Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/PbNoEHTu8BNZZeBYDL72qU2h6aE.roa
File:                     PbNoEHTu8BNZZeBYDL72qU2h6aE.roa (raw, json)
Hash identifier:          BI5CP48rdnwWG/J6zEwCLnotPLdlaGgm7flLq4VM7dw=
Subject key identifier:   3D:B3:68:10:74:EE:F0:13:59:65:E0:58:0C:BE:F6:A9:4D:A1:E9:A1
Certificate issuer:       /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
Certificate serial:       25
Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/PbNoEHTu8BNZZeBYDL72qU2h6aE.roa
Signing time:             Fri 18 Oct 2024 08:13:37 +0000
ROA not before:           Fri 18 Oct 2024 08:13:37 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     23783
IP address blocks:        61.11.176.0/20 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
        Validity
            Not Before: Oct 18 08:13:37 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=3DB3681074EEF0135965E0580CBEF6A94DA1E9A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ad:be:6d:0c:74:71:e3:34:d4:a2:c6:c3:51:
                    6f:8d:1d:d9:f7:8f:ed:b0:73:33:cc:03:af:a8:02:
                    cd:f2:78:0b:0e:75:df:53:4b:6a:50:f7:1b:5b:01:
                    8e:d8:01:9f:58:19:f4:15:91:0f:78:8a:bf:5c:61:
                    21:68:b9:1c:3f:94:ec:5c:a3:1b:3d:c4:4a:5c:8e:
                    62:be:fe:ce:c3:b5:97:a2:88:41:65:20:aa:7e:43:
                    d1:d8:ba:df:09:8b:b1:19:c8:00:eb:4d:c3:9a:60:
                    1c:ec:08:67:f5:31:3a:c4:02:41:26:c9:10:f7:60:
                    c5:d6:24:62:7a:8b:e6:b8:f6:98:52:de:ee:1e:88:
                    38:5b:c1:c7:f9:7c:6e:aa:a1:2f:f3:a4:c1:52:7e:
                    f9:ba:58:fe:05:72:f3:bb:82:23:f5:98:00:74:88:
                    90:cb:d1:9a:31:ab:4e:da:f4:d9:cc:af:d0:8e:fc:
                    b4:ba:37:1e:36:4b:91:0e:16:73:ed:bd:b9:b0:58:
                    23:0f:b7:fe:63:c1:b3:bd:3a:fb:9f:57:8b:b8:68:
                    73:74:d5:61:a6:db:2c:5f:ec:22:28:5d:96:01:09:
                    3c:8f:29:37:ea:9c:0b:38:d2:6b:5f:81:ba:d5:d8:
                    49:0c:18:cb:57:ea:57:06:77:24:0d:4f:34:26:2e:
                    48:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B3:68:10:74:EE:F0:13:59:65:E0:58:0C:BE:F6:A9:4D:A1:E9:A1
            X509v3 Authority Key Identifier:
                keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/PbNoEHTu8BNZZeBYDL72qU2h6aE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.11.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ae:58:b1:2e:c9:dd:63:95:ad:80:0a:63:1b:f5:ae:30:9c:3c:
         26:06:c7:02:46:74:41:52:4e:7e:42:61:40:4b:af:97:6e:27:
         28:b1:26:4d:0a:8e:b1:da:76:30:23:e7:38:d7:76:c7:8e:99:
         a2:fe:43:f1:ec:6d:b0:71:1f:33:19:b2:0c:f4:0c:10:31:f9:
         d7:40:00:90:07:22:d0:d5:16:6c:a2:c4:8c:33:48:1e:be:3e:
         e4:6a:6d:d9:0c:64:da:b4:fc:c0:14:fa:18:34:a9:a5:76:84:
         73:dc:c1:62:25:f7:b0:c3:81:02:36:df:a7:f2:97:43:47:c4:
         66:15:26:cb:c9:86:ca:f6:6b:2a:57:70:a8:41:e4:cc:3b:15:
         5e:49:01:96:4b:f1:e2:97:99:39:33:0e:02:13:d7:c3:f6:e0:
         f4:47:89:0a:46:2e:6e:2a:54:31:3e:f5:ef:32:77:74:77:9e:
         14:08:ae:44:e4:0a:3c:ee:bc:b1:dc:c6:1a:df:49:9b:11:99:
         8f:56:89:c4:7f:44:ab:6d:fc:54:d2:dd:55:bf:4f:1c:c3:46:
         d6:d2:05:61:2e:35:e8:08:08:8b:e9:c1:73:94:44:38:a4:ee:
         9c:1f:ca:17:ec:6d:aa:ff:9a:21:d6:a2:af:4a:83:9f:a7:be:
         a4:7c:8c:00
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBJTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2RDFF
RDE2RDhDNkQzQkE0MEJGNDJDQjNBMjk2NTJBREFCNzZEMDYxMB4XDTI0MTAxODA4
MTMzN1oXDTI1MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoM0RCMzY4MTA3NEVFRjAx
MzU5NjVFMDU4MENCRUY2QTk0REExRTlBMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMytvm0MdHHjNNSixsNRb40d2feP7bBzM8wDr6gCzfJ4Cw5131NL
alD3G1sBjtgBn1gZ9BWRD3iKv1xhIWi5HD+U7FyjGz3ESlyOYr7+zsO1l6KIQWUg
qn5D0di63wmLsRnIAOtNw5pgHOwIZ/UxOsQCQSbJEPdgxdYkYnqL5rj2mFLe7h6I
OFvBx/l8bqqhL/OkwVJ++bpY/gVy87uCI/WYAHSIkMvRmjGrTtr02cyv0I78tLo3
HjZLkQ4Wc+29ubBYIw+3/mPBs706+59Xi7hoc3TVYabbLF/sIihdlgEJPI8pN+qc
CzjSa1+ButXYSQwYy1fqVwZ3JA1PNCYuSFMCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQ9s2gQdO7wE1ll4FgMvvapTaHpoTAfBgNVHSMEGDAWgBRtHtFtjG07pAv0LLOi
llKtq3bQYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA3L2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0MjBHRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0
MjBHRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDcvUGJOb0VIVHU4Qk5aWmVCWURMNzJxVTJoNmFFLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBD0LsDANBgkqhkiG9w0BAQsFAAOCAQEArlixLsndY5WtgApjG/WuMJw8JgbH
AkZ0QVJOfkJhQEuvl24nKLEmTQqOsdp2MCPnONd2x46Zov5D8extsHEfMxmyDPQM
EDH510AAkAci0NUWbKLEjDNIHr4+5Gpt2Qxk2rT8wBT6GDSppXaEc9zBYiX3sMOB
Ajbfp/KXQ0fEZhUmy8mGyvZrKldwqEHkzDsVXkkBlkvx4peZOTMOAhPXw/bg9EeJ
CkYubipUMT717zJ3dHeeFAiuROQKPO68sdzGGt9JmxGZj1aJxH9Eq238VNLdVb9P
HMNG1tIFYS416AgIi+nBc5REOKTunB/KF+xtqv+aIdair0qDn6e+pHyMAA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:16 2025 by rpki-client