Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20088/palEWz74XBOxEJ5sU61_O5pfu_8.roa
File:                     palEWz74XBOxEJ5sU61_O5pfu_8.roa (raw, json)
Hash identifier:          Lvh+cFrwusu0QaKkuDKRrlvo86h/D2d8JyFn5u/i0ug=
Subject key identifier:   A5:A9:44:5B:3E:F8:5C:13:B1:10:9E:6C:53:AD:7F:3B:9A:5F:BB:FF
Certificate issuer:       /CN=03614EE9C263D41C4C6F4EC976B187217CB39112
Certificate serial:       3A
Authority key identifier: 03:61:4E:E9:C2:63:D4:1C:4C:6F:4E:C9:76:B1:87:21:7C:B3:91:12
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A2FO6cJj1BxMb07JdrGHIXyzkRI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/palEWz74XBOxEJ5sU61_O5pfu_8.roa
Signing time:             Mon 24 Mar 2025 05:24:17 +0000
ROA not before:           Mon 24 Mar 2025 05:24:17 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     138384
IP address blocks:        157.192.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03614EE9C263D41C4C6F4EC976B187217CB39112
        Validity
            Not Before: Mar 24 05:24:17 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=A5A9445B3EF85C13B1109E6C53AD7F3B9A5FBBFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f6:15:ef:ad:b4:00:62:06:ff:6c:77:6b:cf:
                    82:d7:7b:55:be:e5:e8:ce:ce:64:2a:e9:14:c0:11:
                    23:74:80:01:43:dd:a4:af:23:00:ce:cf:ab:fc:d1:
                    b8:70:ab:5d:14:35:35:d6:37:f1:73:5f:80:e0:10:
                    17:b4:f9:9d:48:92:a6:bf:d8:16:15:eb:39:d8:fd:
                    a4:a1:11:7f:27:e3:b0:61:2f:28:50:f1:1e:8f:3b:
                    21:3e:0d:a5:f1:f6:7c:a6:c5:ec:48:fc:56:c9:3e:
                    3f:22:a1:54:40:cb:2f:b2:05:87:ec:3c:10:fe:1a:
                    08:1a:52:87:d3:cb:ca:43:a4:2d:f0:55:81:97:e7:
                    ec:71:8f:7a:8f:a9:3b:78:f8:66:39:26:53:55:d9:
                    87:a7:67:a5:43:1b:ef:4c:52:0c:89:9f:05:e7:f1:
                    d9:2e:a0:de:cd:5b:9d:02:ea:dd:1c:12:ae:71:08:
                    69:d7:75:27:9b:09:ea:b1:d9:3a:64:1a:79:4a:f2:
                    e4:f1:02:e0:d8:f2:09:69:1f:04:c7:26:2a:57:21:
                    21:a4:9b:23:9b:e6:ce:ff:ed:db:1d:25:81:73:64:
                    36:a6:af:ef:5f:68:fa:86:c2:a5:a9:75:99:2d:82:
                    e5:54:d8:10:64:27:48:8f:a7:5e:6e:12:d3:25:45:
                    af:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A9:44:5B:3E:F8:5C:13:B1:10:9E:6C:53:AD:7F:3B:9A:5F:BB:FF
            X509v3 Authority Key Identifier:
                keyid:03:61:4E:E9:C2:63:D4:1C:4C:6F:4E:C9:76:B1:87:21:7C:B3:91:12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/A2FO6cJj1BxMb07JdrGHIXyzkRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A2FO6cJj1BxMb07JdrGHIXyzkRI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/palEWz74XBOxEJ5sU61_O5pfu_8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.192.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b4:dc:21:93:3e:33:dd:21:bd:e1:7c:6a:fa:a0:2d:d9:2d:28:
