Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/kC2nXFTyB-vhz91-LokqqoK6Pm4.roa
File:                     kC2nXFTyB-vhz91-LokqqoK6Pm4.roa (raw, json)
Hash identifier:          0DZUnf0J6a9f1AbkrST3HLiYT+9NGfMi/8QZbwAtlP0=
Subject key identifier:   90:2D:A7:5C:54:F2:07:EB:E1:CF:DD:7E:2E:89:2A:AA:82:BA:3E:6E
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       04F9
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/kC2nXFTyB-vhz91-LokqqoK6Pm4.roa
Signing time:             Wed 18 Dec 2024 02:40:07 +0000
ROA not before:           Wed 18 Dec 2024 02:40:07 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        210.238.18.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1273 (0x4f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:40:07 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=902DA75C54F207EBE1CFDD7E2E892AAA82BA3E6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:6a:3c:07:e9:cd:a3:11:1e:f5:10:28:f3:11:
                    a6:3c:3f:fb:ea:e7:c0:c9:8a:d1:ca:fb:94:c3:12:
                    84:f2:c4:4f:59:37:3d:ec:1c:6e:88:db:02:00:16:
                    bf:49:2d:3e:5c:af:cf:6e:02:a4:f4:f4:c4:c1:cf:
                    c3:44:65:75:7b:49:ed:e5:6d:ae:ff:1b:46:7c:e3:
                    33:4e:03:9f:65:7e:9f:62:4e:ff:08:d4:f2:8b:43:
                    80:5c:f8:87:19:f9:bc:05:1c:18:80:3a:3f:72:9d:
                    02:5b:63:cd:21:3b:84:39:83:d6:ae:0d:61:5b:f2:
                    a3:65:a8:f6:19:99:21:6c:3b:27:15:92:df:a6:87:
                    da:56:91:8e:26:e2:b3:86:92:88:f9:52:36:e7:38:
                    25:71:26:4e:c7:e9:08:50:21:62:19:a3:77:37:fb:
                    06:4c:6b:d0:f3:ac:2f:07:b9:23:32:11:f8:8c:03:
                    e5:e2:24:22:ee:5f:0b:e6:39:07:e2:bb:37:7c:2b:
                    9f:00:87:8f:bf:eb:84:bf:80:fb:8a:f1:3b:21:ad:
                    e6:5e:22:c5:4c:2a:dd:08:54:aa:e5:ce:06:27:9e:
                    06:47:42:1e:af:f2:35:16:0c:02:79:25:2e:d0:8b:
                    58:5b:01:13:88:26:6e:02:4d:55:00:da:70:0c:70:
                    9b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:2D:A7:5C:54:F2:07:EB:E1:CF:DD:7E:2E:89:2A:AA:82:BA:3E:6E
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/kC2nXFTyB-vhz91-LokqqoK6Pm4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.238.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:97:7e:5e:1b:df:0d:93:dc:d0:c6:e0:3f:8f:f0:e9:eb:10:
         f6:0a:d2:d3:37:a9:fc:ce:b7:aa:f9:62:eb:b5:27:7b:23:a6:
         da:47:00:47:ec:50:2b:5a:ed:c2:22:51:04:c3:08:85:79:49:
         20:09:b3:da:da:a1:57:0c:99:ac:ce:d9:a2:c8:d7:d4:53:c0:
         97:e2:1a:35:b3:08:1f:b2:a8:22:a0:f5:bb:74:c3:03:54:99:
         cc:1d:6a:16:05:95:ff:50:28:91:b5:b8:af:22:fd:87:89:44:
         87:5d:55:3f:b7:94:a0:9e:68:b9:5a:fd:aa:d5:4f:57:fb:05:
         36:2f:21:f9:91:63:c3:e0:f9:f5:24:65:2a:f7:d9:84:4e:2f:
         e2:17:ba:b5:cd:52:8e:b0:3a:68:d4:d7:a3:06:a6:e3:5c:6d:
         c0:97:6b:be:18:53:2e:da:68:cc:ab:12:26:cf:ee:27:a6:9b:
         ce:60:25:5a:31:ff:ef:52:54:41:e8:d9:98:fc:84:81:f1:0b:
         29:e0:aa:e5:41:56:05:f8:80:dd:b0:a6:6c:7d:8d:59:81:89:
         0a:64:79:7e:b4:38:36:63:4a:87:6e:5b:4d:2a:27:1b:50:96:
         05:d5:57:6f:e6:98:3a:46:2b:ad:ba:5d:20:1a:40:d4:55:e7:
         c2:e4:61:ad
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBPkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw
MjQwMDdaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDkwMkRBNzVDNTRGMjA3
RUJFMUNGREQ3RTJFODkyQUFBODJCQTNFNkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD5ajwH6c2jER71ECjzEaY8P/vq58DJitHK+5TDEoTyxE9ZNz3s
HG6I2wIAFr9JLT5cr89uAqT09MTBz8NEZXV7Se3lba7/G0Z84zNOA59lfp9iTv8I
1PKLQ4Bc+IcZ+bwFHBiAOj9ynQJbY80hO4Q5g9auDWFb8qNlqPYZmSFsOycVkt+m
h9pWkY4m4rOGkoj5UjbnOCVxJk7H6QhQIWIZo3c3+wZMa9DzrC8HuSMyEfiMA+Xi
JCLuXwvmOQfiuzd8K58Ah4+/64S/gPuK8TshreZeIsVMKt0IVKrlzgYnngZHQh6v
8jUWDAJ5JS7Qi1hbAROIJm4CTVUA2nAMcJs1AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUkC2nXFTyB+vhz91+LokqqoK6Pm4wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL2tDMm5YRlR5Qi12aHo5MS1Mb2txcW9LNlBtNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAHS7hIwDQYJKoZIhvcNAQELBQADggEBAAeXfl4b3w2T3NDG4D+P8OnrEPYK
0tM3qfzOt6r5Yuu1J3sjptpHAEfsUCta7cIiUQTDCIV5SSAJs9raoVcMmazO2aLI
19RTwJfiGjWzCB+yqCKg9bt0wwNUmcwdahYFlf9QKJG1uK8i/YeJRIddVT+3lKCe
aLla/arVT1f7BTYvIfmRY8Pg+fUkZSr32YROL+IXurXNUo6wOmjU16MGpuNcbcCX
a74YUy7aaMyrEibP7iemm85gJVox/+9SVEHo2Zj8hIHxCyngquVBVgX4gN2wpmx9
jVmBiQpkeX60ODZjSoduW00qJxtQlgXVV2/mmDpGK626XSAaQNRV58LkYa0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:04:05 2025 by rpki-client