Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20064/oFrEMSaesTlCzCJ4ryJS2h7FsI8.roa
File:                     oFrEMSaesTlCzCJ4ryJS2h7FsI8.roa (raw, json)
Hash identifier:          lYobvXTrtKaVXpAz+lpk4PixIFwHr+V5ZR+snTd91JM=
Subject key identifier:   A0:5A:C4:31:26:9E:B1:39:42:CC:22:78:AF:22:52:DA:1E:C5:B0:8F
Certificate issuer:       /CN=10D187DB1D9F4D36B4DE448BE43767129A79D764
Certificate serial:       57
Authority key identifier: 10:D1:87:DB:1D:9F:4D:36:B4:DE:44:8B:E4:37:67:12:9A:79:D7:64
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ENGH2x2fTTa03kSL5DdnEpp512Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/oFrEMSaesTlCzCJ4ryJS2h7FsI8.roa
Signing time:             Fri 31 Jan 2025 01:31:54 +0000
ROA not before:           Fri 31 Jan 2025 01:31:54 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     63774
IP address blocks:        103.113.56.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10D187DB1D9F4D36B4DE448BE43767129A79D764
        Validity
            Not Before: Jan 31 01:31:54 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=A05AC431269EB13942CC2278AF2252DA1EC5B08F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:54:d4:fa:0f:e5:c7:2b:b0:5e:18:f8:e7:9e:
                    f8:af:80:3b:3b:c6:92:a0:e6:d5:5e:23:1f:a1:da:
                    7b:7f:86:67:61:92:bc:76:68:17:1d:6d:ed:a0:3b:
                    7b:17:8c:1a:17:8a:7e:bd:97:d3:8f:96:07:ee:9f:
                    06:43:4e:db:9d:47:51:30:c5:6c:6d:69:02:5b:11:
                    9e:86:c6:59:67:0d:92:ca:c5:ef:55:2a:1b:eb:f2:
                    42:77:74:c8:d4:99:e6:6f:9d:56:ea:17:d4:35:58:
                    84:be:53:68:05:f2:85:6c:c4:5e:27:c9:7d:c8:57:
                    97:cf:f6:8f:9b:3c:89:f7:a5:99:e0:37:f4:ae:66:
                    61:f8:20:ff:42:4f:3a:3a:87:0b:0c:90:84:0f:db:
                    2b:1c:89:de:aa:41:4b:75:39:a5:43:0f:26:ac:62:
                    30:ed:6b:73:a8:d9:a2:14:9a:c4:84:ce:07:83:db:
                    a9:2b:47:be:24:8d:ac:13:7d:32:c7:bb:0f:f6:61:
                    72:a5:6c:9f:8b:a2:5e:b3:31:f0:6a:b5:ee:ee:41:
                    73:84:3c:7f:6d:95:03:15:54:49:0c:00:41:7b:d3:
                    bf:8a:de:bd:bf:8e:ad:b1:76:a5:b4:28:05:ec:92:
                    e8:a4:07:12:c3:70:37:c0:c2:13:bc:5e:54:b0:3f:
                    1f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:5A:C4:31:26:9E:B1:39:42:CC:22:78:AF:22:52:DA:1E:C5:B0:8F
            X509v3 Authority Key Identifier:
                keyid:10:D1:87:DB:1D:9F:4D:36:B4:DE:44:8B:E4:37:67:12:9A:79:D7:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/ENGH2x2fTTa03kSL5DdnEpp512Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ENGH2x2fTTa03kSL5DdnEpp512Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/oFrEMSaesTlCzCJ4ryJS2h7FsI8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:18:37:f3:d5:32:2b:65:5c:db:55:f6:c9:b2:b5:13:c3:9e:
