Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/N1rm-zfoWK6MlE_jwFWM0HdXbNU.roa
File:                     N1rm-zfoWK6MlE_jwFWM0HdXbNU.roa (raw, json)
Hash identifier:          AFUK1f2H94v3yTtd4Sc/JU8AgGsSitw8T2VaZVw20MU=
Subject key identifier:   37:5A:E6:FB:37:E8:58:AE:8C:94:4F:E3:C0:55:8C:D0:77:57:6C:D5
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       01B4
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/N1rm-zfoWK6MlE_jwFWM0HdXbNU.roa
Signing time:             Fri 07 Jul 2023 04:14:37 +0000
ROA not before:           Fri 07 Jul 2023 04:14:37 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        175.103.184.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 436 (0x1b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:14:37 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=375AE6FB37E858AE8C944FE3C0558CD077576CD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:29:c6:f4:3c:2b:01:71:27:4b:c7:a3:51:cd:
                    67:e6:2e:01:c3:6f:4c:f2:6c:2a:2e:fd:f4:50:e1:
                    71:97:ae:73:e0:44:f5:bf:76:e3:f1:2c:dd:56:7d:
                    d1:ee:82:c1:91:97:bf:66:3f:ef:3c:c3:75:38:f6:
                    73:ca:37:f8:29:e3:93:a3:02:7b:1a:08:43:24:d5:
                    ed:a6:12:5b:40:14:3e:c8:45:e9:10:8b:fd:e2:84:
                    41:80:be:8a:c7:4c:16:8e:1d:3a:27:bd:03:93:13:
                    d2:23:1b:64:f2:8a:ba:5a:2e:1e:ad:27:ae:80:15:
                    82:89:e3:7a:49:e7:1d:30:af:33:26:c6:a2:70:f8:
                    73:cb:97:8a:62:d5:7f:58:e9:38:3d:de:6e:c5:bb:
                    19:41:62:0d:76:b5:16:16:14:72:2b:ea:a2:23:cc:
                    32:45:8e:e4:d0:ce:06:03:d0:43:02:0a:f3:58:ed:
                    60:00:06:65:df:72:1f:8a:c8:ed:94:c4:9d:72:7d:
                    03:f4:5b:0a:31:03:a2:53:d9:5b:58:a8:a6:b5:65:
                    c7:fd:1e:ff:cd:3d:e5:8a:86:f2:e6:62:a6:15:fa:
                    1c:fe:2c:29:b8:7b:ae:cc:ef:47:c9:79:e0:e5:d4:
                    f6:f0:24:b8:4c:54:9a:65:06:a0:61:02:03:a6:18:
                    3d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:5A:E6:FB:37:E8:58:AE:8C:94:4F:E3:C0:55:8C:D0:77:57:6C:D5
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/N1rm-zfoWK6MlE_jwFWM0HdXbNU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.103.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1a:63:36:8b:fa:14:f3:59:cf:6a:ae:7c:62:6f:75:de:97:fe:
         f3:35:8b:04:36:50:5d:bd:07:5b:47:09:22:a0:26:ff:9a:b2:
         59:65:be:f3:62:d5:c8:c1:08:c4:4a:f3:cc:27:ce:22:c0:98:
         13:2f:b7:be:3f:dd:2d:49:06:e6:8a:30:1a:f0:37:c7:49:bb:
         39:33:3f:25:65:a0:6c:13:48:a6:1f:7a:c9:b6:c0:eb:9e:04:
         72:e9:26:0c:94:f2:4c:1c:40:0c:37:9f:a5:e6:ca:2e:64:07:
         41:6c:39:bf:90:94:68:38:ce:68:37:17:72:42:09:ca:29:50:
         00:ac:e5:c5:b7:06:f5:86:47:fe:c9:d5:c1:a5:b4:5b:87:59:
         0d:5b:b7:c6:62:7b:95:37:4a:70:ff:94:fa:27:91:87:eb:fe:
         69:29:b5:7e:33:d2:3e:9d:39:54:f2:b5:fb:c6:c9:8a:5f:b8:
         f9:13:3f:3b:52:72:75:af:bf:89:5c:66:8f:69:5f:c5:09:1b:
         df:74:5e:7f:0b:ad:16:54:2e:e9:6b:23:1e:a4:c3:d7:ae:b0:
         f0:37:7b:78:db:f5:39:b0:67:87:19:c5:44:8e:28:93:be:7d:
         96:1e:3d:cf:68:2f:54:e5:8a:c0:97:f1:0d:4a:db:cf:f8:5d:
         15:2a:a0:0d
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMzA3MDcw
NDE0MzdaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDM3NUFFNkZCMzdFODU4
QUU4Qzk0NEZFM0MwNTU4Q0QwNzc1NzZDRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSKcb0PCsBcSdLx6NRzWfmLgHDb0zybCou/fRQ4XGXrnPgRPW/
duPxLN1WfdHugsGRl79mP+88w3U49nPKN/gp45OjAnsaCEMk1e2mEltAFD7IRekQ
i/3ihEGAvorHTBaOHTonvQOTE9IjG2TyirpaLh6tJ66AFYKJ43pJ5x0wrzMmxqJw
+HPLl4pi1X9Y6Tg93m7FuxlBYg12tRYWFHIr6qIjzDJFjuTQzgYD0EMCCvNY7WAA
BmXfch+KyO2UxJ1yfQP0WwoxA6JT2VtYqKa1Zcf9Hv/NPeWKhvLmYqYV+hz+LCm4
e67M70fJeeDl1PbwJLhMVJplBqBhAgOmGD11AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUN1rm+zfoWK6MlE/jwFWM0HdXbNUwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L04xcm0temZvV0s2TWxFX2p3RldNMEhkWGJOVS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAOvZ7gwDQYJKoZIhvcNAQELBQADggEBABpjNov6FPNZz2qufGJvdd6X/vM1
iwQ2UF29B1tHCSKgJv+aslllvvNi1cjBCMRK88wnziLAmBMvt74/3S1JBuaKMBrw
N8dJuzkzPyVloGwTSKYfesm2wOueBHLpJgyU8kwcQAw3n6Xmyi5kB0FsOb+QlGg4
zmg3F3JCCcopUACs5cW3BvWGR/7J1cGltFuHWQ1bt8Zie5U3SnD/lPonkYfr/mkp
tX4z0j6dOVTytfvGyYpfuPkTPztScnWvv4lcZo9pX8UJG990Xn8LrRZULulrIx6k
w9eusPA3e3jb9TmwZ4cZxUSOKJO+fZYePc9oL1TlisCX8Q1K28/4XRUqoA0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:32 2025 by rpki-client