Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/A-hZYXxHgq2atI6X6jbaI08aCZk.roa
File:                     A-hZYXxHgq2atI6X6jbaI08aCZk.roa (raw, json)
Hash identifier:          GqIh2xMr/fmYGcCQuJ1WYRhrQwlD+yWp7XZf9kmS0PY=
Subject key identifier:   03:E8:59:61:7C:47:82:AD:9A:B4:8E:97:EA:36:DA:23:4F:1A:09:99
Certificate issuer:       /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial:       49
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/A-hZYXxHgq2atI6X6jbaI08aCZk.roa
Signing time:             Sat 01 Jan 2022 01:30:55 +0000
ROA not before:           Sat 01 Jan 2022 01:30:55 +0000
ROA not after:            Thu 15 Dec 2022 01:30:02 +0000
asID:                     7521
IP address blocks:        210.173.186.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
        Validity
            Not Before: Jan  1 01:30:55 2022 GMT
            Not After : Dec 15 01:30:02 2022 GMT
        Subject: CN=03E859617C4782AD9AB48E97EA36DA234F1A0999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:93:04:dc:7e:05:e6:44:b6:ea:6c:df:21:3d:
                    89:c9:68:f5:bb:f6:1f:a2:0f:26:cd:c3:af:d8:a1:
                    34:ac:34:ea:82:cf:fb:c4:47:eb:42:f8:2a:ab:16:
                    88:9e:4e:16:84:57:cb:7e:42:8c:96:c0:98:86:b8:
                    a0:03:e8:24:23:1a:47:68:e8:ff:8e:03:04:74:21:
                    c8:e9:1e:db:66:4b:ab:8b:4b:59:4a:fe:98:f3:7c:
                    f7:d7:d0:87:3c:b2:f7:c5:3b:78:61:f4:10:56:0d:
                    1d:ba:1b:bb:0a:b3:1d:6d:6a:25:ba:9f:e8:37:73:
                    03:4d:51:49:55:cb:e4:16:1e:f6:83:f1:77:1d:b8:
                    b4:d3:33:09:18:3d:ae:2f:93:bb:0f:32:ad:f0:b8:
                    a0:46:b4:11:b4:06:ce:28:18:93:ed:f8:8b:67:2f:
                    19:45:9d:15:1c:62:89:f4:dc:71:5b:1e:bd:6f:0b:
                    89:3f:53:91:e1:62:40:43:58:a9:53:c2:9c:21:51:
                    26:52:8a:2a:ea:a5:24:a4:c4:27:7a:98:12:14:41:
                    65:85:b3:f6:45:7e:6c:ec:8e:41:ec:73:19:1d:17:
                    8d:85:94:27:df:f3:b5:0c:67:68:54:1d:05:88:29:
                    72:da:48:ed:c0:f6:90:28:8a:56:4b:22:12:66:ac:
                    b7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E8:59:61:7C:47:82:AD:9A:B4:8E:97:EA:36:DA:23:4F:1A:09:99
            X509v3 Authority Key Identifier:
                keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/A-hZYXxHgq2atI6X6jbaI08aCZk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.173.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:79:63:9d:5d:5d:5a:f6:1f:61:da:f4:68:94:b6:7f:67:78:
         c5:91:f8:d2:89:fa:aa:55:44:a5:d8:a0:4e:5e:67:9e:79:42:
         87:9d:32:99:e5:f0:16:b2:96:a1:cd:0a:d6:d4:8a:ee:cd:d3:
         ae:dd:60:a9:63:34:3f:28:f8:c7:d0:6c:09:29:93:80:67:fe:
         5b:a4:03:88:fb:84:d8:cb:20:8b:3f:49:1d:5f:49:f1:2b:bc:
         ac:c3:10:6c:44:af:55:00:eb:0d:89:8f:25:2d:27:51:54:a9:
         bf:d7:bb:f4:33:5d:b4:96:ba:ee:07:2c:43:b8:65:9b:41:10:
         c1:ec:f3:5d:e2:bf:83:c1:cd:26:9e:7f:e6:48:5a:d3:3d:94:
         c4:d9:ef:14:68:56:aa:c5:84:62:7a:50:98:06:6c:f5:5c:45:
         ec:09:5d:22:3b:9d:81:fa:58:b8:bd:3b:08:46:7b:53:23:01:
         27:f7:96:a8:7e:28:55:5a:8f:d1:cd:b3:45:06:76:0c:7f:c9:
         9d:84:1d:bb:b9:b1:75:28:81:1a:2e:1e:ac:ef:24:b9:a6:67:
         8f:60:6f:e3:04:e0:c0:ee:6c:19:50:ed:b7:aa:03:82:28:f0:
         28:fd:e8:27:5f:02:16:f3:bb:fb:ec:38:41:22:34:6d:3d:c4:
         e3:7c:2c:0e
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBSTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2NzAx
OEI0REZFNTRCRDY0NEUwMDA2NDFBMjM0QjQ3MURCMjBCODkyMB4XDTIyMDEwMTAx
MzA1NVoXDTIyMTIxNTAxMzAwMlowMzExMC8GA1UEAxMoMDNFODU5NjE3QzQ3ODJB
RDlBQjQ4RTk3RUEzNkRBMjM0RjFBMDk5OTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKaTBNx+BeZEtups3yE9iclo9bv2H6IPJs3Dr9ihNKw06oLP+8RH
60L4KqsWiJ5OFoRXy35CjJbAmIa4oAPoJCMaR2jo/44DBHQhyOke22ZLq4tLWUr+
mPN899fQhzyy98U7eGH0EFYNHbobuwqzHW1qJbqf6DdzA01RSVXL5BYe9oPxdx24
tNMzCRg9ri+Tuw8yrfC4oEa0EbQGzigYk+34i2cvGUWdFRxiifTccVsevW8LiT9T
keFiQENYqVPCnCFRJlKKKuqlJKTEJ3qYEhRBZYWz9kV+bOyOQexzGR0XjYWUJ9/z
tQxnaFQdBYgpctpI7cD2kCiKVksiEmast8kCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBQD6FlhfEeCrZq0jpfqNtojTxoJmTAfBgNVHSMEGDAWgBRnAYtN/lS9ZE4ABkGi
NLRx2yC4kjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjA3L1p3R0xUZjVVdldST0FBWkJvalMwY2RzZ3VKSS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1p3R0xUZjVVdldST0FBWkJvalMwY2Rz
Z3VKSS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8yMDcvQS1oWllYeEhncTJhdEk2WDZqYmFJMDhhQ1prLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAdKtujANBgkqhkiG9w0BAQsFAAOCAQEA
nnljnV1dWvYfYdr0aJS2f2d4xZH40on6qlVEpdigTl5nnnlCh50ymeXwFrKWoc0K
1tSK7s3Trt1gqWM0Pyj4x9BsCSmTgGf+W6QDiPuE2Msgiz9JHV9J8Su8rMMQbESv
VQDrDYmPJS0nUVSpv9e79DNdtJa67gcsQ7hlm0EQwezzXeK/g8HNJp5/5kha0z2U
xNnvFGhWqsWEYnpQmAZs9VxF7AldIjudgfpYuL07CEZ7UyMBJ/eWqH4oVVqP0c2z
RQZ2DH/JnYQdu7mxdSiBGi4erO8kuaZnj2Bv4wTgwO5sGVDtt6oDgijwKP3oJ18C
FvO7++w4QSI0bT3E43wsDg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:22:58 2025 by rpki-client