Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/bMUwS8gmRFZFqu1ylU86w_FH_X8.roa
File:                     bMUwS8gmRFZFqu1ylU86w_FH_X8.roa (raw, json)
Hash identifier:          Z4SjNRQd4L0Thub7v4RaZacUnYHxwfDXQbOYuozAGSw=
Subject key identifier:   6C:C5:30:4B:C8:26:44:56:45:AA:ED:72:95:4F:3A:C3:F1:47:FD:7F
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0543
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/bMUwS8gmRFZFqu1ylU86w_FH_X8.roa
Signing time:             Wed 18 Dec 2024 02:44:21 +0000
ROA not before:           Wed 18 Dec 2024 02:44:21 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        210.250.22.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1347 (0x543)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:44:21 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=6CC5304BC826445645AAED72954F3AC3F147FD7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:03:34:95:a1:eb:a4:bf:92:62:68:b8:6d:b2:
                    4c:b9:69:8d:5c:d9:5d:3b:4d:68:0b:be:90:d3:a6:
                    45:98:58:51:8d:49:31:25:34:6c:1f:1b:4b:bb:75:
                    48:8e:9c:b1:2a:b2:25:2b:b7:f4:e0:de:d0:70:62:
                    05:0b:96:0d:cb:da:4d:0a:f0:a0:f4:7b:05:2e:79:
                    f0:5f:ea:61:fa:55:fa:ba:59:d9:ef:bc:29:ff:2f:
                    80:e6:64:63:3a:fe:b2:1f:13:54:98:d4:90:39:8a:
                    e4:31:e8:d4:20:55:97:15:68:59:70:ee:11:f0:bf:
                    66:4b:0c:d6:e3:54:99:7e:bf:94:70:b4:54:a8:b7:
                    ba:3c:0f:e3:6f:28:8e:d9:06:b6:bc:e9:2a:e5:05:
                    80:a0:90:7f:34:eb:61:11:a5:fd:56:dd:e2:a9:e5:
                    5a:e7:05:2c:13:b3:8e:dc:be:8f:02:2a:9d:be:f3:
                    d0:db:08:f6:59:b7:67:31:b0:6e:06:e2:52:cc:78:
                    01:6d:ab:ff:b9:00:82:1e:0e:f3:a6:d5:f3:fe:e5:
                    25:9d:6f:b3:96:1d:2e:d6:e8:b3:f2:9d:e0:a7:99:
                    7b:86:6a:19:4e:33:e2:f3:71:49:a7:ff:0c:ee:1e:
                    db:2b:91:71:8f:1c:7f:e5:16:b4:64:3b:b7:dc:c6:
                    80:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C5:30:4B:C8:26:44:56:45:AA:ED:72:95:4F:3A:C3:F1:47:FD:7F
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/bMUwS8gmRFZFqu1ylU86w_FH_X8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.250.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:6e:20:26:92:85:6b:44:75:92:8f:13:cc:43:d7:4f:f8:34:
         4b:0b:dd:fa:eb:3b:f7:94:59:bc:2c:d4:51:0c:04:f9:ec:f8:
         e3:dd:7e:11:d9:81:15:5f:00:33:93:c8:e8:44:5c:b9:23:ea:
         f8:b6:ea:22:b7:fa:d7:27:42:8b:20:bc:6b:7f:1f:fd:b7:b3:
         3f:ea:bc:0f:83:a2:db:fa:31:9b:8c:d7:ed:43:80:13:81:93:
         0b:49:9a:c6:a2:85:c5:ea:9e:18:c5:3c:f2:7b:3c:15:6b:db:
         a1:fe:47:bd:df:c9:38:58:ad:c6:3a:04:56:88:fa:c8:e4:9a:
         f6:42:84:0d:60:6a:c5:fb:d0:ed:92:0f:e9:5f:58:e0:c1:c8:
         84:d9:4b:0b:c8:78:4f:e0:cb:12:80:85:35:9b:7e:81:8c:f9:
         bb:ff:a4:fe:37:4e:f3:e4:0f:41:75:b6:82:06:26:3e:f1:14:
         67:6f:88:9b:b0:0c:0d:bd:8f:4e:0d:19:44:e8:69:86:94:b6:
         da:84:53:ce:7c:92:5d:dd:63:72:e7:62:48:a8:e9:be:ee:3b:
         fd:d4:1d:fd:b7:35:bf:21:56:14:1f:15:81:c3:3c:bb:3e:7e:
         f8:74:f4:cd:6e:55:45:c9:8e:d5:b5:8c:ae:74:3d:2c:ea:da:
         4e:a7:25:f4
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBUMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw
MjQ0MjFaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDZDQzUzMDRCQzgyNjQ0
NTY0NUFBRUQ3Mjk1NEYzQUMzRjE0N0ZEN0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDfAzSVoeukv5JiaLhtsky5aY1c2V07TWgLvpDTpkWYWFGNSTEl
NGwfG0u7dUiOnLEqsiUrt/Tg3tBwYgULlg3L2k0K8KD0ewUuefBf6mH6Vfq6Wdnv
vCn/L4DmZGM6/rIfE1SY1JA5iuQx6NQgVZcVaFlw7hHwv2ZLDNbjVJl+v5RwtFSo
t7o8D+NvKI7ZBra86SrlBYCgkH8062ERpf1W3eKp5VrnBSwTs47cvo8CKp2+89Db
CPZZt2cxsG4G4lLMeAFtq/+5AIIeDvOm1fP+5SWdb7OWHS7W6LPyneCnmXuGahlO
M+LzcUmn/wzuHtsrkXGPHH/lFrRkO7fcxoC/AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUbMUwS8gmRFZFqu1ylU86w/FH/X8wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL2JNVXdTOGdtUkZaRnF1MXlsVTg2d19GSF9YOC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAHS+hYwDQYJKoZIhvcNAQELBQADggEBAAhuICaShWtEdZKPE8xD10/4NEsL
3frrO/eUWbws1FEMBPns+OPdfhHZgRVfADOTyOhEXLkj6vi26iK3+tcnQosgvGt/
H/23sz/qvA+Dotv6MZuM1+1DgBOBkwtJmsaihcXqnhjFPPJ7PBVr26H+R73fyThY
rcY6BFaI+sjkmvZChA1gasX70O2SD+lfWODByITZSwvIeE/gyxKAhTWbfoGM+bv/
pP43TvPkD0F1toIGJj7xFGdviJuwDA29j04NGUToaYaUttqEU858kl3dY3LnYkio
6b7uO/3UHf23Nb8hVhQfFYHDPLs+fvh09M1uVUXJjtW1jK50PSzq2k6nJfQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:40 2025 by rpki-client