Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/ZUPleaFnQwNitur61L40UxUhTsA.roa
File:                     ZUPleaFnQwNitur61L40UxUhTsA.roa (raw, json)
Hash identifier:          AXlh6D02VHG4t1xAWbl2IyfF5+nwt9zSqyeqfmGFjyk=
Subject key identifier:   65:43:E5:79:A1:67:43:03:62:B6:EA:FA:D4:BE:34:53:15:21:4E:C0
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01CF
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/ZUPleaFnQwNitur61L40UxUhTsA.roa
Signing time:             Mon 20 Feb 2023 07:55:22 +0000
ROA not before:           Mon 20 Feb 2023 07:55:22 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.171/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 463 (0x1cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:55:22 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=6543E579A167430362B6EAFAD4BE345315214EC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b0:03:77:19:11:f2:05:85:e3:e8:e8:cd:e1:
                    b2:46:bb:59:31:18:95:a9:2d:ad:dc:8f:f4:d2:27:
                    7e:41:14:16:25:b4:48:f5:68:eb:c5:16:2c:d8:02:
                    f3:46:fb:0a:84:52:b4:fe:3a:58:9a:27:b1:89:0a:
                    a2:5c:5a:25:76:07:00:1a:c8:9e:0a:f5:f0:95:9f:
                    00:ad:86:c1:6a:ce:c3:7e:79:81:f4:5a:34:1a:01:
                    eb:c5:f3:6a:8b:0c:fb:11:14:9a:df:3c:cf:c6:70:
                    d4:5a:61:9a:49:01:77:55:e3:4c:b7:cd:6a:42:76:
                    80:7e:3e:ab:01:15:0d:57:f6:d5:ee:ad:a5:da:f5:
                    68:15:7f:ad:10:25:3b:d6:5c:8f:d3:06:4d:e9:41:
                    fb:11:56:8d:48:cf:6e:0b:7f:bb:72:8a:45:d1:47:
                    70:fd:c0:cd:7c:1d:a2:9c:13:a3:65:bb:64:84:5f:
                    03:ec:d7:db:c6:f5:61:33:cc:e7:93:5c:50:b5:57:
                    62:01:db:81:24:05:af:1a:9b:5d:2b:e2:64:fa:04:
                    fa:29:29:cd:cf:69:f0:dc:08:c6:80:0e:db:7f:4d:
                    2b:a9:78:66:e0:fa:cd:eb:4a:55:31:92:ce:87:67:
                    ce:ba:7f:5e:99:bf:62:f5:e8:c4:18:a0:62:76:ca:
                    a4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:43:E5:79:A1:67:43:03:62:B6:EA:FA:D4:BE:34:53:15:21:4E:C0
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/ZUPleaFnQwNitur61L40UxUhTsA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.171/32

    Signature Algorithm: sha256WithRSAEncryption
         83:3a:96:ed:0b:c3:fa:11:b1:8e:13:50:54:65:d1:fa:a0:b6:
         b9:83:70:0c:1b:b0:7b:8d:6a:94:53:d0:d9:b8:42:c3:d3:c8:
         31:6b:34:58:46:58:00:35:47:ca:07:cc:2f:9c:20:c6:ef:7c:
         27:88:ea:8a:46:4d:f7:70:55:07:41:bf:53:1a:e1:42:9a:ad:
         43:ca:aa:25:b0:8e:2a:78:76:ce:bb:06:0f:aa:78:7c:2e:70:
         f3:6c:b7:d9:36:d0:59:2b:13:63:69:78:65:33:26:33:5a:1d:
         9d:a9:0b:81:9f:ef:4b:1d:94:fd:fe:91:15:6b:d8:10:4d:96:
         09:87:90:6e:9e:1d:58:cf:b4:23:76:5c:0e:85:55:14:6c:6c:
         37:2b:b2:35:7d:de:f2:f6:f7:94:3c:03:db:54:09:bd:b8:b6:
         68:e7:3d:ec:ed:87:d1:f0:05:98:42:c3:b9:ad:aa:3d:f3:f7:
         ef:69:49:86:b6:7d:60:2f:c6:28:79:31:ed:2f:a8:f3:b2:85:
         ff:59:f6:e7:5d:46:b5:42:47:1e:e5:8a:cc:0f:a6:b2:2a:79:
         3d:2a:bf:10:d9:12:e0:32:a6:68:85:ed:3c:4a:67:f5:ab:72:
         8a:b8:72:2c:15:b1:fe:7e:d7:3c:02:83:4d:80:a7:b5:d6:04:
         62:dc:ba:86
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
NzU1MjJaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDY1NDNFNTc5QTE2NzQz
MDM2MkI2RUFGQUQ0QkUzNDUzMTUyMTRFQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDbsAN3GRHyBYXj6OjN4bJGu1kxGJWpLa3cj/TSJ35BFBYltEj1
aOvFFizYAvNG+wqEUrT+OliaJ7GJCqJcWiV2BwAayJ4K9fCVnwCthsFqzsN+eYH0
WjQaAevF82qLDPsRFJrfPM/GcNRaYZpJAXdV40y3zWpCdoB+PqsBFQ1X9tXuraXa
9WgVf60QJTvWXI/TBk3pQfsRVo1Iz24Lf7tyikXRR3D9wM18HaKcE6Nlu2SEXwPs
19vG9WEzzOeTXFC1V2IB24EkBa8am10r4mT6BPopKc3PafDcCMaADtt/TSupeGbg
+s3rSlUxks6HZ866f16Zv2L16MQYoGJ2yqSpAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUZUPleaFnQwNitur61L40UxUhTsAwHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My9aVVBsZWFGblF3Tml0dXI2MUw0MFV4VWhUc0Eu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxaqzANBgkqhkiG9w0BAQsFAAOCAQEAgzqW7QvD+hGxjhNQVGXR
+qC2uYNwDBuwe41qlFPQ2bhCw9PIMWs0WEZYADVHygfML5wgxu98J4jqikZN93BV
B0G/UxrhQpqtQ8qqJbCOKnh2zrsGD6p4fC5w82y32TbQWSsTY2l4ZTMmM1odnakL
gZ/vSx2U/f6RFWvYEE2WCYeQbp4dWM+0I3ZcDoVVFGxsNyuyNX3e8vb3lDwD21QJ
vbi2aOc97O2H0fAFmELDua2qPfP372lJhrZ9YC/GKHkx7S+o87KF/1n2511GtUJH
HuWKzA+msip5PSq/ENkS4DKmaIXtPEpn9atyirhyLBWx/n7XPAKDTYCntdYEYty6
hg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:00:49 2025 by rpki-client