         56:ac:6e:c1:18:4a:dc:1b:2b:aa:b5:b8:3f:c3:ac:f6:94:d7:
         de:7c:47:0d:47:fe:32:51:5f:8d:93:5d:29:79:25:d7:97:14:
         fd:eb:15:60:fb:c3:77:d5:63:c1:bf:2e:86:96:5e:5d:10:dc:
         b4:25:a2:aa:1d:b1:b6:47:3e:f8:e1:bf:2b:d0:73:7a:5a:4c:
         0f:57:d1:9c:98:09:39:df:85:09:be:19:c6:46:de:d1:29:48:
         ce:ed:52:55:c8:e4:b5:4e:47:a0:0f:36:76:bb:59:94:a2:d3:
         e2:03:70:0d:19:c7:5f:d2:87:72:23:3a:79:0c:00:e9:b6:6c:
         e4:aa:e0:4f:68:a8:36:4f:ad:1b:cf:2b:f6:1e:4d:be:84:64:
         5b:8b:06:ef:f2:fd:82:6d:d7:16:f6:b1:22:17:67:c2:a0:b8:
         70:60:af:6a:39:c9:08:b7:81:16:dc:2b:20:8d:ca:87:75:a6:
         64:ac:b5:e8:04:84:82:a1:f7:1e:6f:37:c0:b0:b6:32:4a:a3:
         32:12:db:c3:49:45:e2:f5:52:29:6d:24:4f:30:06:1c:01:67:
         7e:8d:81:fe:48:91:2f:d5:1e:37:67:d8:11:79:51:08:96:a5:
         88:45:dc:cf
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBVzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxMEQx
ODdEQjFEOUY0RDM2QjRERTQ0OEJFNDM3NjcxMjlBNzlENzY0MB4XDTI1MDEzMTAx
MzE1NFoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoQTA1QUM0MzEyNjlFQjEz
OTQyQ0MyMjc4QUYyMjUyREExRUM1QjA4RjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKdU1PoP5ccrsF4Y+Oee+K+AOzvGkqDm1V4jH6Hae3+GZ2GSvHZo
Fx1t7aA7exeMGheKfr2X04+WB+6fBkNO251HUTDFbG1pAlsRnobGWWcNksrF71Uq
G+vyQnd0yNSZ5m+dVuoX1DVYhL5TaAXyhWzEXifJfchXl8/2j5s8ifelmeA39K5m
Yfgg/0JPOjqHCwyQhA/bKxyJ3qpBS3U5pUMPJqxiMO1rc6jZohSaxITOB4PbqStH
viSNrBN9Mse7D/ZhcqVsn4uiXrMx8Gq17u5Bc4Q8f22VAxVUSQwAQXvTv4revb+O
rbF2pbQoBeyS6KQHEsNwN8DCE7xeVLA/H8UCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBSgWsQxJp6xOULMInivIlLaHsWwjzAfBgNVHSMEGDAWgBQQ0YfbHZ9NNrTeRIvk
N2cSmnnXZDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNjQvRU5HSDJ4MmZUVGEwM2tTTDVEZG5FcHA1MTJRLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRU5HSDJ4MmZUVGEwM2tTTDVEZG5F
cHA1MTJRLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDY0L29GckVNU2Flc1RsQ3pDSjRyeUpTMmg3RnNJOC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAJncTgwDQYJKoZIhvcNAQELBQADggEBABEYN/PVMitlXNtV9smytRPD
nlasbsEYStwbK6q1uD/DrPaU1958Rw1H/jJRX42TXSl5JdeXFP3rFWD7w3fVY8G/
LoaWXl0Q3LQloqodsbZHPvjhvyvQc3paTA9X0ZyYCTnfhQm+GcZG3tEpSM7tUlXI
5LVOR6APNna7WZSi0+IDcA0Zx1/Sh3IjOnkMAOm2bOSq4E9oqDZPrRvPK/YeTb6E
ZFuLBu/y/YJt1xb2sSIXZ8KguHBgr2o5yQi3gRbcKyCNyod1pmSstegEhIKh9x5v
N8CwtjJKozIS28NJReL1UiltJE8wBhwBZ36Ngf5IkS/VHjdn2BF5UQiWpYhF3M8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:31 2025 by rpki-client