Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/ixsj0UWdOesaeDn3EsdkLOmXgNo.roa
File:                     ixsj0UWdOesaeDn3EsdkLOmXgNo.roa (raw, json)
Hash identifier:          3lBs2yGTSoha8uxHQYwqoCoCC29X88Qx7jMT6JBY1h0=
Subject key identifier:   8B:1B:23:D1:45:9D:39:EB:1A:78:39:F7:12:C7:64:2C:E9:97:80:DA
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0580
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ixsj0UWdOesaeDn3EsdkLOmXgNo.roa
Signing time:             Wed 26 Feb 2025 09:23:06 +0000
ROA not before:           Wed 26 Feb 2025 09:23:06 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     2516
IP address blocks:        14.12.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1408 (0x580)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Feb 26 09:23:06 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=8B1B23D1459D39EB1A7839F712C7642CE99780DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:60:97:d8:f1:b8:6d:a1:31:bd:cd:d7:17:b3:
                    a4:59:16:35:b0:eb:b2:bf:e6:c9:a3:5f:44:35:09:
                    f3:7d:f5:22:b6:8c:bb:4a:9c:6d:5f:34:41:03:79:
                    78:46:74:cd:58:93:84:50:d6:70:cd:2a:c7:f4:a7:
                    94:83:66:70:e0:59:12:b2:dc:a6:c2:93:61:2f:4e:
                    2b:b0:b1:a2:bf:7f:8d:ad:41:e9:7e:40:2d:7f:fa:
                    db:e7:87:29:46:3c:6c:75:9b:fc:54:7e:b9:52:ab:
                    20:22:35:d5:ed:86:6a:32:95:f4:03:f2:b3:df:69:
                    d3:9c:59:4d:28:27:3d:92:14:01:40:68:99:08:b3:
                    8f:0d:c6:f8:a9:8f:5b:cb:c6:ce:2d:37:67:48:a0:
                    ab:b3:b8:25:04:3a:b2:94:a9:79:c7:3f:27:2f:d9:
                    5f:ac:e6:99:e4:8f:8a:ee:ae:11:64:24:51:1e:6d:
                    82:c3:41:09:ed:6c:77:b1:48:38:25:cd:44:57:83:
                    9c:bb:e9:98:25:8d:e4:35:62:17:c1:f0:9c:f6:66:
                    77:e6:67:45:66:40:39:53:9c:20:04:e5:34:f5:1f:
                    e0:22:58:b5:f6:c6:65:09:f2:e6:18:9c:2d:bf:ab:
                    e5:4b:3f:da:30:80:b3:de:48:91:18:91:a7:18:4f:
                    b6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1B:23:D1:45:9D:39:EB:1A:78:39:F7:12:C7:64:2C:E9:97:80:DA
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ixsj0UWdOesaeDn3EsdkLOmXgNo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.12.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         68:4a:05:70:09:0b:a1:8b:61:68:62:c0:fa:3d:5a:f9:19:a9:
         d7:a2:20:06:31:c6:e4:5a:19:5f:60:d1:62:a5:0c:40:2b:61:
         a7:24:d2:ac:9a:f8:66:49:9b:b1:ed:c9:87:bf:4d:84:3e:85:
         98:09:c4:5b:20:4b:90:a0:26:3a:e5:88:aa:4f:c3:6f:8b:aa:
         6a:13:ad:e7:a9:bd:d2:48:81:7b:47:3b:df:0a:ee:d3:bb:9c:
         79:da:c6:2d:4c:52:45:c6:9f:12:1d:47:5a:41:9a:84:3e:60:
         b5:21:cc:08:0e:5b:13:69:23:ac:f9:fc:07:05:30:79:11:ce:
         fc:20:d0:32:cc:df:76:58:5e:06:13:5e:6d:f8:be:6b:8c:bb:
         ea:cc:29:ee:fb:93:f6:bb:17:d0:e3:40:f2:e6:56:0b:60:4d:
         e6:40:e1:41:c5:a9:a8:1f:ac:61:9b:b9:31:8a:4b:93:25:75:
         f9:c9:31:ae:41:b0:3b:9b:75:c4:9c:91:91:72:06:c6:fd:56:
         fd:21:b3:73:94:5f:ad:f2:04:cb:ed:78:6f:40:b4:21:de:2b:
         da:69:8f:da:cf:11:ec:d7:b9:fc:2b:b5:a0:4d:21:01:95:a4:
         b4:df:b7:99:64:ba:25:f0:10:74:a4:a2:7b:f5:92:64:15:35:
         e1:43:30:03
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICBYAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNTAyMjYw
OTIzMDZaFw0yNjAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDhCMUIyM0QxNDU5RDM5
RUIxQTc4MzlGNzEyQzc2NDJDRTk5NzgwREEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDnYJfY8bhtoTG9zdcXs6RZFjWw67K/5smjX0Q1CfN99SK2jLtK
nG1fNEEDeXhGdM1Yk4RQ1nDNKsf0p5SDZnDgWRKy3KbCk2EvTiuwsaK/f42tQel+
QC1/+tvnhylGPGx1m/xUfrlSqyAiNdXthmoylfQD8rPfadOcWU0oJz2SFAFAaJkI
s48Nxvipj1vLxs4tN2dIoKuzuCUEOrKUqXnHPycv2V+s5pnkj4rurhFkJFEebYLD
QQntbHexSDglzURXg5y76ZgljeQ1YhfB8Jz2ZnfmZ0VmQDlTnCAE5TT1H+AiWLX2
xmUJ8uYYnC2/q+VLP9owgLPeSJEYkacYT7ZdAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUixsj0UWdOesaeDn3EsdkLOmXgNowHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL2l4c2owVVdkT2VzYWVEbjNFc2RrTE9tWGdOby5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwEODDANBgkqhkiG9w0BAQsFAAOCAQEAaEoFcAkLoYthaGLA+j1a+Rmp16Ig
BjHG5FoZX2DRYqUMQCthpyTSrJr4Zkmbse3Jh79NhD6FmAnEWyBLkKAmOuWIqk/D
b4uqahOt56m90kiBe0c73wru07ucedrGLUxSRcafEh1HWkGahD5gtSHMCA5bE2kj
rPn8BwUweRHO/CDQMszfdlheBhNebfi+a4y76swp7vuT9rsX0ONA8uZWC2BN5kDh
QcWpqB+sYZu5MYpLkyV1+ckxrkGwO5t1xJyRkXIGxv1W/SGzc5RfrfIEy+14b0C0
Id4r2mmP2s8R7Ne5/Cu1oE0hAZWktN+3mWS6JfAQdKSie/WSZBU14UMwAw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:11:56 2025 by rpki-client