Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/iZrUDhtr6oouqzPv8mZ3720bJOQ.roa
File:                     iZrUDhtr6oouqzPv8mZ3720bJOQ.roa (raw, json)
Hash identifier:          G+PyKlWh8ZZdTqlv1JY7Y6ItK1jlBziEto+1C2O3ECQ=
Subject key identifier:   89:9A:D4:0E:1B:6B:EA:8A:2E:AB:33:EF:F2:66:77:EF:6D:1B:24:E4
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       44
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/iZrUDhtr6oouqzPv8mZ3720bJOQ.roa
Signing time:             Fri 31 Jan 2025 01:33:36 +0000
ROA not before:           Fri 31 Jan 2025 01:33:36 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     7679
IP address blocks:        125.56.0.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Jan 31 01:33:36 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=899AD40E1B6BEA8A2EAB33EFF26677EF6D1B24E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:01:19:3f:82:c2:cf:e9:0e:13:6d:3d:62:77:
                    cc:da:25:ba:e8:f2:d0:84:c6:e2:ca:91:4f:9b:e8:
                    c7:61:e7:18:34:98:d1:e1:e0:87:1a:5f:fd:37:4a:
                    6e:17:7c:fb:3d:68:12:28:75:c3:8b:a3:6d:59:4c:
                    7d:8d:62:2c:ce:f5:98:64:6b:09:69:82:3d:16:8a:
                    91:a9:4c:85:d1:ac:99:3e:aa:92:6f:9d:a7:87:55:
                    2f:18:ff:a5:b4:4f:f5:5d:ed:c0:99:f6:0b:1a:1d:
                    73:47:d2:fb:f7:58:2a:46:0c:8f:77:bb:3b:ba:de:
                    b9:3d:f3:e7:5b:5b:72:2c:e3:79:52:6c:2a:f2:40:
                    52:53:13:52:66:ab:a8:7f:ec:23:ce:30:ce:1b:10:
                    af:a3:62:74:83:78:bb:72:43:82:95:2d:6c:57:eb:
                    78:ee:e7:de:9e:c8:11:7a:57:0c:62:c8:49:40:1f:
                    0f:7c:29:ca:21:62:36:7b:4c:82:db:38:b5:51:c5:
                    99:29:31:0c:ff:77:02:85:c9:19:8e:aa:50:4f:7e:
                    a8:a0:45:48:4c:38:d6:38:0b:33:a8:e7:24:70:e2:
                    b4:d3:45:09:11:79:79:96:0a:39:ac:16:bb:60:8d:
                    a2:25:70:28:d0:f8:a1:17:33:55:d4:2b:46:7f:64:
                    ee:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:9A:D4:0E:1B:6B:EA:8A:2E:AB:33:EF:F2:66:77:EF:6D:1B:24:E4
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/iZrUDhtr6oouqzPv8mZ3720bJOQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.56.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         37:1f:9a:12:91:fd:1a:85:cb:24:48:f0:18:66:47:f8:c7:c8:
         5c:8a:64:1c:02:95:6e:aa:55:cc:81:9f:0b:78:1f:72:04:c3:
         b4:f5:3b:ea:03:13:48:da:1a:df:8f:69:ba:08:73:aa:82:b3:
         de:7b:d0:64:07:03:fd:f3:bb:56:b8:4c:79:3f:c7:ee:50:8b:
         9e:ee:67:a4:73:e1:bb:61:7f:e8:67:5b:bf:ea:4e:c4:08:b0:
         b8:d4:f3:ed:be:4e:be:4c:e1:74:27:8e:33:d8:ab:a4:4c:6f:
         45:17:b7:e2:4a:77:cd:0a:a9:98:7d:3a:cb:05:78:f2:48:54:
         81:dd:24:22:41:2d:d8:aa:37:9c:44:fa:0c:9a:62:b1:e3:6d:
         a7:eb:ec:82:a0:ae:49:31:ea:38:f1:23:52:24:63:78:d6:24:
         d3:05:fb:e2:8c:08:8a:9f:d1:79:93:78:7a:5d:b5:75:31:06:
         43:ec:17:db:2a:f7:df:a3:ae:5d:36:9f:d4:78:e8:67:1f:ca:
         95:c0:df:d2:84:58:ec:a3:00:59:5c:3c:0e:36:14:0a:28:a1:
         6a:28:45:49:58:f5:bf:1c:5d:c0:19:fc:f4:a8:5d:29:55:46:
         40:31:54:26:d6:c4:2c:86:bd:06:48:a8:9f:3f:e1:e1:43:51:
         3d:09:bf:d6
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBRDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyNzVE
OTc4MkIxM0U5OTEyOENEMzRGMjJDMDlGRThFN0I1Q0JBNzBCMB4XDTI1MDEzMTAx
MzMzNloXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoODk5QUQ0MEUxQjZCRUE4
QTJFQUIzM0VGRjI2Njc3RUY2RDFCMjRFNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALsBGT+Cws/pDhNtPWJ3zNoluujy0ITG4sqRT5vox2HnGDSY0eHg
hxpf/TdKbhd8+z1oEih1w4ujbVlMfY1iLM71mGRrCWmCPRaKkalMhdGsmT6qkm+d
p4dVLxj/pbRP9V3twJn2Cxodc0fS+/dYKkYMj3e7O7reuT3z51tbcizjeVJsKvJA
UlMTUmarqH/sI84wzhsQr6NidIN4u3JDgpUtbFfreO7n3p7IEXpXDGLISUAfD3wp
yiFiNntMgts4tVHFmSkxDP93AoXJGY6qUE9+qKBFSEw41jgLM6jnJHDitNNFCRF5
eZYKOawWu2CNoiVwKND4oRczVdQrRn9k7tcCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSJmtQOG2vqii6rM+/yZnfvbRsk5DAfBgNVHSMEGDAWgBQnXZeCsT6ZEozTTyLA
n+jntcunCzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjQ5L0oxMlhnckUtbVJLTTAwOGl3Sl9vNTdYTHB3cy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0oxMlhnckUtbVJLTTAwOGl3Sl9vNTdY
THB3cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yNDkvaVpyVURodHI2b291cXpQdjhtWjM3MjBiSk9RLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEB304ADANBgkqhkiG9w0BAQsFAAOCAQEANx+aEpH9GoXLJEjwGGZH+MfIXIpk
HAKVbqpVzIGfC3gfcgTDtPU76gMTSNoa349pughzqoKz3nvQZAcD/fO7VrhMeT/H
7lCLnu5npHPhu2F/6Gdbv+pOxAiwuNTz7b5OvkzhdCeOM9irpExvRRe34kp3zQqp
mH06ywV48khUgd0kIkEt2Ko3nET6DJpiseNtp+vsgqCuSTHqOPEjUiRjeNYk0wX7
4owIip/ReZN4el21dTEGQ+wX2yr336OuXTaf1HjoZx/KlcDf0oRY7KMAWVw8DjYU
CiihaihFSVj1vxxdwBn89KhdKVVGQDFUJtbELIa9Bkionz/h4UNRPQm/1g==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:38 2025 by rpki-client