Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/JJkuHVVq3yfu6Gbe2HNSdJHxX0I.roa
File:                     JJkuHVVq3yfu6Gbe2HNSdJHxX0I.roa (raw, json)
Hash identifier:          PKmCPsy7fmVEaXncmESw3GozfqjhRFZbNPD92uD6/88=
Subject key identifier:   24:99:2E:1D:55:6A:DF:27:EE:E8:66:DE:D8:73:52:74:91:F1:5F:42
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0420
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/JJkuHVVq3yfu6Gbe2HNSdJHxX0I.roa
Signing time:             Wed 18 Dec 2024 02:19:01 +0000
ROA not before:           Wed 18 Dec 2024 02:19:01 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        210.255.0.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1056 (0x420)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:19:01 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=24992E1D556ADF27EEE866DED873527491F15F42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5e:0a:af:e6:61:a3:e4:3c:4d:cb:0f:cc:67:
                    22:49:14:39:f6:ea:a5:11:2e:73:c6:ec:23:18:2b:
                    76:e3:c5:25:69:83:e6:84:7d:18:a9:f1:0f:d1:0a:
                    2b:09:a1:81:41:1a:28:83:43:6a:12:d6:5a:e3:84:
                    c2:df:59:f9:58:f8:4e:fd:11:4a:8f:6f:08:e4:6c:
                    7d:b5:78:7a:59:f1:a3:19:90:59:08:ff:39:6b:5a:
                    58:24:59:ed:e3:19:a6:94:83:58:0c:e1:78:7f:6f:
                    23:26:63:d9:89:50:84:96:98:2c:d1:8c:be:f2:6e:
                    db:d7:6a:f0:fe:bb:5d:92:c0:56:53:2a:18:6e:7b:
                    9c:9b:2f:9d:83:5b:9e:c4:49:ff:32:43:be:95:22:
                    d0:79:9d:b8:20:e1:49:1c:2d:cc:72:cf:90:af:25:
                    1e:19:67:35:23:cf:75:b9:b0:ab:ba:55:43:82:ec:
                    c6:c9:73:39:43:6c:b8:32:05:67:b5:4e:51:04:17:
                    62:8c:66:6a:20:6c:f8:32:e4:9d:a9:74:ce:8f:fc:
                    6c:69:02:da:e9:50:19:a0:27:f9:50:88:ac:fc:8e:
                    d3:5e:e8:3d:68:fd:d4:26:e8:3d:5b:29:cb:20:be:
                    e5:3b:98:9a:b4:93:1e:1d:62:eb:1e:d4:5b:63:31:
                    9c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:99:2E:1D:55:6A:DF:27:EE:E8:66:DE:D8:73:52:74:91:F1:5F:42
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/JJkuHVVq3yfu6Gbe2HNSdJHxX0I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.255.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         14:c5:e2:11:31:a7:dd:b5:05:6d:72:46:a7:09:93:8b:44:ce:
         3a:fa:0b:1a:e6:d6:e4:38:6d:05:da:4d:a0:43:d5:c4:90:ac:
         3d:c9:8a:3f:03:4c:d9:5c:dd:cb:fe:26:27:cf:9a:85:71:f2:
         95:05:31:8f:c5:95:79:db:3d:a8:dd:19:1f:f1:9c:26:bf:1b:
         27:5e:c1:ab:82:6b:3e:82:40:f1:2e:14:b7:9b:37:95:93:f7:
         03:c4:55:43:74:6f:c5:6c:1c:ae:21:af:cd:62:4e:dd:0b:79:
         60:8d:28:91:cd:fd:a0:50:47:51:94:9e:64:3d:da:91:9a:16:
         c8:9f:d0:a3:e3:e2:58:a4:f3:2e:07:75:7e:6f:60:8a:99:bc:
         96:ed:ea:72:04:07:72:b2:62:f6:e6:aa:b6:09:77:38:36:8f:
         2d:f1:99:4c:ee:b1:f9:fe:41:f1:7e:2e:b1:22:52:b1:a6:05:
         04:08:ac:32:71:75:41:d4:33:37:20:70:07:b4:6b:0e:87:da:
         42:a8:a9:73:19:f0:c8:8c:09:ec:31:27:c0:12:02:c1:6a:27:
         7f:8e:1f:dc:b0:d9:1e:c9:1b:3a:eb:eb:fa:71:a6:0f:62:63:
         b0:a5:f1:22:34:ba:63:a3:74:74:26:20:f4:61:d9:e5:45:2b:
         5e:4f:0b:c9
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBCAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw
MjE5MDFaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDI0OTkyRTFENTU2QURG
MjdFRUU4NjZERUQ4NzM1Mjc0OTFGMTVGNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDpXgqv5mGj5DxNyw/MZyJJFDn26qURLnPG7CMYK3bjxSVpg+aE
fRip8Q/RCisJoYFBGiiDQ2oS1lrjhMLfWflY+E79EUqPbwjkbH21eHpZ8aMZkFkI
/zlrWlgkWe3jGaaUg1gM4Xh/byMmY9mJUISWmCzRjL7ybtvXavD+u12SwFZTKhhu
e5ybL52DW57ESf8yQ76VItB5nbgg4UkcLcxyz5CvJR4ZZzUjz3W5sKu6VUOC7MbJ
czlDbLgyBWe1TlEEF2KMZmogbPgy5J2pdM6P/GxpAtrpUBmgJ/lQiKz8jtNe6D1o
/dQm6D1bKcsgvuU7mJq0kx4dYuse1FtjMZyhAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUJJkuHVVq3yfu6Gbe2HNSdJHxX0IwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL0pKa3VIVlZxM3lmdTZHYmUySE5TZEpIeFgwSS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAfS/wAwDQYJKoZIhvcNAQELBQADggEBABTF4hExp921BW1yRqcJk4tEzjr6
Cxrm1uQ4bQXaTaBD1cSQrD3Jij8DTNlc3cv+JifPmoVx8pUFMY/FlXnbPajdGR/x
nCa/GydewauCaz6CQPEuFLebN5WT9wPEVUN0b8VsHK4hr81iTt0LeWCNKJHN/aBQ
R1GUnmQ92pGaFsif0KPj4lik8y4HdX5vYIqZvJbt6nIEB3KyYvbmqrYJdzg2jy3x
mUzusfn+QfF+LrEiUrGmBQQIrDJxdUHUMzcgcAe0aw6H2kKoqXMZ8MiMCewxJ8AS
AsFqJ3+OH9yw2R7JGzrr6/pxpg9iY7Cl8SI0umOjdHQmIPRh2eVFK15PC8k=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:56 2025 by rpki-client