Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/eFI5s42Xn8OLRXv-x9M8g7FMnKI.roa
File:                     eFI5s42Xn8OLRXv-x9M8g7FMnKI.roa (raw, json)
Hash identifier:          xHdMcKhlSWf1T5FEUZ1ZXMj5uea7GavRfdtdaJL4udI=
Subject key identifier:   78:52:39:B3:8D:97:9F:C3:8B:45:7B:FE:C7:D3:3C:83:B1:4C:9C:A2
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       03E0
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/eFI5s42Xn8OLRXv-x9M8g7FMnKI.roa
Signing time:             Wed 18 Dec 2024 02:16:31 +0000
ROA not before:           Wed 18 Dec 2024 02:16:31 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        125.50.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 992 (0x3e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:16:31 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=785239B38D979FC38B457BFEC7D33C83B14C9CA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b9:21:ba:6e:98:b6:14:f1:0d:cb:fa:45:ee:
                    05:eb:d4:e7:ff:8b:2f:10:bc:c8:f5:c2:30:a3:5e:
                    e9:02:9d:7b:cd:09:41:6e:29:cb:72:3b:36:70:e6:
                    68:ce:b0:02:0e:10:9a:53:f8:0e:e6:4e:23:ee:86:
                    87:19:df:9d:5c:21:67:7e:ca:94:8c:23:5e:6c:7e:
                    05:62:3f:63:6b:1c:15:c4:92:06:78:76:d8:2c:c5:
                    1b:e2:a8:74:62:46:af:0d:7e:09:5f:58:35:80:3f:
                    c0:ce:bc:7e:d9:b2:39:e5:00:43:d4:dc:dc:8d:7d:
                    42:5a:43:12:62:3b:44:34:b5:f6:73:9f:73:7c:28:
                    13:54:e4:79:fe:14:0d:b7:ca:08:44:c9:01:76:e7:
                    2c:ea:89:e9:35:f9:1a:92:3c:8e:3a:08:8b:1c:cb:
                    c7:5b:d2:65:a1:fe:2c:46:a7:0a:5a:21:55:90:88:
                    b4:da:0f:fa:32:e1:e0:79:6a:c5:a1:6a:46:e1:bb:
                    58:d3:f6:5a:3d:00:c5:f6:0e:db:e4:c4:03:e4:6c:
                    f4:e1:39:fc:16:28:1a:32:50:ff:3a:d0:5f:37:19:
                    b0:7c:f8:3a:12:c1:de:c4:e7:60:2f:17:3c:9a:7e:
                    cb:3e:79:2f:e3:a2:2b:b1:24:f3:4b:d5:10:61:e8:
                    d5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:52:39:B3:8D:97:9F:C3:8B:45:7B:FE:C7:D3:3C:83:B1:4C:9C:A2
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/eFI5s42Xn8OLRXv-x9M8g7FMnKI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.50.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8e:9d:11:83:a4:67:ce:74:ed:e6:aa:d4:7a:75:f7:92:90:52:
         bb:db:d7:db:14:23:b2:24:a4:a3:ad:f2:6c:03:08:62:a5:05:
         a6:c9:2b:48:69:a8:d1:38:2e:46:c1:d4:3b:d5:3f:3d:22:fa:
         2d:14:5f:96:8a:2a:d7:0d:af:3f:3d:44:29:06:52:fa:98:b3:
         92:09:02:68:dc:7e:06:d2:4c:73:6b:6d:fe:f6:82:de:5b:ef:
         59:98:95:20:50:b1:52:f3:23:e4:ed:a7:ab:e4:04:26:f1:9a:
         1b:ce:74:8f:48:0f:f8:c2:2c:34:57:c7:a5:8d:af:8d:cc:d3:
         58:c8:77:df:06:4f:0a:f8:c0:c0:ca:48:44:74:87:0a:92:ed:
         45:e8:2c:b1:e5:55:e3:32:a4:bb:29:07:bd:0a:f2:3b:a8:bb:
         e9:9a:94:29:7c:16:36:25:7a:a9:b6:82:2a:e0:7e:ea:23:5c:
         9d:98:4e:7a:7e:c4:cf:97:ab:76:1a:6f:6b:7e:3c:24:6b:67:
         23:8b:e1:e3:b2:87:63:f0:f1:8e:11:27:f9:44:8c:86:7b:ed:
         39:f5:12:7c:4c:c7:3a:83:de:79:6f:80:41:3d:f9:eb:eb:ee:
         87:b7:3e:ff:cc:ea:cb:35:03:f9:a5:10:88:31:e5:50:b1:ff:
         90:8c:6c:c7
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICA+AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw
MjE2MzFaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDc4NTIzOUIzOEQ5NzlG
QzM4QjQ1N0JGRUM3RDMzQzgzQjE0QzlDQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBuSG6bpi2FPENy/pF7gXr1Of/iy8QvMj1wjCjXukCnXvNCUFu
KctyOzZw5mjOsAIOEJpT+A7mTiPuhocZ351cIWd+ypSMI15sfgViP2NrHBXEkgZ4
dtgsxRviqHRiRq8NfglfWDWAP8DOvH7ZsjnlAEPU3NyNfUJaQxJiO0Q0tfZzn3N8
KBNU5Hn+FA23yghEyQF25yzqiek1+RqSPI46CIscy8db0mWh/ixGpwpaIVWQiLTa
D/oy4eB5asWhakbhu1jT9lo9AMX2DtvkxAPkbPThOfwWKBoyUP860F83GbB8+DoS
wd7E52AvFzyafss+eS/joiuxJPNL1RBh6NWrAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUeFI5s42Xn8OLRXv+x9M8g7FMnKIwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL2VGSTVzNDJYbjhPTFJYdi14OU04ZzdGTW5LSS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwB9MjANBgkqhkiG9w0BAQsFAAOCAQEAjp0Rg6RnznTt5qrUenX3kpBSu9vX
2xQjsiSko63ybAMIYqUFpskrSGmo0TguRsHUO9U/PSL6LRRflooq1w2vPz1EKQZS
+pizkgkCaNx+BtJMc2tt/vaC3lvvWZiVIFCxUvMj5O2nq+QEJvGaG850j0gP+MIs
NFfHpY2vjczTWMh33wZPCvjAwMpIRHSHCpLtRegsseVV4zKkuykHvQryO6i76ZqU
KXwWNiV6qbaCKuB+6iNcnZhOen7Ez5erdhpva348JGtnI4vh47KHY/DxjhEn+USM
hnvtOfUSfEzHOoPeeW+AQT356+vuh7c+/8zqyzUD+aUQiDHlULH/kIxsxw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:00 2025 by rpki-client