Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/rTZJ-YDwEc7iSJfgBIEhsq-0iGg.roa
File:                     rTZJ-YDwEc7iSJfgBIEhsq-0iGg.roa (raw, json)
Hash identifier:          TPWFtxioN53Fr3JOKBfnfje0j912sCZWu+Cg5guV8Fo=
Subject key identifier:   AD:36:49:F9:80:F0:11:CE:E2:48:97:E0:04:81:21:B2:AF:B4:88:68
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02B6
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/rTZJ-YDwEc7iSJfgBIEhsq-0iGg.roa
Signing time:             Mon 20 Feb 2023 08:05:38 +0000
ROA not before:           Mon 20 Feb 2023 08:05:38 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.181/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 694 (0x2b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:05:38 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=AD3649F980F011CEE24897E0048121B2AFB48868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9d:16:52:64:bc:8f:de:a8:f7:37:dd:28:33:
                    3d:77:19:3d:5c:0b:5e:00:f8:ee:1b:c1:a8:5b:22:
                    23:a4:a1:ba:18:4a:1e:54:5d:da:c2:da:77:5e:be:
                    e8:d9:aa:df:25:ae:fe:ec:ac:4c:fe:22:08:21:de:
                    43:8b:f3:ce:9a:41:33:c1:19:43:05:b4:23:c2:36:
                    5b:7b:e5:c6:30:46:af:f7:8f:ad:b8:d3:30:a5:fd:
                    f0:a5:d7:3e:6e:2e:83:df:d6:55:16:42:28:f2:e4:
                    9b:54:f3:81:96:79:e4:3d:48:78:1d:f9:29:1c:f3:
                    25:66:7b:2f:ba:79:6a:9a:11:aa:32:c1:0e:27:7d:
                    be:a6:a8:d0:3a:f8:79:9d:ec:47:03:61:1b:4b:f9:
                    74:7a:db:c2:0f:1f:76:d4:c7:e7:4a:74:ad:62:89:
                    f9:39:54:ab:61:bc:b3:29:6c:ba:8d:7e:66:d8:64:
                    38:82:fd:1e:ac:1a:74:3f:d8:5d:5e:f7:34:5a:a3:
                    8e:e0:81:22:8c:5c:8c:da:a3:8d:55:59:3d:a2:54:
                    10:24:4d:4d:c6:f1:ed:27:03:bc:ba:1a:0a:92:38:
                    60:eb:63:a6:23:b2:84:f2:f3:fb:ba:58:a0:19:b3:
                    dc:b2:0b:08:0a:49:77:cd:2c:98:48:c2:6d:91:b6:
                    9e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:36:49:F9:80:F0:11:CE:E2:48:97:E0:04:81:21:B2:AF:B4:88:68
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/rTZJ-YDwEc7iSJfgBIEhsq-0iGg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.181/32

    Signature Algorithm: sha256WithRSAEncryption
         08:fc:d7:bb:5a:ba:2b:54:dc:c7:59:7a:17:f1:6f:2d:ac:15:
         41:1c:9b:5c:e9:25:90:81:8b:c6:73:01:6a:7a:eb:2a:16:5b:
         0c:03:71:69:a1:f4:cf:10:df:1f:b6:07:1a:e8:cd:e0:c5:1c:
         50:e0:31:1f:cb:ba:f0:98:0c:f3:27:57:fa:d5:5c:62:e8:e9:
         6a:80:9f:62:dc:3a:66:62:b2:ac:8e:05:64:11:7d:99:1b:10:
         a1:02:3d:0d:91:e7:a0:27:57:b7:25:49:56:31:24:3a:b9:cd:
         77:db:7a:81:84:e9:c0:0b:8e:26:39:60:d2:20:a5:6d:14:3a:
         2d:4e:9b:8b:3d:69:1d:cf:0a:54:6c:c7:4a:51:67:ea:2c:12:
         dc:87:57:46:fd:18:ae:3f:df:23:b1:f4:9e:89:f0:2a:8c:a0:
         ef:8e:49:8e:75:1a:b7:a9:ec:b5:cc:98:53:60:37:54:5c:18:
         eb:77:1f:2d:80:99:a0:69:b8:8d:66:6e:1e:7a:a7:59:1b:87:
         dd:fc:a9:9e:6a:ae:bd:67:e4:25:af:04:ff:fb:91:7e:30:99:
         75:8c:d8:61:fd:a3:e3:d1:cc:ee:be:cf:1f:30:e9:d7:de:8c:
         e1:5a:22:4f:fc:24:aa:0b:c0:fa:81:d5:34:35:d8:0c:98:c6:
         4f:02:3b:22
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICArYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
ODA1MzhaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEFEMzY0OUY5ODBGMDEx
Q0VFMjQ4OTdFMDA0ODEyMUIyQUZCNDg4NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDWnRZSZLyP3qj3N90oMz13GT1cC14A+O4bwahbIiOkoboYSh5U
XdrC2ndevujZqt8lrv7srEz+Iggh3kOL886aQTPBGUMFtCPCNlt75cYwRq/3j624
0zCl/fCl1z5uLoPf1lUWQijy5JtU84GWeeQ9SHgd+Skc8yVmey+6eWqaEaoywQ4n
fb6mqNA6+Hmd7EcDYRtL+XR628IPH3bUx+dKdK1iifk5VKthvLMpbLqNfmbYZDiC
/R6sGnQ/2F1e9zRao47ggSKMXIzao41VWT2iVBAkTU3G8e0nA7y6GgqSOGDrY6Yj
soTy8/u6WKAZs9yyCwgKSXfNLJhIwm2Rtp6BAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUrTZJ+YDwEc7iSJfgBIEhsq+0iGgwHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My9yVFpKLVlEd0VjN2lTSmZnQklFaHNxLTBpR2cu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxatTANBgkqhkiG9w0BAQsFAAOCAQEACPzXu1q6K1Tcx1l6F/Fv
LawVQRybXOklkIGLxnMBanrrKhZbDANxaaH0zxDfH7YHGujN4MUcUOAxH8u68JgM
8ydX+tVcYujpaoCfYtw6ZmKyrI4FZBF9mRsQoQI9DZHnoCdXtyVJVjEkOrnNd9t6
gYTpwAuOJjlg0iClbRQ6LU6biz1pHc8KVGzHSlFn6iwS3IdXRv0Yrj/fI7H0nonw
Koyg745JjnUat6nstcyYU2A3VFwY63cfLYCZoGm4jWZuHnqnWRuH3fypnmquvWfk
Ja8E//uRfjCZdYzYYf2j49HM7r7PHzDp196M4VoiT/wkqgvA+oHVNDXYDJjGTwI7
Ig==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:22:57 2025 by rpki-client