Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/zzJ4gvZ8fl5l9ybUTqHz9LXxsqs.roa
File:                     zzJ4gvZ8fl5l9ybUTqHz9LXxsqs.roa (raw, json)
Hash identifier:          TWb/TgXHujVavN0Fy57lNSuq4wqM5IUXnR5v89BDxf0=
Subject key identifier:   CF:32:78:82:F6:7C:7E:5E:65:F7:26:D4:4E:A1:F3:F4:B5:F1:B2:AB
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       045F
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/zzJ4gvZ8fl5l9ybUTqHz9LXxsqs.roa
Signing time:             Wed 18 Dec 2024 02:24:12 +0000
ROA not before:           Wed 18 Dec 2024 02:24:12 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        125.53.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1119 (0x45f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:24:12 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=CF327882F67C7E5E65F726D44EA1F3F4B5F1B2AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:07:9d:a0:52:76:15:f8:e5:17:69:09:60:e4:
                    54:ed:bf:ca:36:dc:83:20:89:44:29:2b:cb:d6:42:
                    08:62:88:ea:d0:0e:1e:22:48:d4:a7:3c:3d:40:1c:
                    99:2b:8a:f3:8f:c3:33:78:4f:97:31:57:d1:16:01:
                    4b:85:b1:ae:ff:f1:1c:00:96:87:c1:1b:6f:14:3f:
                    72:02:20:cd:7a:59:32:f4:8d:67:ff:99:54:b8:aa:
                    ec:e4:61:22:09:d1:e1:54:db:b4:c5:46:a0:33:d2:
                    a0:46:53:76:f5:fd:5c:35:88:87:66:66:05:74:c5:
                    9e:17:7d:7d:3c:27:f2:89:f8:32:c3:15:bc:88:71:
                    da:8b:d9:f0:a9:f5:f8:f4:ec:94:71:da:a0:7a:9a:
                    f4:75:2a:4d:18:37:93:01:bf:e9:e7:d8:78:c2:25:
                    36:18:d0:26:92:1c:c5:ab:67:5e:a3:7e:d5:77:b3:
                    7c:27:57:8b:26:a9:52:30:19:8a:8f:bb:71:d2:5c:
                    5d:de:df:7e:25:e7:7d:ff:8f:d0:3a:a5:92:40:01:
                    36:fa:92:89:fa:bf:44:1f:42:5b:6a:f8:fe:54:71:
                    63:f5:92:27:a7:5f:56:89:93:43:78:77:fa:c1:cf:
                    9e:c7:50:85:1a:29:86:85:01:ec:f5:8c:45:15:ca:
                    cf:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:32:78:82:F6:7C:7E:5E:65:F7:26:D4:4E:A1:F3:F4:B5:F1:B2:AB
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/zzJ4gvZ8fl5l9ybUTqHz9LXxsqs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.53.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         46:de:7c:bf:32:72:14:29:ae:82:9e:2b:4d:d6:55:ee:58:44:
         56:84:ba:7b:c2:d6:dd:a7:73:bf:bf:a5:2f:d0:0b:d0:5e:33:
         4a:84:2f:7d:6d:56:2f:fc:44:2a:ad:7b:ac:0a:7d:68:d7:8a:
         45:fe:94:b7:d0:d3:cc:cd:b5:43:a8:b7:0a:b4:6f:bd:91:2c:
         d3:cc:de:ad:34:31:6a:b8:a5:89:76:6d:f9:ab:55:c8:9f:4c:
         b6:a3:a1:8c:e4:b7:88:f2:8d:88:0c:d5:9b:98:2e:4b:df:3b:
         65:54:f4:be:4a:84:64:b7:77:9f:62:ba:d8:32:d9:76:17:4b:
         fe:73:ac:18:79:fc:de:fb:f0:f9:e3:29:ec:83:9f:40:fb:d0:
         f0:af:d3:fb:69:dd:94:ed:0a:44:d7:d9:ec:f2:42:e3:fa:43:
         8f:8d:ba:07:10:23:c9:13:64:22:42:2e:fc:61:c1:12:07:87:
         ff:4b:20:8a:2f:30:d5:92:63:16:19:26:d4:cf:e2:88:0a:3a:
         8b:2c:6e:f3:e8:98:0c:8e:b9:16:dc:2a:14:45:ed:25:96:c7:
         b0:fa:30:99:ab:1f:54:42:ee:be:69:96:3c:54:a7:b7:4e:f5:
         88:1a:51:8a:8b:be:b4:38:c3:21:c7:a2:61:b3:76:70:a2:c2:
         65:a6:2e:33
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICBF8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw
MjI0MTJaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKENGMzI3ODgyRjY3QzdF
NUU2NUY3MjZENDRFQTFGM0Y0QjVGMUIyQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMB52gUnYV+OUXaQlg5FTtv8o23IMgiUQpK8vWQghiiOrQDh4i
SNSnPD1AHJkrivOPwzN4T5cxV9EWAUuFsa7/8RwAlofBG28UP3ICIM16WTL0jWf/
mVS4quzkYSIJ0eFU27TFRqAz0qBGU3b1/Vw1iIdmZgV0xZ4XfX08J/KJ+DLDFbyI
cdqL2fCp9fj07JRx2qB6mvR1Kk0YN5MBv+nn2HjCJTYY0CaSHMWrZ16jftV3s3wn
V4smqVIwGYqPu3HSXF3e334l533/j9A6pZJAATb6kon6v0QfQltq+P5UcWP1kien
X1aJk0N4d/rBz57HUIUaKYaFAez1jEUVys8RAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUzzJ4gvZ8fl5l9ybUTqHz9LXxsqswHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL3p6SjRndlo4Zmw1bDl5YlVUcUh6OUxYeHNxcy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwB9NTANBgkqhkiG9w0BAQsFAAOCAQEARt58vzJyFCmugp4rTdZV7lhEVoS6
e8LW3adzv7+lL9AL0F4zSoQvfW1WL/xEKq17rAp9aNeKRf6Ut9DTzM21Q6i3CrRv
vZEs08zerTQxariliXZt+atVyJ9MtqOhjOS3iPKNiAzVm5guS987ZVT0vkqEZLd3
n2K62DLZdhdL/nOsGHn83vvw+eMp7IOfQPvQ8K/T+2ndlO0KRNfZ7PJC4/pDj426
BxAjyRNkIkIu/GHBEgeH/0sgii8w1ZJjFhkm1M/iiAo6iyxu8+iYDI65FtwqFEXt
JZbHsPowmasfVELuvmmWPFSnt071iBpRiou+tDjDIceiYbN2cKLCZaYuMw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:39:52 2025 by rpki-client