Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/amxIa_O7xCBOLzPpOXl6CbZIu9g.roa
File:                     amxIa_O7xCBOLzPpOXl6CbZIu9g.roa (raw, json)
Hash identifier:          s3Q209WWHPlAONvMTFhQDTtJgcQIz0/vf9XvxznsmhA=
Subject key identifier:   6A:6C:48:6B:F3:BB:C4:20:4E:2F:33:E9:39:79:7A:09:B6:48:BB:D8
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0410
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/amxIa_O7xCBOLzPpOXl6CbZIu9g.roa
Signing time:             Wed 18 Dec 2024 02:18:56 +0000
ROA not before:           Wed 18 Dec 2024 02:18:56 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        59.136.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1040 (0x410)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:18:56 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=6A6C486BF3BBC4204E2F33E939797A09B648BBD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:29:cf:4c:73:25:9b:ae:0d:75:6c:a8:80:1d:
                    98:53:cd:cf:47:fa:66:5b:99:b1:6c:81:3c:02:06:
                    5a:06:90:7a:fb:9e:5b:82:48:34:7b:68:f1:21:40:
                    9c:6f:29:6d:09:14:ae:9f:21:48:97:a8:ee:81:07:
                    f9:15:b6:b4:64:28:40:43:19:11:39:e6:ad:f8:11:
                    b4:b9:53:8b:e1:e3:aa:ef:c9:6b:cf:11:b1:6e:07:
                    65:d6:1f:07:71:51:6a:1f:be:de:44:96:d2:b7:38:
                    83:76:b4:7c:c3:d5:6a:9d:fa:c1:cb:b9:17:c3:3c:
                    36:32:bb:5a:48:2d:09:95:51:9d:0c:50:b9:ab:23:
                    96:46:32:27:0e:0c:21:f0:72:3a:bc:ef:74:eb:18:
                    d1:f5:b8:9d:c1:e9:16:08:0d:1a:0d:e5:a2:12:95:
                    74:a8:ba:61:67:15:c2:a0:27:3c:1e:67:98:87:2a:
                    aa:1b:a9:b9:18:6c:8d:25:02:03:1c:81:b8:45:67:
                    ed:0e:60:4f:32:45:c8:07:66:fd:0b:f3:46:cc:41:
                    9a:28:b4:ca:c4:ea:6c:07:5b:c2:71:46:7f:3f:19:
                    de:31:94:c9:25:28:48:2c:c9:7a:79:75:52:9b:45:
                    60:e3:f3:af:41:18:f6:59:cb:35:21:8b:3e:6b:6b:
                    f1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:6C:48:6B:F3:BB:C4:20:4E:2F:33:E9:39:79:7A:09:B6:48:BB:D8
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/amxIa_O7xCBOLzPpOXl6CbZIu9g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.136.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         11:98:c9:b2:cd:7b:7d:66:10:8f:54:8d:01:94:27:d4:25:02:
         9d:9a:f1:1f:eb:fd:f1:ff:16:34:d1:c1:bd:d9:b6:45:97:a7:
         85:9a:d8:6f:2b:72:f3:9c:c0:93:b9:a7:30:53:cb:e6:67:95:
         9e:f3:3f:7e:4c:2f:2e:2a:60:82:a9:0b:a9:61:73:0f:ad:85:
         e3:f0:ff:2f:66:82:3a:8d:79:9c:8f:7a:5b:c1:04:28:0f:4b:
         3b:8a:a8:81:88:b2:47:8d:2b:68:3d:b3:98:b3:b1:7a:3d:2a:
         0d:28:e5:db:28:09:86:3f:f0:81:68:3a:c6:b8:5d:ed:03:c7:
         3a:7f:87:bf:3f:46:86:b1:d2:93:89:3d:7b:81:6f:de:7a:f8:
         9b:d2:fa:90:9a:fd:ba:db:a3:50:2c:10:e0:15:4c:d6:f0:7a:
         41:a0:be:ef:81:05:c1:5f:5c:d9:ac:4c:97:cc:f5:28:f4:13:
         87:86:88:26:d3:7e:c7:af:9f:14:f8:be:81:2d:9f:a9:36:51:
         34:bf:8a:26:db:90:03:52:07:74:e8:69:2c:e9:95:fd:15:d2:
         12:47:a3:f5:10:2c:b2:94:ed:3f:32:7e:18:97:ea:23:82:e4:
         0e:60:9a:35:54:84:d4:a5:04:58:c5:ca:c0:f8:d7:8f:04:c2:
         7a:73:57:d2
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICBBAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw
MjE4NTZaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDZBNkM0ODZCRjNCQkM0
MjA0RTJGMzNFOTM5Nzk3QTA5QjY0OEJCRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/Kc9McyWbrg11bKiAHZhTzc9H+mZbmbFsgTwCBloGkHr7nluC
SDR7aPEhQJxvKW0JFK6fIUiXqO6BB/kVtrRkKEBDGRE55q34EbS5U4vh46rvyWvP
EbFuB2XWHwdxUWofvt5EltK3OIN2tHzD1Wqd+sHLuRfDPDYyu1pILQmVUZ0MULmr
I5ZGMicODCHwcjq873TrGNH1uJ3B6RYIDRoN5aISlXSoumFnFcKgJzweZ5iHKqob
qbkYbI0lAgMcgbhFZ+0OYE8yRcgHZv0L80bMQZootMrE6mwHW8JxRn8/Gd4xlMkl
KEgsyXp5dVKbRWDj869BGPZZyzUhiz5ra/EVAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUamxIa/O7xCBOLzPpOXl6CbZIu9gwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL2FteElhX083eENCT0x6UHBPWGw2Q2JaSXU5Zy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA7iDANBgkqhkiG9w0BAQsFAAOCAQEAEZjJss17fWYQj1SNAZQn1CUCnZrx
H+v98f8WNNHBvdm2RZenhZrYbyty85zAk7mnMFPL5meVnvM/fkwvLipggqkLqWFz
D62F4/D/L2aCOo15nI96W8EEKA9LO4qogYiyR40raD2zmLOxej0qDSjl2ygJhj/w
gWg6xrhd7QPHOn+Hvz9GhrHSk4k9e4Fv3nr4m9L6kJr9utujUCwQ4BVM1vB6QaC+
74EFwV9c2axMl8z1KPQTh4aIJtN+x6+fFPi+gS2fqTZRNL+KJtuQA1IHdOhpLOmV
/RXSEkej9RAsspTtPzJ+GJfqI4LkDmCaNVSE1KUEWMXKwPjXjwTCenNX0g==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:21 2025 by rpki-client