Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/zeqRXM12dfIHzzzwLIVRx-UiBiw.roa
File:                     zeqRXM12dfIHzzzwLIVRx-UiBiw.roa (raw, json)
Hash identifier:          qitRec67fUZ70bXQ1IduN57l9im7dRQDgUKG2kEI8mI=
Subject key identifier:   CD:EA:91:5C:CD:76:75:F2:07:CF:3C:F0:2C:85:51:C7:E5:22:06:2C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       09B2
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zeqRXM12dfIHzzzwLIVRx-UiBiw.roa
Signing time:             Sun 30 Jun 2024 01:38:21 +0000
ROA not before:           Sun 30 Jun 2024 01:38:21 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        1.72.12.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2482 (0x9b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:38:21 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=CDEA915CCD7675F207CF3CF02C8551C7E522062C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2b:9e:7e:74:57:9c:17:86:72:08:2d:30:ee:
                    7a:bf:c4:76:50:e9:16:36:17:d5:88:1f:1a:91:75:
                    5b:59:2a:c9:83:57:f7:53:e6:d4:74:b7:79:dd:36:
                    d5:25:f4:41:f1:5c:44:fd:92:d3:8a:32:ce:0f:78:
                    24:cf:40:c9:a9:25:0e:77:74:4b:f5:15:13:fe:56:
                    b9:4c:62:36:35:f4:73:30:e3:29:2e:8c:93:18:3d:
                    16:15:0f:ed:12:6e:6e:06:a9:2f:ab:af:b5:d8:06:
                    52:c0:1c:79:42:3d:4a:a0:d3:e2:f6:ee:4d:08:b6:
                    2d:c4:c0:e7:21:46:38:fa:47:99:06:0f:d4:65:6e:
                    2e:16:e9:0e:e7:ce:d1:0b:60:7b:d1:37:d7:8e:63:
                    e2:f4:b5:4a:2f:2f:a2:f8:2d:98:61:52:c7:d2:1f:
                    c9:a1:72:58:40:3c:f8:5c:7c:77:92:b1:41:72:c6:
                    ca:54:13:81:e2:5d:39:7e:9f:ba:77:86:d0:9b:38:
                    ab:c2:f2:92:a5:58:64:24:49:87:c0:0c:57:7c:d7:
                    4e:60:3d:83:c3:a4:7e:b0:48:50:05:49:2a:c9:de:
                    5a:b7:61:7e:93:82:99:4f:32:48:13:85:5e:27:66:
                    79:d2:89:83:a0:fd:a3:27:9a:74:87:81:00:a9:51:
                    a3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:EA:91:5C:CD:76:75:F2:07:CF:3C:F0:2C:85:51:C7:E5:22:06:2C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zeqRXM12dfIHzzzwLIVRx-UiBiw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.72.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:6c:43:16:9d:5e:97:8f:0f:f5:39:7b:1b:27:45:4c:77:bb:
         16:d3:de:22:0a:e8:19:39:bc:32:13:9f:b0:c0:03:b2:59:63:
         85:17:37:4a:c2:ee:4c:f7:32:3c:38:a8:73:54:78:b1:70:87:
         9b:f7:20:2c:87:ef:5a:c2:65:2d:a5:f0:54:41:a0:6a:09:09:
         06:d4:3b:c9:14:d4:24:1f:d9:c0:a9:8d:22:71:77:0a:7f:8d:
         8e:4a:24:0a:2e:dc:f3:fe:08:cc:be:6a:99:3b:d1:e8:6a:93:
         db:81:e1:9e:c4:2b:ce:b3:ce:37:ef:12:86:4d:ad:88:b5:ba:
         16:65:83:69:09:d9:eb:d7:6f:07:5c:14:a5:2b:8f:7b:b0:ca:
         9e:99:b4:65:b4:54:50:f7:0b:0d:e6:c4:19:1a:89:24:3d:f9:
         be:14:f7:3b:89:60:99:c3:25:a1:a4:37:cd:db:07:2f:41:16:
         ca:67:4e:f8:15:67:7d:0d:ba:6a:42:61:70:de:bd:dd:2f:ec:
         d6:9e:d2:05:50:59:66:df:95:96:04:6f:93:2d:9d:af:8e:07:
         26:c6:24:55:93:de:20:f8:d4:34:5e:3b:49:b3:11:8e:12:4a:
         cc:ca:69:bb:40:2f:59:34:cc:05:02:56:20:02:c0:68:b1:73:
         a9:b7:6e:e0
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICCbIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw
MTM4MjFaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKENERUE5MTVDQ0Q3Njc1
RjIwN0NGM0NGMDJDODU1MUM3RTUyMjA2MkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDcK55+dFecF4ZyCC0w7nq/xHZQ6RY2F9WIHxqRdVtZKsmDV/dT
5tR0t3ndNtUl9EHxXET9ktOKMs4PeCTPQMmpJQ53dEv1FRP+VrlMYjY19HMw4yku
jJMYPRYVD+0Sbm4GqS+rr7XYBlLAHHlCPUqg0+L27k0Iti3EwOchRjj6R5kGD9Rl
bi4W6Q7nztELYHvRN9eOY+L0tUovL6L4LZhhUsfSH8mhclhAPPhcfHeSsUFyxspU
E4HiXTl+n7p3htCbOKvC8pKlWGQkSYfADFd8105gPYPDpH6wSFAFSSrJ3lq3YX6T
gplPMkgThV4nZnnSiYOg/aMnmnSHgQCpUaPJAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUzeqRXM12dfIHzzzwLIVRx+UiBiwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3plcVJYTTEyZGZJSHp6endMSVZSeC1VaUJpdy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEBSAwwDQYJKoZIhvcNAQELBQADggEBAIxsQxadXpePD/U5exsnRUx3uxbT
3iIK6Bk5vDITn7DAA7JZY4UXN0rC7kz3Mjw4qHNUeLFwh5v3ICyH71rCZS2l8FRB
oGoJCQbUO8kU1CQf2cCpjSJxdwp/jY5KJAou3PP+CMy+apk70ehqk9uB4Z7EK86z
zjfvEoZNrYi1uhZlg2kJ2evXbwdcFKUrj3uwyp6ZtGW0VFD3Cw3mxBkaiSQ9+b4U
9zuJYJnDJaGkN83bBy9BFspnTvgVZ30NumpCYXDevd0v7Nae0gVQWWbflZYEb5Mt
na+OBybGJFWT3iD41DReO0mzEY4SSszKabtAL1k0zAUCViACwGixc6m3buA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:20:11 2025 by rpki-client