Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/LiOsslBq91OxII7z_Bjq0-MD0eE.roa
File:                     LiOsslBq91OxII7z_Bjq0-MD0eE.roa (raw, json)
Hash identifier:          646nhFt5y2FzJUbNkH54LYlfpBRvlfOzT410dPyMp/Y=
Subject key identifier:   2E:23:AC:B2:50:6A:F7:53:B1:20:8E:F3:FC:18:EA:D3:E3:03:D1:E1
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       9E
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/LiOsslBq91OxII7z_Bjq0-MD0eE.roa
Signing time:             Sat 30 Nov 2024 01:31:19 +0000
ROA not before:           Sat 30 Nov 2024 01:31:19 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     9351
IP address blocks:        202.60.160.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Nov 30 01:31:19 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=2E23ACB2506AF753B1208EF3FC18EAD3E303D1E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b5:84:5b:7b:6b:cb:30:10:17:f2:54:29:e9:
                    4d:88:71:b3:10:df:4e:87:d4:b8:73:0c:5e:49:58:
                    17:34:d3:9c:28:dc:fd:4b:08:57:b9:c9:4a:76:a3:
                    39:be:33:eb:72:b7:94:dd:a1:bb:59:29:45:2f:62:
                    f2:ff:6b:a8:82:34:9d:d7:e6:ff:43:72:ef:96:ed:
                    98:22:24:ba:ef:bb:69:c3:f2:d2:6f:72:a2:06:e1:
                    23:ad:5d:bd:95:13:ac:35:40:17:94:07:2d:50:70:
                    8e:2f:e5:d9:c0:c0:ae:8d:7d:06:1d:3c:3a:a4:c8:
                    91:ad:1f:b9:fb:7f:92:71:56:80:9b:d3:54:56:e3:
                    61:1f:fa:e0:40:d3:3a:67:b9:c6:0c:77:f8:b1:f3:
                    71:92:c2:1b:7b:3f:ef:37:37:0e:82:ee:54:9a:32:
                    64:fe:f8:77:61:12:93:8d:cd:1f:ce:d4:01:96:67:
                    64:b7:bf:7e:57:3d:04:e7:e5:46:44:a9:35:25:12:
                    40:74:26:4d:10:c3:99:59:10:70:98:0b:1a:5b:f6:
                    48:f4:d7:28:50:26:04:5b:45:39:dd:4d:d8:e9:d0:
                    69:e7:b3:db:51:fb:90:a3:6e:a9:20:ac:c5:d0:72:
                    07:7d:8b:2d:16:fc:b4:30:da:06:43:50:c5:2c:96:
                    67:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:23:AC:B2:50:6A:F7:53:B1:20:8E:F3:FC:18:EA:D3:E3:03:D1:E1
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/LiOsslBq91OxII7z_Bjq0-MD0eE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.60.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         86:dc:46:ed:53:99:dd:7e:6b:45:cf:98:9f:7b:cb:92:6b:e0:
         43:81:fd:6e:c9:f8:07:60:1a:47:26:2d:b9:e8:1b:b7:bf:24:
         60:79:04:ab:6d:78:05:8d:67:89:0d:0e:a6:06:10:70:e9:03:
         db:52:53:09:e7:3a:cd:12:c2:21:f0:ec:f5:38:b3:7b:60:cf:
         3a:ed:32:da:b9:b9:ae:a5:0f:74:ba:d2:d4:90:a9:a9:19:c2:
         fd:01:5f:33:69:93:f0:f3:ad:99:93:41:66:24:53:4b:94:84:
         ad:54:f1:9c:1e:4f:2c:a6:ef:a9:aa:c8:64:fd:66:7a:6b:54:
         7f:33:dd:f8:6f:5b:c7:cb:5a:1f:22:a4:ad:24:fd:54:bb:e9:
         11:2b:5a:a0:1a:0e:18:0d:39:97:f3:c5:58:f1:00:ac:43:a8:
         ed:26:81:fa:f7:2e:cd:b1:7d:bd:b0:0e:f7:f8:b2:a8:66:75:
         97:be:28:85:25:b2:1e:14:41:73:9f:a0:dd:bb:bd:bd:91:eb:
         d7:79:a9:af:98:83:3c:41:87:6e:f9:69:a8:21:47:64:2b:36:
         e5:48:59:ef:c6:a6:9d:5d:6b:cb:a0:89:21:1d:27:43:f0:1a:
         35:c6:31:48:5d:02:b5:55:7a:24:15:13:24:59:03:33:53:52:
         1c:51:c6:f6
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTAw
RUYzNThCQ0JFMTRBMzU4Q0E0RUVFNDFCNEU5MERDOTIzRTlEMjAeFw0yNDExMzAw
MTMxMTlaFw0yNTExMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDJFMjNBQ0IyNTA2QUY3
NTNCMTIwOEVGM0ZDMThFQUQzRTMwM0QxRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCotYRbe2vLMBAX8lQp6U2IcbMQ306H1LhzDF5JWBc005wo3P1L
CFe5yUp2ozm+M+tyt5TdobtZKUUvYvL/a6iCNJ3X5v9Dcu+W7ZgiJLrvu2nD8tJv
cqIG4SOtXb2VE6w1QBeUBy1QcI4v5dnAwK6NfQYdPDqkyJGtH7n7f5JxVoCb01RW
42Ef+uBA0zpnucYMd/ix83GSwht7P+83Nw6C7lSaMmT++HdhEpONzR/O1AGWZ2S3
v35XPQTn5UZEqTUlEkB0Jk0Qw5lZEHCYCxpb9kj01yhQJgRbRTndTdjp0Gnns9tR
+5CjbqkgrMXQcgd9iy0W/LQw2gZDUMUslmcXAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQULiOsslBq91OxII7z/Bjq0+MD0eEwHwYDVR0jBBgwFoAUUA7zWLy+FKNYyk7u
QbTpDckj6dIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIzNC9VQTd6V0x5LUZLTll5azd1UWJUcERja2o2ZEkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9VQTd6V0x5LUZLTll5azd1UWJUcERj
a2o2ZEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMjM0L0xpT3NzbEJxOTFPeElJN3pfQmpxMC1NRDBlRS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXKPKAwDQYJKoZIhvcNAQELBQADggEBAIbcRu1Tmd1+a0XPmJ97y5Jr4EOB
/W7J+AdgGkcmLbnoG7e/JGB5BKtteAWNZ4kNDqYGEHDpA9tSUwnnOs0SwiHw7PU4
s3tgzzrtMtq5ua6lD3S60tSQqakZwv0BXzNpk/DzrZmTQWYkU0uUhK1U8ZweTyym
76mqyGT9ZnprVH8z3fhvW8fLWh8ipK0k/VS76RErWqAaDhgNOZfzxVjxAKxDqO0m
gfr3Ls2xfb2wDvf4sqhmdZe+KIUlsh4UQXOfoN27vb2R69d5qa+YgzxBh275aagh
R2QrNuVIWe/Gpp1da8ugiSEdJ0PwGjXGMUhdArVVeiQVEyRZAzNTUhxRxvY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:17 2025 by rpki-client