Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/YJcl5bhefYsS0N4-1sXE_DRdtw0.roa
File:                     YJcl5bhefYsS0N4-1sXE_DRdtw0.roa (raw, json)
Hash identifier:          uimz1tAG2LuS7RA59L0ynk2LLHQv0bV/Czi2QbM17Zs=
Subject key identifier:   60:97:25:E5:B8:5E:7D:8B:12:D0:DE:3E:D6:C5:C4:FC:34:5D:B7:0D
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0415
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/YJcl5bhefYsS0N4-1sXE_DRdtw0.roa
Signing time:             Wed 18 Dec 2024 02:18:58 +0000
ROA not before:           Wed 18 Dec 2024 02:18:58 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        219.125.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1045 (0x415)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:18:58 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=609725E5B85E7D8B12D0DE3ED6C5C4FC345DB70D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1c:55:ab:53:a2:3f:51:f2:09:ff:b3:b2:ec:
                    37:9d:2c:8d:39:5c:cb:90:98:18:f4:ae:8d:7d:5b:
                    a3:9e:d7:a8:e2:68:68:5f:26:55:86:b2:5c:9f:c2:
                    08:b3:a1:55:73:8e:98:4c:ba:6a:e4:dc:17:b8:12:
                    9e:20:2a:39:6c:36:67:a8:f0:ca:58:a0:48:e1:97:
                    6b:a0:04:93:73:89:96:b6:54:30:fd:d2:0e:70:cb:
                    89:d1:1d:61:58:04:b6:4e:89:33:c8:1c:00:73:ef:
                    aa:bf:d1:85:7c:2c:f7:12:a5:71:07:8b:65:7d:d6:
                    81:b2:bb:a6:64:10:f5:0a:b6:57:09:02:02:55:f4:
                    6c:1d:b2:ac:a3:fd:9f:09:2d:17:7d:04:ab:93:84:
                    8c:dd:4e:32:bf:a3:5a:59:38:56:13:6d:af:ce:9d:
                    d2:cd:ac:45:40:02:db:7d:e1:f5:d9:be:dd:36:b5:
                    f7:60:a5:b4:9b:15:8a:ac:2f:49:77:53:85:5f:fe:
                    72:8c:f3:5c:1d:5d:78:b1:ff:f4:9a:7c:a0:d3:f5:
                    92:7b:58:ea:d8:12:c8:7f:cf:c7:c8:b9:b4:ae:f1:
                    80:d3:b7:90:20:b1:08:24:01:15:ff:d1:29:6e:04:
                    e9:3b:be:45:94:7e:41:dc:e5:ea:e2:b9:05:1b:19:
                    4d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:97:25:E5:B8:5E:7D:8B:12:D0:DE:3E:D6:C5:C4:FC:34:5D:B7:0D
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/YJcl5bhefYsS0N4-1sXE_DRdtw0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.125.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         89:be:3c:80:9e:23:b3:08:3f:c1:71:ad:ce:3d:ef:ad:df:61:
         04:e9:56:53:3f:1c:e4:4e:da:d4:b0:8f:15:ad:7c:b3:7a:c6:
         8f:e1:73:26:61:d0:6f:87:21:96:48:7b:39:67:10:d7:08:66:
         4c:e2:2e:cd:eb:0a:b4:6c:29:92:20:1c:d6:74:cb:4d:37:00:
         09:aa:3d:28:01:c1:1b:3b:f7:aa:9a:58:9c:02:1c:ed:fa:78:
         9b:73:cc:09:75:f8:ad:da:f6:a2:dc:8c:a3:a1:43:6b:50:98:
         4e:78:7d:28:47:e1:af:72:a3:4b:1f:7a:b1:70:a7:28:e1:37:
         bf:59:11:f0:e5:cb:19:9b:75:8b:02:f9:ee:67:b7:f2:bc:eb:
         c2:82:86:0b:60:55:29:b9:aa:18:73:09:8b:8c:1f:ed:32:77:
         86:a9:52:70:f7:6c:ec:94:28:76:11:4d:dd:14:a7:73:eb:0f:
         51:2d:2f:b1:7b:92:e3:5a:45:36:75:69:e2:fd:57:04:9b:dc:
         26:db:14:87:c3:4b:50:06:38:25:e3:b9:bc:b6:cb:9b:87:1a:
         9d:fa:51:89:74:2f:c2:32:51:ca:93:d0:25:64:0e:2b:14:8a:
         0a:48:4a:a3:f2:c4:0e:70:67:55:11:b8:bc:f3:81:e1:af:f7:
         58:f0:64:8a
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICBBUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw
MjE4NThaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDYwOTcyNUU1Qjg1RTdE
OEIxMkQwREUzRUQ2QzVDNEZDMzQ1REI3MEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMHFWrU6I/UfIJ/7Oy7DedLI05XMuQmBj0ro19W6Oe16jiaGhf
JlWGslyfwgizoVVzjphMumrk3Be4Ep4gKjlsNmeo8MpYoEjhl2ugBJNziZa2VDD9
0g5wy4nRHWFYBLZOiTPIHABz76q/0YV8LPcSpXEHi2V91oGyu6ZkEPUKtlcJAgJV
9Gwdsqyj/Z8JLRd9BKuThIzdTjK/o1pZOFYTba/OndLNrEVAAtt94fXZvt02tfdg
pbSbFYqsL0l3U4Vf/nKM81wdXXix//SafKDT9ZJ7WOrYEsh/z8fIubSu8YDTt5Ag
sQgkARX/0SluBOk7vkWUfkHc5eriuQUbGU1rAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUYJcl5bhefYsS0N4+1sXE/DRdtw0wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL1lKY2w1YmhlZllzUzBONC0xc1hFX0RSZHR3MC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDbfTANBgkqhkiG9w0BAQsFAAOCAQEAib48gJ4jswg/wXGtzj3vrd9hBOlW
Uz8c5E7a1LCPFa18s3rGj+FzJmHQb4chlkh7OWcQ1whmTOIuzesKtGwpkiAc1nTL
TTcACao9KAHBGzv3qppYnAIc7fp4m3PMCXX4rdr2otyMo6FDa1CYTnh9KEfhr3Kj
Sx96sXCnKOE3v1kR8OXLGZt1iwL57me38rzrwoKGC2BVKbmqGHMJi4wf7TJ3hqlS
cPds7JQodhFN3RSnc+sPUS0vsXuS41pFNnVp4v1XBJvcJtsUh8NLUAY4JeO5vLbL
m4canfpRiXQvwjJRypPQJWQOKxSKCkhKo/LEDnBnVRG4vPOB4a/3WPBkig==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:56:38 2025 by rpki-client