dRulM
tGGb6glVXlcNscoU7o77fXFiLIu3j2DPcX+mihsiKaFh2zI//9BY7yAzfa/JXYqi
pvtNCZyQeL0RafmZOttg0HVDVFoWIzAnlNXhAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUDOeX2zuzRJzUFH94XI2rwk6jmIgwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL0RPZVgyenV6Ukp6VUZIOTRYSTJyd2s2am1JZy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXShGAwDQYJKoZIhvcNAQELBQADggEBABnuA47NYKtofebZyvtKj9LGbChz
j0+YtumJp+Z14d86byNtsmm2uddvpYLdTDPOwgUmt3SvdKGHZyCjzb2jAYF8MoY8
6itt2QQ/7khAGX1BbXPhyJ2gAiE+YGKK/jzyzBPXsuwhNakHioOFo+asGGPgh6K+
Ig3rDJSdFV5KByaqqsorEcxbBgoO0JbtxprFrVUm9ZdCR7HCUV7GEzDj9WrW6q8F
1xoB3qQTMUfVU2huAeLx7msisg2FeNTPln2mza54Dzn6XoX+g0Jjl/U3qqdyQidK
Mx3JpLY8GTKjjJENxRtUecy1URZ6s0w4enoDg0qYnMOfZ9BlCN9L0XRzb6Q=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:20:13 2025 by rpki-client