Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/FOipYe-fZyUP4mlj56zZSCjyw7o.roa
File:                     FOipYe-fZyUP4mlj56zZSCjyw7o.roa (raw, json)
Hash identifier:          sHFid+/9cyTAVNCjdX5aDGhi+lceVElyo1g6gK2BpQY=
Subject key identifier:   14:E8:A9:61:EF:9F:67:25:0F:E2:69:63:E7:AC:D9:48:28:F2:C3:BA
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       043B
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/FOipYe-fZyUP4mlj56zZSCjyw7o.roa
Signing time:             Wed 18 Dec 2024 02:22:20 +0000
ROA not before:           Wed 18 Dec 2024 02:22:20 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        222.227.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1083 (0x43b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:22:20 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=14E8A961EF9F67250FE26963E7ACD94828F2C3BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d6:e3:c7:4f:8b:f6:ca:20:67:f9:51:db:08:
                    d5:f6:17:be:72:96:5c:67:b7:d8:d4:c8:fe:f9:a8:
                    45:87:47:ca:52:f4:0c:28:27:56:67:89:60:8f:23:
                    80:66:82:bd:da:79:98:74:4b:a9:ee:f6:50:f0:b6:
                    67:3c:91:23:2c:f9:f3:41:a9:41:d9:d5:bb:61:76:
                    3d:bc:c9:58:f4:b7:8b:17:f9:4e:e5:21:0b:00:1b:
                    fc:68:50:45:14:1a:d5:85:e0:95:cd:2e:56:70:d4:
                    dc:05:21:d2:a7:89:e5:ef:5b:bb:b2:65:b1:80:bf:
                    c2:49:0a:5a:15:42:8d:5b:99:22:82:7e:05:c6:79:
                    db:b1:68:da:1a:2e:e7:9c:df:f0:fb:c7:71:ac:ed:
                    b4:b4:0e:f6:0f:48:9f:be:17:ea:e2:89:de:22:4e:
                    df:10:eb:fb:3f:a8:2a:c9:2b:c0:d4:09:64:d1:85:
                    61:39:c2:5e:52:8f:0c:e7:50:6e:16:3a:42:5e:cc:
                    f9:69:83:57:a2:67:09:78:23:9c:76:5b:aa:0a:1d:
                    2d:18:f5:61:97:8a:2e:41:c5:ad:7c:e4:aa:83:5d:
                    86:6f:a9:4b:65:79:6b:67:54:f3:04:6c:27:fe:e7:
                    fa:8e:f5:27:23:15:4b:b5:e0:77:0f:d6:df:70:f9:
                    25:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E8:A9:61:EF:9F:67:25:0F:E2:69:63:E7:AC:D9:48:28:F2:C3:BA
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/FOipYe-fZyUP4mlj56zZSCjyw7o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.227.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9a:9d:74:31:e1:bf:ae:71:9d:cf:02:c4:a2:9c:ca:f5:9a:53:
         91:b8:92:fc:b3:84:70:22:a9:ca:65:9b:12:d0:af:ff:29:95:
         87:01:18:50:e7:f7:9b:4b:ff:b5:89:bc:f7:cb:68:cd:0f:ec:
         0d:3e:33:92:30:0c:97:95:60:d4:ab:af:b1:1e:0a:e3:8c:fc:
         cd:ce:b3:93:2c:16:a0:b8:03:1c:0d:d6:79:8b:6c:64:0f:a3:
         01:1f:f1:c8:92:bc:3e:fe:80:26:4d:bb:1f:83:75:42:86:5c:
         b3:30:d6:97:f0:be:38:ea:f8:cd:16:af:25:f5:fc:7d:cb:69:
         64:89:f2:9a:b5:5e:98:2a:ea:06:0f:e0:6d:4e:47:40:f8:b5:
         5b:bd:49:aa:00:33:32:ee:61:a8:4c:5c:0f:68:86:9b:f3:fc:
         69:82:99:d1:b6:64:0e:58:75:23:49:8c:2e:6a:58:e9:2c:bb:
         3f:8c:09:fc:34:5b:88:cf:09:45:72:e6:bd:1a:ab:86:1f:40:
         aa:41:6f:56:17:07:d4:2e:39:81:e0:68:86:df:5e:bf:98:fa:
         d4:23:95:94:1b:18:f7:a4:2c:04:f5:b1:75:60:e5:62:c4:c2:
         11:b9:08:bd:ee:7c:9e:12:7a:5d:9e:c5:ce:f3:02:f8:91:49:
         b8:84:62:d6
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICBDswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw
MjIyMjBaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDE0RThBOTYxRUY5RjY3
MjUwRkUyNjk2M0U3QUNEOTQ4MjhGMkMzQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCz1uPHT4v2yiBn+VHbCNX2F75yllxnt9jUyP75qEWHR8pS9Awo
J1ZniWCPI4Bmgr3aeZh0S6nu9lDwtmc8kSMs+fNBqUHZ1bthdj28yVj0t4sX+U7l
IQsAG/xoUEUUGtWF4JXNLlZw1NwFIdKnieXvW7uyZbGAv8JJCloVQo1bmSKCfgXG
eduxaNoaLuec3/D7x3Gs7bS0DvYPSJ++F+riid4iTt8Q6/s/qCrJK8DUCWTRhWE5
wl5SjwznUG4WOkJezPlpg1eiZwl4I5x2W6oKHS0Y9WGXii5Bxa185KqDXYZvqUtl
eWtnVPMEbCf+5/qO9ScjFUu14HcP1t9w+SXLAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUFOipYe+fZyUP4mlj56zZSCjyw7owHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL0ZPaXBZZS1mWnlVUDRtbGo1NnpaU0NqeXc3by5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDe4zANBgkqhkiG9w0BAQsFAAOCAQEAmp10MeG/rnGdzwLEopzK9ZpTkbiS
/LOEcCKpymWbEtCv/ymVhwEYUOf3m0v/tYm898tozQ/sDT4zkjAMl5Vg1KuvsR4K
44z8zc6zkywWoLgDHA3WeYtsZA+jAR/xyJK8Pv6AJk27H4N1QoZcszDWl/C+OOr4
zRavJfX8fctpZInymrVemCrqBg/gbU5HQPi1W71JqgAzMu5hqExcD2iGm/P8aYKZ
0bZkDlh1I0mMLmpY6Sy7P4wJ/DRbiM8JRXLmvRqrhh9AqkFvVhcH1C45geBoht9e
v5j61COVlBsY96QsBPWxdWDlYsTCEbkIve58nhJ6XZ7FzvMC+JFJuIRi1g==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:39 2025 by rpki-client