Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/pSfQYin1csnwxQu9fZi6vp1PDgY.roa
File:                     pSfQYin1csnwxQu9fZi6vp1PDgY.roa (raw, json)
Hash identifier:          EdxoQdSbW6E/+q5MHT32/PCEXXpO/hoZjM+iA+I5pEc=
Subject key identifier:   A5:27:D0:62:29:F5:72:C9:F0:C5:0B:BD:7D:98:BA:BE:9D:4F:0E:06
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       9D
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/pSfQYin1csnwxQu9fZi6vp1PDgY.roa
Signing time:             Sat 30 Nov 2024 01:31:18 +0000
ROA not before:           Sat 30 Nov 2024 01:31:18 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     9351
IP address blocks:        117.18.128.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157 (0x9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Nov 30 01:31:18 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=A527D06229F572C9F0C50BBD7D98BABE9D4F0E06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:67:29:c9:89:71:f7:ca:3e:7b:b9:db:eb:57:
                    39:8a:e6:ce:ce:40:d5:0d:f2:f7:dc:e6:98:84:45:
                    71:6f:c2:9f:10:10:6f:e5:e9:89:11:c9:72:24:74:
                    98:8a:84:73:d6:da:cd:17:96:ab:db:af:cc:da:f0:
                    6d:54:41:43:77:ca:ae:c6:27:87:4e:77:3a:3a:b4:
                    41:9e:13:82:76:42:6c:c4:aa:4d:87:e2:7f:bd:e4:
                    90:eb:cd:ee:5e:21:8b:e8:19:fb:d3:93:06:bc:b4:
                    9c:5c:db:4b:2c:96:91:cf:d6:77:ac:d7:4b:c3:24:
                    3e:c1:de:c1:c8:fa:a0:f2:9c:9d:72:8d:f0:5b:6a:
                    26:0d:fa:d2:df:c3:f8:1b:94:59:a7:bd:96:bf:7a:
                    c0:45:ae:78:5e:c2:7e:4e:9d:a8:86:3a:d0:6d:8e:
                    66:a1:17:e4:b2:dc:46:89:fb:c3:ba:04:2a:b0:af:
                    2e:43:69:a7:3e:9e:c5:f2:7b:86:84:c4:32:31:56:
                    29:8f:f9:24:7e:2f:2b:7c:7a:c2:3b:11:3f:9f:b9:
                    fc:fe:2d:e1:58:7a:aa:2c:ad:5d:81:ba:d8:95:3b:
                    44:d4:6c:88:46:12:ba:69:c6:ba:9b:37:24:65:fd:
                    48:24:2f:f1:6d:08:3e:ee:fb:bf:0f:2c:94:10:fe:
                    5c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:27:D0:62:29:F5:72:C9:F0:C5:0B:BD:7D:98:BA:BE:9D:4F:0E:06
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/pSfQYin1csnwxQu9fZi6vp1PDgY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.18.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9d:a6:93:d0:be:23:0e:b1:1b:81:a2:9b:29:ad:05:c0:be:74:
         59:9d:71:e3:81:29:8c:c3:f0:49:79:6f:7a:d5:ce:b0:12:96:
         6b:22:f3:7a:5f:3c:ea:67:aa:80:c6:da:ac:cf:c9:67:60:32:
         d1:01:11:79:f2:0e:20:27:27:20:e6:7c:80:33:e4:c9:07:a0:
         3f:42:45:4a:99:07:d5:8f:61:f1:0e:e8:15:24:12:5b:56:07:
         1e:5e:75:2c:2f:a8:64:6b:88:90:87:fa:3e:2b:4f:26:97:10:
         98:80:cd:14:74:a8:82:19:23:71:36:f6:bb:89:1c:0e:ee:4c:
         af:c8:19:39:27:9f:16:73:e4:f6:f8:f9:04:be:b7:c8:d9:2a:
         b3:33:8b:22:fa:ff:62:a0:c8:c8:bc:f4:7a:1e:6d:f9:03:73:
         44:78:2b:39:d7:97:af:e4:58:c2:34:88:ee:9e:55:5f:9e:96:
         79:7e:62:46:43:16:fa:18:1d:07:63:78:be:e1:3d:3a:c6:4d:
         c1:99:e4:12:6e:c5:54:12:5f:40:76:b7:54:d1:ea:94:49:5f:
         3b:bb:77:91:55:e1:47:40:fa:3a:92:d0:76:fb:37:1e:ca:15:
         fe:a9:21:8f:36:87:cb:48:0a:40:dc:18:fc:48:51:c0:f9:1f:
         f1:74:aa:2c
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTAw
RUYzNThCQ0JFMTRBMzU4Q0E0RUVFNDFCNEU5MERDOTIzRTlEMjAeFw0yNDExMzAw
MTMxMThaFw0yNTExMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEE1MjdEMDYyMjlGNTcy
QzlGMEM1MEJCRDdEOThCQUJFOUQ0RjBFMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDWZynJiXH3yj57udvrVzmK5s7OQNUN8vfc5piERXFvwp8QEG/l
6YkRyXIkdJiKhHPW2s0Xlqvbr8za8G1UQUN3yq7GJ4dOdzo6tEGeE4J2QmzEqk2H
4n+95JDrze5eIYvoGfvTkwa8tJxc20sslpHP1nes10vDJD7B3sHI+qDynJ1yjfBb
aiYN+tLfw/gblFmnvZa/esBFrnhewn5OnaiGOtBtjmahF+Sy3EaJ+8O6BCqwry5D
aac+nsXye4aExDIxVimP+SR+Lyt8esI7ET+fufz+LeFYeqosrV2ButiVO0TUbIhG
ErppxrqbNyRl/UgkL/FtCD7u+78PLJQQ/lzBAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUpSfQYin1csnwxQu9fZi6vp1PDgYwHwYDVR0jBBgwFoAUUA7zWLy+FKNYyk7u
QbTpDckj6dIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIzNC9VQTd6V0x5LUZLTll5azd1UWJUcERja2o2ZEkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9VQTd6V0x5LUZLTll5azd1UWJUcERj
a2o2ZEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMjM0L3BTZlFZaW4xY3Nud3hRdTlmWmk2dnAxUERnWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZ1EoAwDQYJKoZIhvcNAQELBQADggEBAJ2mk9C+Iw6xG4GimymtBcC+dFmd
ceOBKYzD8El5b3rVzrASlmsi83pfPOpnqoDG2qzPyWdgMtEBEXnyDiAnJyDmfIAz
5MkHoD9CRUqZB9WPYfEO6BUkEltWBx5edSwvqGRriJCH+j4rTyaXEJiAzRR0qIIZ
I3E29ruJHA7uTK/IGTknnxZz5Pb4+QS+t8jZKrMziyL6/2KgyMi89HoebfkDc0R4
KznXl6/kWMI0iO6eVV+elnl+YkZDFvoYHQdjeL7hPTrGTcGZ5BJuxVQSX0B2t1TR
6pRJXzu7d5FV4UdA+jqS0Hb7Nx7KFf6pIY82h8tICkDcGPxIUcD5H/F0qiw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:04 2025 by rpki-client