Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/Y3v2IA53HJrhjRXm72it1i1Ss6k.roa
File:                     Y3v2IA53HJrhjRXm72it1i1Ss6k.roa (raw, json)
Hash identifier:          HKCD2eSZK8JXio/WmRbGFnBxT+4fSxFsaBFxTzRrtDI=
Subject key identifier:   63:7B:F6:20:0E:77:1C:9A:E1:8D:15:E6:EF:68:AD:D6:2D:52:B3:A9
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       37
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/Y3v2IA53HJrhjRXm72it1i1Ss6k.roa
Signing time:             Fri 31 Jan 2025 01:33:30 +0000
ROA not before:           Fri 31 Jan 2025 01:33:30 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     7679
IP address blocks:        61.114.128.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Jan 31 01:33:30 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=637BF6200E771C9AE18D15E6EF68ADD62D52B3A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:67:d2:a4:7c:ed:aa:04:41:4f:5e:1a:cd:96:
                    ec:39:94:0f:88:4b:23:78:37:9e:06:3a:9d:bc:fe:
                    22:b5:96:24:d3:5b:73:d7:3f:55:57:cb:04:ed:8b:
                    3b:7d:a1:d4:91:68:e7:22:dd:a8:63:e8:45:d9:8b:
                    0b:54:9e:ee:3e:b4:42:e3:bc:64:ea:9e:7d:c4:e4:
                    45:43:23:76:69:cb:53:9f:d2:a7:b0:62:94:bc:08:
                    5d:46:a7:66:01:5d:4f:ac:98:a1:68:fa:d8:74:cb:
                    cf:7e:07:7b:5b:16:20:86:66:1f:11:77:a1:47:2c:
                    f9:c4:13:87:f9:fc:b2:ae:53:5a:69:2f:c3:4c:69:
                    1f:5f:df:05:b3:9f:e1:52:ec:dd:2c:75:e5:d9:c2:
                    a6:fe:d9:cb:cf:e4:d9:fb:97:c3:25:5f:0a:f4:de:
                    2b:67:19:1f:64:2e:25:50:7f:a3:5d:36:00:28:07:
                    10:0b:c2:2a:77:d8:7d:6c:ed:f0:fc:2d:2a:37:24:
                    83:71:dc:84:b7:11:16:e8:e4:7e:32:b6:30:52:c8:
                    a7:ee:c1:5f:31:b5:f8:9f:ca:7b:2d:c3:b2:08:8d:
                    8a:f4:bd:f0:db:29:7a:b1:9c:20:d6:da:30:93:18:
                    ac:ba:bc:37:80:ef:f8:aa:84:61:cb:e0:04:08:81:
                    f0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:7B:F6:20:0E:77:1C:9A:E1:8D:15:E6:EF:68:AD:D6:2D:52:B3:A9
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/Y3v2IA53HJrhjRXm72it1i1Ss6k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.114.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c7:fd:6e:d2:7d:a1:06:05:9d:1d:d6:23:46:7b:e4:47:47:00:
         65:2e:31:98:bc:41:d6:c5:3c:b1:d3:eb:1d:46:49:b0:fb:7e:
         fc:ce:8b:be:ca:4a:92:71:d7:37:bb:a5:5f:d5:8e:dc:d0:a7:
         bb:dc:0e:29:f9:16:fc:02:20:05:33:df:10:54:78:e3:83:97:
         1d:a7:2c:af:59:20:e6:26:a2:c2:ad:f7:a5:a2:99:2d:96:e6:
         09:e2:46:bf:e9:70:d3:2a:de:77:3a:82:93:41:2f:4b:6d:ce:
         65:56:fe:d1:48:2f:b2:38:f6:88:f4:0e:eb:66:94:cf:b8:e7:
         35:5f:a3:8e:a7:c6:24:9f:36:7f:5f:6d:dd:b7:59:cd:12:d7:
         b4:e8:9b:db:1d:da:6b:78:bf:a8:b1:f0:6d:55:55:7b:ef:ba:
         d9:a3:fd:56:a0:29:2c:75:47:73:13:20:6b:e3:5c:32:4f:a3:
         26:ce:68:68:2f:e4:b3:85:4a:55:69:72:0f:54:41:16:9c:68:
         3a:86:9f:77:63:c7:2b:da:e5:b9:85:1c:b4:9d:5d:08:4d:32:
         d4:58:f7:85:fa:9c:a9:17:1b:f0:fc:2f:1e:6e:f0:5e:35:c6:
         a6:d5:27:33:e7:be:84:9f:43:e0:e2:5e:cd:51:fb:b8:90:df:
         88:48:12:26
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBNzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyNzVE
OTc4MkIxM0U5OTEyOENEMzRGMjJDMDlGRThFN0I1Q0JBNzBCMB4XDTI1MDEzMTAx
MzMzMFoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoNjM3QkY2MjAwRTc3MUM5
QUUxOEQxNUU2RUY2OEFERDYyRDUyQjNBOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANRn0qR87aoEQU9eGs2W7DmUD4hLI3g3ngY6nbz+IrWWJNNbc9c/
VVfLBO2LO32h1JFo5yLdqGPoRdmLC1Se7j60QuO8ZOqefcTkRUMjdmnLU5/Sp7Bi
lLwIXUanZgFdT6yYoWj62HTLz34He1sWIIZmHxF3oUcs+cQTh/n8sq5TWmkvw0xp
H1/fBbOf4VLs3Sx15dnCpv7Zy8/k2fuXwyVfCvTeK2cZH2QuJVB/o102ACgHEAvC
KnfYfWzt8PwtKjckg3HchLcRFujkfjK2MFLIp+7BXzG1+J/Key3DsgiNivS98Nsp
erGcINbaMJMYrLq8N4Dv+KqEYcvgBAiB8J8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRje/YgDnccmuGNFebvaK3WLVKzqTAfBgNVHSMEGDAWgBQnXZeCsT6ZEozTTyLA
n+jntcunCzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjQ5L0oxMlhnckUtbVJLTTAwOGl3Sl9vNTdYTHB3cy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0oxMlhnckUtbVJLTTAwOGl3Sl9vNTdY
THB3cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yNDkvWTN2MklBNTNISnJoalJYbTcyaXQxaTFTczZrLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBT1ygDANBgkqhkiG9w0BAQsFAAOCAQEAx/1u0n2hBgWdHdYjRnvkR0cAZS4x
mLxB1sU8sdPrHUZJsPt+/M6LvspKknHXN7ulX9WO3NCnu9wOKfkW/AIgBTPfEFR4
44OXHacsr1kg5iaiwq33paKZLZbmCeJGv+lw0yredzqCk0EvS23OZVb+0Ugvsjj2
iPQO62aUz7jnNV+jjqfGJJ82f19t3bdZzRLXtOib2x3aa3i/qLHwbVVVe++62aP9
VqApLHVHcxMga+NcMk+jJs5oaC/ks4VKVWlyD1RBFpxoOoafd2PHK9rluYUctJ1d
CE0y1Fj3hfqcqRcb8PwvHm7wXjXGptUnM+e+hJ9D4OJezVH7uJDfiEgSJg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:39:50 2025 by rpki-client