Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/JRa79PRv1FJrOCNeMiWpKq94Rbk.roa
File:                     JRa79PRv1FJrOCNeMiWpKq94Rbk.roa (raw, json)
Hash identifier:          AneWSnVhqNrKvpS6KCh5HITray/zhE/skvZ8pVYINek=
Subject key identifier:   25:16:BB:F4:F4:6F:D4:52:6B:38:23:5E:32:25:A9:2A:AF:78:45:B9
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       F9
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/JRa79PRv1FJrOCNeMiWpKq94Rbk.roa
Signing time:             Sun 30 Jun 2024 01:28:32 +0000
ROA not before:           Sun 30 Jun 2024 01:28:32 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     7530
IP address blocks:        210.231.208.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 249 (0xf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Jun 30 01:28:32 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=2516BBF4F46FD4526B38235E3225A92AAF7845B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b8:8b:54:3a:33:05:37:47:a4:61:83:fd:d1:
                    85:36:cd:44:e9:03:88:dc:83:c9:eb:98:58:3a:71:
                    33:f8:db:ea:80:f3:bf:53:7d:ab:54:01:cc:fb:2e:
                    92:12:75:0d:03:62:f7:6b:73:95:81:fb:c4:3b:b2:
                    58:68:26:ca:c7:67:17:f2:63:82:3d:77:50:d3:c9:
                    11:35:42:ed:1a:40:35:0f:62:80:52:e3:a2:5f:50:
                    ab:31:a4:e6:a2:ee:e8:50:f6:41:f8:64:a6:ab:74:
                    09:f3:95:b5:b7:81:ff:1b:14:00:71:65:24:bd:54:
                    0f:e0:a9:b7:6e:74:a7:ae:76:14:bb:0a:d7:38:30:
                    10:2b:85:39:8c:e6:2a:a0:82:aa:bb:99:1f:0e:2b:
                    9b:af:32:e1:f7:96:75:c9:e6:f0:f2:0e:8f:d8:8a:
                    34:ca:7b:68:0f:79:b3:a9:46:81:c0:2e:85:d3:a3:
                    5d:bf:61:d1:de:de:5e:d9:eb:fb:f7:ba:2a:72:28:
                    11:d9:1f:bb:b5:ba:eb:97:9c:14:af:49:f0:a0:b5:
                    17:35:d6:18:66:4b:c5:cd:c9:9b:11:c1:d9:e3:ea:
                    30:64:9b:ad:ba:1a:4f:fb:91:48:ec:dd:52:61:3c:
                    10:f4:3e:8e:ce:0b:06:66:42:87:63:b2:ac:9b:b9:
                    a4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:16:BB:F4:F4:6F:D4:52:6B:38:23:5E:32:25:A9:2A:AF:78:45:B9
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/JRa79PRv1FJrOCNeMiWpKq94Rbk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.231.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         97:f0:1c:84:24:cf:65:15:b3:99:78:60:05:cd:21:46:b2:da:
         fd:bf:ff:29:8a:8b:2a:62:f3:d4:aa:1d:5e:23:e2:fd:db:1a:
         3d:f4:12:30:d7:8f:a4:0e:6a:e8:07:8b:4d:91:87:56:b7:34:
         cf:d8:bb:76:73:67:80:61:16:fd:e1:f2:ad:ff:d3:9d:46:36:
         aa:ce:6e:3f:fe:bc:70:36:46:df:88:6d:62:d2:8e:38:90:b2:
         2c:ec:1a:57:6d:2c:a3:71:56:89:4f:50:b3:41:7e:b3:cd:2f:
         7c:61:42:bb:b9:d9:67:31:4e:d7:87:5a:4a:42:a2:68:62:00:
         fd:05:d0:d8:a3:ef:48:59:e3:dd:a2:13:24:c2:76:6f:e6:9d:
         dd:9e:60:33:38:0c:a5:34:8e:a4:00:e3:61:e1:fb:80:e4:72:
         2a:ff:1e:b6:bc:0f:d2:67:62:8c:3c:f2:f1:fb:0a:89:cc:08:
         3b:ad:7e:2f:e1:45:9a:fb:1d:d0:74:22:2f:82:60:4f:dc:11:
         f9:65:78:09:4d:2d:f9:7e:88:94:8e:ef:99:a9:cb:d1:7e:eb:
         b6:22:c7:c7:cc:ac:2f:68:5b:d3:a0:16:9e:6a:d5:9a:80:f0:
         30:ad:f3:d8:ef:5d:20:55:22:ce:ca:8d:6f:5b:c3:7b:48:b5:
         83:5b:fe:96
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE1
QUNBQzI5OTBCRDhGODY1NUMwQzcyMUJBQ0ZGMDMwQTU5RDFGQzAeFw0yNDA2MzAw
MTI4MzJaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDI1MTZCQkY0RjQ2RkQ0
NTI2QjM4MjM1RTMyMjVBOTJBQUY3ODQ1QjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCruItUOjMFN0ekYYP90YU2zUTpA4jcg8nrmFg6cTP42+qA879T
fatUAcz7LpISdQ0DYvdrc5WB+8Q7slhoJsrHZxfyY4I9d1DTyRE1Qu0aQDUPYoBS
46JfUKsxpOai7uhQ9kH4ZKardAnzlbW3gf8bFABxZSS9VA/gqbdudKeudhS7Ctc4
MBArhTmM5iqggqq7mR8OK5uvMuH3lnXJ5vDyDo/YijTKe2gPebOpRoHALoXTo12/
YdHe3l7Z6/v3uipyKBHZH7u1uuuXnBSvSfCgtRc11hhmS8XNyZsRwdnj6jBkm626
Gk/7kUjs3VJhPBD0Po7OCwZmQodjsqybuaS5AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUJRa79PRv1FJrOCNeMiWpKq94RbkwHwYDVR0jBBgwFoAUClrKwpkL2PhlXAxy
G6z/AwpZ0fwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM1NC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3cFowZncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3
cFowZncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzU0L0pSYTc5UFJ2MUZKck9DTmVNaVdwS3E5NFJiay5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAPS59AwDQYJKoZIhvcNAQELBQADggEBAJfwHIQkz2UVs5l4YAXNIUay2v2/
/ymKiypi89SqHV4j4v3bGj30EjDXj6QOaugHi02Rh1a3NM/Yu3ZzZ4BhFv3h8q3/
051GNqrObj/+vHA2Rt+IbWLSjjiQsizsGldtLKNxVolPULNBfrPNL3xhQru52Wcx
TteHWkpComhiAP0F0Nij70hZ492iEyTCdm/mnd2eYDM4DKU0jqQA42Hh+4Dkcir/
Hra8D9JnYow88vH7ConMCDutfi/hRZr7HdB0Ii+CYE/cEflleAlNLfl+iJSO75mp
y9F+67Yix8fMrC9oW9OgFp5q1ZqA8DCt89jvXSBVIs7KjW9bw3tItYNb/pY=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:31:10 2025 by rpki-client