Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/HSKbQU6r3XkopNumUOVKU4qw40A.roa
File:                     HSKbQU6r3XkopNumUOVKU4qw40A.roa (raw, json)
Hash identifier:          CLNPCz2Kii1ewzZu9RU6U5R9XWpzceMsNmg1ve0SrXM=
Subject key identifier:   1D:22:9B:41:4E:AB:DD:79:28:A4:DB:A6:50:E5:4A:53:8A:B0:E3:40
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       53
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/HSKbQU6r3XkopNumUOVKU4qw40A.roa
Signing time:             Thu 31 Oct 2024 01:28:43 +0000
ROA not before:           Thu 31 Oct 2024 01:28:43 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2514
IP address blocks:        124.146.128.0/17 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Oct 31 01:28:43 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=1D229B414EABDD7928A4DBA650E54A538AB0E340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:90:34:12:06:ea:b6:8e:c5:ac:98:56:dc:23:
                    81:4a:44:b7:a1:e1:51:68:20:e7:eb:1d:54:37:9e:
                    4f:0d:d0:c6:9a:87:96:17:2c:27:ca:2e:66:82:fc:
                    98:22:75:a0:5b:7f:7d:5e:ad:4c:30:31:89:6b:a8:
                    c2:7a:d6:ec:1c:af:6c:27:76:cb:b5:98:2b:ff:c9:
                    63:49:1b:83:66:af:0b:72:9c:ff:59:af:d5:fb:0a:
                    2f:8f:c7:3f:ba:7f:83:55:87:a3:16:2c:68:c5:08:
                    4d:cc:9b:de:08:e7:94:7c:f7:8b:37:ef:15:de:e9:
                    7a:93:60:46:ea:01:03:41:1b:a4:55:b8:0d:70:10:
                    94:d0:fb:47:63:79:e1:a5:38:72:3e:f5:56:96:c9:
                    6e:79:5e:7c:1d:32:7b:0e:dc:55:03:02:46:c7:13:
                    52:60:ad:ab:89:a4:71:f2:f8:96:8c:45:77:ba:69:
                    bd:2f:2f:3e:02:5f:a6:38:22:c9:5d:07:3d:5a:9a:
                    77:2c:f6:a5:f1:fb:f8:7f:8c:1d:43:52:aa:de:02:
                    dd:cb:f5:d1:11:3c:0b:42:c8:56:d3:53:ef:fc:f1:
                    6c:8d:dc:db:0e:7d:52:69:05:d4:0a:e6:32:8c:bd:
                    10:ef:91:41:ad:67:72:b3:d6:37:a2:a6:78:f1:78:
                    45:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:22:9B:41:4E:AB:DD:79:28:A4:DB:A6:50:E5:4A:53:8A:B0:E3:40
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/HSKbQU6r3XkopNumUOVKU4qw40A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.146.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         81:53:3d:8b:e2:27:3e:67:9a:41:62:04:7e:d2:6c:b7:8b:c3:
         69:8e:ef:7e:53:85:6e:71:fa:78:17:af:5f:94:7e:f1:e4:94:
         8a:43:b0:e3:48:86:28:ea:20:50:a6:86:59:d1:3a:51:4a:7c:
         db:0f:01:0c:80:f3:10:79:3c:7e:64:57:05:ac:08:46:18:bd:
         9d:a5:d5:9c:51:65:bc:85:83:a7:0b:34:66:bf:84:92:d1:aa:
         e0:db:ed:79:b8:81:62:66:cd:02:a6:a2:29:52:a7:9b:f1:51:
         5c:f2:84:ee:4b:aa:9e:33:38:6b:13:0e:74:45:9e:d3:77:39:
         30:68:13:0b:d5:71:25:48:e3:3d:84:fc:92:0c:11:03:6b:d3:
         b7:10:14:92:56:67:21:04:3b:0c:33:6a:b8:c1:a3:ed:78:03:
         66:0a:40:51:d3:e6:c4:53:01:4a:b4:11:56:34:87:ff:3e:71:
         b3:bc:55:5c:c1:8f:45:2d:17:9e:0d:cb:74:1d:4b:e5:d5:c9:
         b9:b1:7a:89:2c:83:07:14:8d:0d:2c:11:17:5e:4f:35:5e:01:
         30:3a:6d:e6:1a:b3:b6:7a:7c:ba:c6:01:24:41:ba:b2:fc:2a:
         ca:7d:9c:f5:95:9e:d9:1e:f7:ad:5d:72:e3:e5:a5:b8:37:51:
         f4:e6:54:ff
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIBUzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNkZB
NjYyMTk0RkNGMUVCOTgzQUI0NENDOTEzMDA0MTgwNzcwRDE4MB4XDTI0MTAzMTAx
Mjg0M1oXDTI1MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoMUQyMjlCNDE0RUFCREQ3
OTI4QTREQkE2NTBFNTRBNTM4QUIwRTM0MDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALWQNBIG6raOxayYVtwjgUpEt6HhUWgg5+sdVDeeTw3QxpqHlhcs
J8ouZoL8mCJ1oFt/fV6tTDAxiWuownrW7ByvbCd2y7WYK//JY0kbg2avC3Kc/1mv
1fsKL4/HP7p/g1WHoxYsaMUITcyb3gjnlHz3izfvFd7pepNgRuoBA0EbpFW4DXAQ
lND7R2N54aU4cj71VpbJbnlefB0yew7cVQMCRscTUmCtq4mkcfL4loxFd7ppvS8v
PgJfpjgiyV0HPVqadyz2pfH7+H+MHUNSqt4C3cv10RE8C0LIVtNT7/zxbI3c2w59
UmkF1ArmMoy9EO+RQa1ncrPWN6KmePF4Ra0CAwEAAaOCAiIwggIeMB0GA1UdDgQW
BBQdIptBTqvdeSik26ZQ5UpTirDjQDAfBgNVHSMEGDAWgBQG+mYhlPzx65g6tEzJ
EwBBgHcNGDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjkvQnZwbUlaVDg4ZXVZT3JSTXlSTUFRWUIzRFJnLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQnZwbUlaVDg4ZXVZT3JSTXlSTUFRWUIz
RFJnLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzI5L0hTS2JRVTZyM1hrb3BOdW1VT1ZLVTRxdzQwQS5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAd8koAwDQYJKoZIhvcNAQELBQADggEBAIFTPYviJz5nmkFiBH7SbLeLw2mO735T
hW5x+ngXr1+UfvHklIpDsONIhijqIFCmhlnROlFKfNsPAQyA8xB5PH5kVwWsCEYY
vZ2l1ZxRZbyFg6cLNGa/hJLRquDb7Xm4gWJmzQKmoilSp5vxUVzyhO5Lqp4zOGsT
DnRFntN3OTBoEwvVcSVI4z2E/JIMEQNr07cQFJJWZyEEOwwzarjBo+14A2YKQFHT
5sRTAUq0EVY0h/8+cbO8VVzBj0UtF54Ny3QdS+XVybmxeoksgwcUjQ0sERdeTzVe
ATA6beYas7Z6fLrGASRBurL8Ksp9nPWVntke961dcuPlpbg3UfTmVP8=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:46:40 2025 by rpki-client