Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30068/tta9Xis0-x9F_ILFwznn8wQj3Zo.roa
File:                     tta9Xis0-x9F_ILFwznn8wQj3Zo.roa (raw, json)
Hash identifier:          Rn7HDadXsYF/FNGSCOwRt9yrh+qqIYi7ofd8pQpZNnw=
Subject key identifier:   B6:D6:BD:5E:2B:34:FB:1F:45:FC:82:C5:C3:39:E7:F3:04:23:DD:9A
Certificate issuer:       /CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
Certificate serial:       67
Authority key identifier: CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/tta9Xis0-x9F_ILFwznn8wQj3Zo.roa
Signing time:             Fri 31 Jan 2025 01:32:24 +0000
ROA not before:           Fri 31 Jan 2025 01:32:24 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     9370
IP address blocks:        2001:e40::/30 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
        Validity
            Not Before: Jan 31 01:32:24 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=B6D6BD5E2B34FB1F45FC82C5C339E7F30423DD9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d6:dc:84:7e:c7:31:93:c0:1c:56:a4:56:ec:
                    7b:b0:40:ed:1f:e5:8b:c7:21:7f:82:5b:fa:bb:db:
                    83:7d:27:68:64:06:93:18:da:38:70:5b:5e:66:bd:
                    66:1b:2c:ac:e7:58:e5:23:59:09:93:0c:bf:66:07:
                    03:4a:94:47:26:00:5f:48:ec:aa:e8:b3:ef:bb:65:
                    23:5f:a3:43:47:d3:72:06:0a:e8:84:ce:45:0f:d4:
                    e3:56:b7:d7:06:83:9c:ae:63:ca:a4:cf:44:74:28:
                    59:17:06:2b:13:7f:a1:54:7f:20:65:c4:ce:a6:94:
                    b7:12:57:41:d2:b4:3a:fd:e8:5f:7a:e2:d7:9a:17:
                    ee:2a:54:93:14:57:58:13:b3:90:f9:0d:70:5a:90:
                    c2:a7:74:95:3a:6f:e9:5d:f3:9b:94:fb:6c:9a:42:
                    93:8e:eb:b1:db:13:5b:44:52:26:82:68:bf:e7:68:
                    a4:07:47:d3:27:c7:41:6e:b0:be:8d:f6:42:38:2e:
                    3c:d7:eb:e4:3d:f0:6b:0f:c0:dd:b6:12:7c:12:7e:
                    75:9a:29:9b:07:50:34:38:97:fb:3a:c7:99:40:95:
                    67:a6:e0:df:af:76:ed:17:87:94:67:68:8f:69:44:
                    77:93:ee:69:e8:80:69:44:00:9f:cf:54:8e:15:90:
                    13:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D6:BD:5E:2B:34:FB:1F:45:FC:82:C5:C3:39:E7:F3:04:23:DD:9A
            X509v3 Authority Key Identifier:
                keyid:CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/tta9Xis0-x9F_ILFwznn8wQj3Zo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:e40::/30

    Signature Algorithm: sha256WithRSAEncryption
         58:ee:2b:a0:2b:bb:73:d2:ea:8d:7c:8c:3f:ba:5c:d1:5b:00:
         ee:c9:ca:2c:bc:5b:be:19:99:61:84:cb:8a:0e:0f:58:b1:4a:
         b2:c0:cd:64:f9:8f:07:a5:ce:9a:79:47:6a:c5:79:31:2a:40:
         a0:c5:ad:d1:8f:8c:9d:8c:9d:be:d0:9b:88:8d:99:2d:0f:a6:
         a7:21:6f:0d:a3:53:df:1b:cd:8b:f8:e7:cd:89:ac:97:d6:9b:
         67:8d:93:4a:93:2b:3b:9c:f9:5c:cd:15:18:77:ca:fa:87:de:
         f2:4a:80:9b:4c:85:5e:db:59:7e:e5:94:61:6a:8a:dd:e4:33:
         6c:fc:e5:0b:f8:48:9b:8f:5a:d9:55:3b:44:d3:ce:1b:33:e4:
         b9:72:32:f8:ca:e0:26:9d:0d:9f:4a:1a:e0:2c:f5:d0:aa:ca:
         84:e7:2c:e4:7a:23:aa:02:f0:3e:d3:4e:24:8e:3e:e6:de:50:
         52:24:9a:b0:be:d5:0e:fc:39:b3:d2:ea:9f:a6:18:75:89:c0:
         25:87:b4:b8:ef:8d:a2:08:9e:4c:d7:3c:04:0b:8d:f3:89:96:
         71:4d:c4:e3:02:b4:ab:36:7d:68:5c:e4:73:56:40:ea:57:b4:
         96:0e:c4:97:13:e0:ab:8a:6e:cb:f3:5f:b4:3d:5a:d7:76:b0:
         61:3d:39:9d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBZzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDQTAy
QzVDNDNDMDBGMTRFODVCNUIwNzU5OUVERDI2N0M1QTJCNEQyMB4XDTI1MDEzMTAx
MzIyNFoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoQjZENkJENUUyQjM0RkIx
RjQ1RkM4MkM1QzMzOUU3RjMwNDIzREQ5QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALjW3IR+xzGTwBxWpFbse7BA7R/li8chf4Jb+rvbg30naGQGkxja
OHBbXma9ZhssrOdY5SNZCZMMv2YHA0qURyYAX0jsquiz77tlI1+jQ0fTcgYK6ITO
RQ/U41a31waDnK5jyqTPRHQoWRcGKxN/oVR/IGXEzqaUtxJXQdK0Ov3oX3ri15oX
7ipUkxRXWBOzkPkNcFqQwqd0lTpv6V3zm5T7bJpCk47rsdsTW0RSJoJov+dopAdH
0yfHQW6wvo32QjguPNfr5D3waw/A3bYSfBJ+dZopmwdQNDiX+zrHmUCVZ6bg3692
7ReHlGdoj2lEd5PuaeiAaUQAn89UjhWQE9cCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBS21r1eKzT7H0X8gsXDOefzBCPdmjAfBgNVHSMEGDAWgBTKAsXEPADxToW1sHWZ
7dJnxaK00jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwNjgveWdMRnhEd0E4VTZGdGJCMW1lM1NaOFdpdE5JLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveWdMRnhEd0E4VTZGdGJCMW1lM1Na
OFdpdE5JLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMDY4L3R0YTlYaXMwLXg5Rl9JTEZ3em5uOHdRajNaby5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQIgAQ5AMA0GCSqGSIb3DQEBCwUAA4IBAQBY7iugK7tz0uqNfIw/ulzR
WwDuycosvFu+GZlhhMuKDg9YsUqywM1k+Y8Hpc6aeUdqxXkxKkCgxa3Rj4ydjJ2+
0JuIjZktD6anIW8No1PfG82L+OfNiayX1ptnjZNKkys7nPlczRUYd8r6h97ySoCb
TIVe21l+5ZRhaord5DNs/OUL+Eibj1rZVTtE084bM+S5cjL4yuAmnQ2fShrgLPXQ
qsqE5yzkeiOqAvA+004kjj7m3lBSJJqwvtUO/Dmz0uqfphh1icAlh7S4742iCJ5M
1zwEC43ziZZxTcTjArSrNn1oXORzVkDqV7SWDsSXE+Crim7L81+0PVrXdrBhPTmd
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:17 2025 by rpki-client