Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/PndhXuZgJxcSXo_ZkyH445sdJoA.roa
File:                     PndhXuZgJxcSXo_ZkyH445sdJoA.roa (raw, json)
Hash identifier:          kkJtC5KoHXrCgouDYEski+DN7ZL3C4t9cYrloIlmj/M=
Subject key identifier:   3E:77:61:5E:E6:60:27:17:12:5E:8F:D9:93:21:F8:E3:9B:1D:26:80
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0549
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/PndhXuZgJxcSXo_ZkyH445sdJoA.roa
Signing time:             Wed 18 Dec 2024 02:44:23 +0000
ROA not before:           Wed 18 Dec 2024 02:44:23 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        222.225.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1353 (0x549)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:44:23 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=3E77615EE6602717125E8FD99321F8E39B1D2680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:10:7e:79:4a:cc:55:c0:2b:01:1b:11:40:16:
                    30:ce:ef:71:1a:4b:e8:ee:d8:61:b7:b2:60:ad:6a:
                    4a:e4:ed:2d:64:2d:a7:4f:b3:6f:21:be:e1:13:31:
                    10:ef:40:19:2e:59:30:8a:94:3f:63:5e:03:00:dd:
                    23:6f:8b:83:51:a9:4a:29:7f:4e:25:01:9d:42:7d:
                    ea:49:9f:0c:d7:3b:93:2a:b7:94:97:00:6d:49:81:
                    3d:27:0c:49:8d:88:25:69:e3:72:3f:ce:72:92:7c:
                    ae:48:66:53:3f:5c:69:ba:12:d1:1b:6f:be:54:c9:
                    2e:a8:d9:3f:2e:1d:82:0c:ce:2d:38:f4:58:04:62:
                    54:4d:a8:5c:5e:3d:69:e1:4a:c8:cf:87:a9:35:9f:
                    eb:95:0b:75:65:07:0e:d6:8c:d6:20:e0:6f:36:4f:
                    7b:6e:f1:dd:b3:8e:47:cc:e8:8c:5d:db:3a:94:1f:
                    e8:b6:d0:98:c6:eb:a7:e3:9c:70:38:72:b3:07:58:
                    b1:46:78:d3:a7:f4:0b:9a:d7:31:c4:83:2d:b7:8c:
                    0a:89:d5:24:fb:f6:2a:b2:c4:22:50:b9:7f:bd:37:
                    9c:fe:04:9d:e6:28:6f:ef:40:bb:01:76:0f:c0:85:
                    f8:9d:5f:4c:8e:df:7b:51:3a:5b:85:e1:8c:d7:d7:
                    c2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:77:61:5E:E6:60:27:17:12:5E:8F:D9:93:21:F8:E3:9B:1D:26:80
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/PndhXuZgJxcSXo_ZkyH445sdJoA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.225.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4c:42:a9:4e:84:ce:97:c9:0c:ee:84:5e:d7:3a:fb:65:5d:16:
         15:a0:08:26:d6:05:e1:b4:3f:83:b5:ea:06:33:86:77:45:a4:
         79:03:5f:cb:2e:85:08:93:bb:53:ca:34:ea:54:c9:f3:8f:20:
         29:8e:e5:d2:4b:71:cf:0d:cf:25:6f:95:84:59:fc:d4:c4:34:
         c1:e5:04:80:33:05:51:e9:62:d7:d3:a4:7a:c3:b6:2a:7b:64:
         ea:19:55:6b:dc:b7:a4:56:58:c7:32:3c:1a:d6:6f:53:8d:47:
         cb:6f:0e:7a:44:e8:9f:61:82:3b:8a:19:f9:e8:58:b1:3c:cf:
         42:05:b5:8e:00:7b:c9:d6:2f:63:17:cb:56:82:09:b7:74:53:
         27:f0:7a:f9:5a:7e:2d:92:b7:8c:16:ad:32:0b:3f:c7:62:a7:
         88:15:7f:4e:d5:38:b5:a2:8a:9b:2c:95:32:db:a7:cb:38:1e:
         db:ad:81:18:0f:63:a7:5e:b3:0f:d1:56:f2:6e:e4:c8:d2:75:
         cd:1a:04:d0:f8:7f:c9:46:c0:ba:28:cf:d2:39:d1:16:8c:e9:
         76:f1:60:1c:50:49:c7:1e:b4:e0:c5:11:06:02:ad:92:6f:0a:
         9e:41:4d:ae:3b:56:7b:cf:17:21:db:bd:a2:ab:ab:5e:68:a8:
         65:e1:a0:f1
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICBUkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw
MjQ0MjNaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDNFNzc2MTVFRTY2MDI3
MTcxMjVFOEZEOTkzMjFGOEUzOUIxRDI2ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNEH55SsxVwCsBGxFAFjDO73EaS+ju2GG3smCtakrk7S1kLadP
s28hvuETMRDvQBkuWTCKlD9jXgMA3SNvi4NRqUopf04lAZ1CfepJnwzXO5Mqt5SX
AG1JgT0nDEmNiCVp43I/znKSfK5IZlM/XGm6EtEbb75UyS6o2T8uHYIMzi049FgE
YlRNqFxePWnhSsjPh6k1n+uVC3VlBw7WjNYg4G82T3tu8d2zjkfM6Ixd2zqUH+i2
0JjG66fjnHA4crMHWLFGeNOn9Aua1zHEgy23jAqJ1ST79iqyxCJQuX+9N5z+BJ3m
KG/vQLsBdg/AhfidX0yO33tROluF4YzX18INAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUPndhXuZgJxcSXo/ZkyH445sdJoAwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL1BuZGhYdVpnSnhjU1hvX1preUg0NDVzZEpvQS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDe4TANBgkqhkiG9w0BAQsFAAOCAQEATEKpToTOl8kM7oRe1zr7ZV0WFaAI
JtYF4bQ/g7XqBjOGd0WkeQNfyy6FCJO7U8o06lTJ848gKY7l0ktxzw3PJW+VhFn8
1MQ0weUEgDMFUeli19OkesO2Kntk6hlVa9y3pFZYxzI8GtZvU41Hy28OekTon2GC
O4oZ+ehYsTzPQgW1jgB7ydYvYxfLVoIJt3RTJ/B6+Vp+LZK3jBatMgs/x2KniBV/
TtU4taKKmyyVMtunyzge262BGA9jp16zD9FW8m7kyNJ1zRoE0Ph/yUbAuijP0jnR
FozpdvFgHFBJxx604MURBgKtkm8KnkFNrjtWe88XIdu9oqurXmioZeGg8Q==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:37:37 2025 by rpki-client