Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/m07v_jx165s9e3FvkNXQBztlzg4.roa
File:                     m07v_jx165s9e3FvkNXQBztlzg4.roa (raw, json)
Hash identifier:          cCGjd5ClttKqLccFZK0abnKvMUDf9n4xqJTQMrQ1zis=
Subject key identifier:   9B:4E:EF:FE:3C:75:EB:9B:3D:7B:71:6F:90:D5:D0:07:3B:65:CE:0E
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       92
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/m07v_jx165s9e3FvkNXQBztlzg4.roa
Signing time:             Wed 04 Dec 2024 19:06:56 +0000
ROA not before:           Wed 04 Dec 2024 19:06:56 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     3949
IP address blocks:        124.40.40.64/26 maxlen: 26
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Dec  4 19:06:56 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=9B4EEFFE3C75EB9B3D7B716F90D5D0073B65CE0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8d:e9:d0:ad:92:9d:35:ee:11:ac:32:d7:16:
                    82:97:7c:75:45:1f:b1:76:27:b0:2d:4c:64:7f:b8:
                    a2:2b:ef:d1:d0:0e:98:8f:b4:fc:d1:2a:81:fc:3b:
                    15:ea:69:72:32:dd:92:9f:19:a1:b9:ea:ba:ad:72:
                    f2:47:c8:46:9c:ca:b1:63:43:5f:dd:6d:6d:2b:77:
                    c1:92:09:8b:e9:8d:eb:22:3d:cd:dc:ae:f2:27:da:
                    95:82:c2:5d:6e:c5:8a:4c:34:d0:f6:e6:3c:6c:42:
                    30:5f:ac:cd:73:15:22:ba:1c:3b:5f:f8:1b:d2:c2:
                    6c:9c:90:17:b0:16:76:66:28:0f:27:97:1f:c8:73:
                    a3:eb:81:34:06:8c:45:5a:54:1b:c7:21:5a:2a:a9:
                    a7:86:f9:3e:51:30:29:79:fd:7e:f1:9d:ef:98:8b:
                    69:70:dc:77:0c:ef:51:19:37:e7:fd:d8:e9:03:1d:
                    33:ee:e4:2e:86:74:f1:e6:45:d6:82:6e:fb:6d:3b:
                    a8:bc:f5:1c:9a:7e:cc:e1:ed:80:d8:53:65:d9:8c:
                    42:bc:c4:c6:80:c7:c6:98:04:01:68:28:bb:5d:37:
                    72:77:2f:a2:38:50:86:45:18:fe:58:4b:a7:df:3f:
                    d8:da:62:f6:43:ad:04:aa:9a:c4:2d:02:da:00:79:
                    06:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4E:EF:FE:3C:75:EB:9B:3D:7B:71:6F:90:D5:D0:07:3B:65:CE:0E
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/m07v_jx165s9e3FvkNXQBztlzg4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.40.40.64/26

    Signature Algorithm: sha256WithRSAEncryption
         8e:28:90:71:14:48:d9:a8:e4:ed:85:46:f7:41:08:47:32:cd:
         45:62:3d:74:e9:2f:eb:bf:2d:f9:53:27:f7:8b:ab:76:cd:55:
         49:3c:12:ba:ff:c3:60:dc:bf:9c:cc:b5:fd:f6:e2:5b:84:64:
         1c:01:f9:9e:fa:8d:8e:47:4d:61:b0:33:a6:1b:0a:4b:7b:15:
         ec:00:71:2d:83:9e:39:23:87:6b:1d:d8:5c:f9:82:11:fb:80:
         91:48:b1:69:5f:da:fa:22:4d:03:4a:db:da:3b:a8:ff:3c:7b:
         69:40:f5:0f:ec:01:71:7c:31:8c:0a:f4:5f:08:42:c5:21:03:
         97:4f:dc:ee:b4:49:76:97:e7:84:67:f8:10:44:db:10:7f:6f:
         4a:bd:2e:be:0f:d8:f1:0a:22:67:3a:61:88:3e:7f:36:13:d5:
         bc:35:3e:4b:18:f4:a3:53:7e:04:d5:f9:1a:d4:00:a6:1d:cd:
         df:a0:5a:c6:e4:43:09:fd:ec:67:46:b3:37:47:65:b9:1e:44:
         15:f1:85:a3:53:34:10:5d:76:35:d1:df:e7:42:7d:04:42:dc:
         56:fd:9e:32:f6:af:f4:97:4d:90:46:f5:4e:57:7e:ef:da:39:
         2e:e6:a4:1a:6c:06:2e:0b:1a:e1:1f:e5:a2:47:35:8f:35:7e:
         46:27:b5:c5
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0
NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNDEyMDQx
OTA2NTZaFw0yNTExMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDlCNEVFRkZFM0M3NUVC
OUIzRDdCNzE2RjkwRDVEMDA3M0I2NUNFMEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYjenQrZKdNe4RrDLXFoKXfHVFH7F2J7AtTGR/uKIr79HQDpiP
tPzRKoH8OxXqaXIy3ZKfGaG56rqtcvJHyEacyrFjQ1/dbW0rd8GSCYvpjesiPc3c
rvIn2pWCwl1uxYpMNND25jxsQjBfrM1zFSK6HDtf+BvSwmyckBewFnZmKA8nlx/I
c6PrgTQGjEVaVBvHIVoqqaeG+T5RMCl5/X7xne+Yi2lw3HcM71EZN+f92OkDHTPu
5C6GdPHmRdaCbvttO6i89Ryafszh7YDYU2XZjEK8xMaAx8aYBAFoKLtdN3J3L6I4
UIZFGP5YS6ffP9jaYvZDrQSqmsQtAtoAeQY7AgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUm07v/jx165s9e3FvkNXQBztlzg4wHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur
X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3
WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDEyOC9tMDd2X2p4MTY1czllM0Z2a05YUUJ6dGx6ZzQu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUGfCgoQDANBgkqhkiG9w0BAQsFAAOCAQEAjiiQcRRI2ajk7YVG90EI
RzLNRWI9dOkv678t+VMn94urds1VSTwSuv/DYNy/nMy1/fbiW4RkHAH5nvqNjkdN
YbAzphsKS3sV7ABxLYOeOSOHax3YXPmCEfuAkUixaV/a+iJNA0rb2juo/zx7aUD1
D+wBcXwxjAr0XwhCxSEDl0/c7rRJdpfnhGf4EETbEH9vSr0uvg/Y8QoiZzphiD5/
NhPVvDU+Sxj0o1N+BNX5GtQAph3N36BaxuRDCf3sZ0azN0dluR5EFfGFo1M0EF12
NdHf50J9BELcVv2eMvav9JdNkEb1Tld+79o5LuakGmwGLgsa4R/lokc1jzV+Rie1
xQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:59 2025 by rpki-client