         62:da:46:6b:13:1b:62:04:52:bb:74:da:35:2d:ee:fb:7d:9b:
         fe:ef:87:04:0b:16:99:68:71:22:f9:0e:f6:2d:66:fe:6f:d0:
         0e:c5:2e:d5:df:76:49:eb:ce:7f:26:93:a9:f0:d3:0f:1b:a2:
         0d:56:80:96:03:ee:1d:31:2d:6f:5b:55:4f:1d:3c:08:09:0d:
         b4:84:ad:b1:21:d3:0c:01:00:8b:21:f2:3a:0a:16:04:fe:ae:
         2e:0b:54:d6:90:a9:6f:be:a0:1b:be:22:59:19:43:6b:23:f6:
         db:53:9f:8b:6c:0c:6b:b5:8a:94:22:3f:19:bd:63:14:e5:40:
         b9:4d:ab:e3:9a:45:0d:43:e7:a3:e4:70:16:87:34:70:c8:e6:
         45:56:04:07:e9:8d:41:0b:e9:c7:6e:04:2b:30:36:a8:fc:d7:
         af:cb:9e:e0:21:45:8e:55:31:e1:57:fd:02:36:1f:b8:75:00:
         58:cb:2d:b8:80:fd:06:da:e2:dc:e4:fb:04:51:7a:3e:e0:2b:
         5e:ce:9d:d1:c1:71:64:aa:f6:7c:f0:93:32:25:bb:42:b1:01:
         49:75:af:2b:8c:7c:b7:39:5a:fe:d6:6e:d9:4f:a7:f9:f5:3a:
         84:ba:3e:e1
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIBOjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwMzYx
NEVFOUMyNjNENDFDNEM2RjRFQzk3NkIxODcyMTdDQjM5MTEyMB4XDTI1MDMyNDA1
MjQxN1oXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoQTVBOTQ0NUIzRUY4NUMx
M0IxMTA5RTZDNTNBRDdGM0I5QTVGQkJGRjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMj2Fe+ttABiBv9sd2vPgtd7Vb7l6M7OZCrpFMARI3SAAUPdpK8j
AM7Pq/zRuHCrXRQ1NdY38XNfgOAQF7T5nUiSpr/YFhXrOdj9pKERfyfjsGEvKFDx
Ho87IT4NpfH2fKbF7Ej8Vsk+PyKhVEDLL7IFh+w8EP4aCBpSh9PLykOkLfBVgZfn
7HGPeo+pO3j4ZjkmU1XZh6dnpUMb70xSDImfBefx2S6g3s1bnQLq3RwSrnEIadd1
J5sJ6rHZOmQaeUry5PEC4NjyCWkfBMcmKlchIaSbI5vmzv/t2x0lgXNkNqav719o
+obCpal1mS2C5VTYEGQnSI+nXm4S0yVFr6kCAwEAAaOCAicwggIjMB0GA1UdDgQW
BBSlqURbPvhcE7EQnmxTrX87ml+7/zAfBgNVHSMEGDAWgBQDYU7pwmPUHExvTsl2
sYchfLOREjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwODgvQTJGTzZjSmoxQnhNYjA3SmRyR0hJWHl6a1JJLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQTJGTzZjSmoxQnhNYjA3SmRyR0hJ
WHl6a1JJLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDg4L3BhbEVXejc0WEJPeEVKNXNVNjFfTzVwZnVfOC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsE
AgABMAUDAwCdwDANBgkqhkiG9w0BAQsFAAOCAQEAtNwhkz4z3SG94Xxq+qAt2S0o
YtpGaxMbYgRSu3TaNS3u+32b/u+HBAsWmWhxIvkO9i1m/m/QDsUu1d92SevOfyaT
qfDTDxuiDVaAlgPuHTEtb1tVTx08CAkNtIStsSHTDAEAiyHyOgoWBP6uLgtU1pCp
b76gG74iWRlDayP221Ofi2wMa7WKlCI/Gb1jFOVAuU2r45pFDUPno+RwFoc0cMjm
RVYEB+mNQQvpx24EKzA2qPzXr8ue4CFFjlUx4Vf9AjYfuHUAWMstuID9Btri3OT7
BFF6PuArXs6d0cFxZKr2fPCTMiW7QrEBSXWvK4x8tzla/tZu2U+n+fU6hLo+4Q==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:47:54 2025 by rpki-client