Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/jHa8e6AlPtpb9qH4Yp-OvV5yVWo.roa
File:                     jHa8e6AlPtpb9qH4Yp-OvV5yVWo.roa (raw, json)
Hash identifier:          e95HEPfUqBdSQPo5lVq9duUd1qwdBz9txdpMTtY35Zo=
Subject key identifier:   8C:76:BC:7B:A0:25:3E:DA:5B:F6:A1:F8:62:9F:8E:BD:5E:72:55:6A
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       5D
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/jHa8e6AlPtpb9qH4Yp-OvV5yVWo.roa
Signing time:             Fri 22 Jul 2022 04:02:54 +0000
ROA not before:           Fri 22 Jul 2022 04:02:54 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        27.135.128.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 04:02:54 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=8C76BC7BA0253EDA5BF6A1F8629F8EBD5E72556A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ec:62:6b:be:a4:47:53:6c:f9:00:1a:3f:7e:
                    27:81:d2:6b:cc:63:01:fe:86:72:74:af:72:fe:96:
                    ff:ea:34:d6:66:c3:04:d6:db:cb:05:59:ad:75:5d:
                    c2:87:d3:20:59:be:26:c6:86:df:00:6a:8d:16:fd:
                    3e:62:a7:ba:2d:b1:03:95:09:be:5d:e5:ee:45:a0:
                    69:b8:9b:e2:0b:8a:1a:18:e1:70:63:03:90:ca:22:
                    6d:25:fd:a3:69:c1:a6:59:37:b6:16:28:15:e7:da:
                    6c:76:3c:0b:33:a2:54:a5:10:35:92:cf:3b:2f:4e:
                    1e:a9:fc:64:60:73:d9:4a:26:da:21:f8:91:cc:1e:
                    fd:b7:57:9b:d2:92:b9:89:e6:41:70:29:d1:e5:8b:
                    e2:5e:86:7a:26:70:ed:51:ab:0c:12:15:67:53:97:
                    ab:02:33:dd:d5:ca:61:90:99:55:80:70:53:45:0b:
                    3c:a5:58:62:af:2f:6b:a8:5e:00:07:4c:bd:4b:ad:
                    39:16:43:c5:bf:c8:b2:4f:ec:39:da:e1:34:ef:da:
                    f9:ba:ca:12:f8:06:af:60:4e:b9:c9:fd:99:6c:1d:
                    4e:cb:57:f2:4e:47:30:21:c1:a7:57:96:21:5d:24:
                    77:37:59:cc:49:1e:a2:41:d0:4a:a3:d0:69:42:93:
                    31:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:76:BC:7B:A0:25:3E:DA:5B:F6:A1:F8:62:9F:8E:BD:5E:72:55:6A
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/jHa8e6AlPtpb9qH4Yp-OvV5yVWo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.135.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         45:34:d0:b5:be:78:84:9e:92:2a:13:a6:68:69:d8:2a:3f:40:
         a6:e8:b1:54:97:e7:fb:44:5d:fc:69:fa:46:74:f2:cd:fa:77:
         63:8d:3b:0c:4a:7f:38:32:04:91:1d:8e:a5:d2:f4:5e:1a:66:
         97:02:5c:1b:9d:d1:d3:7f:4d:a3:2a:b8:2e:49:13:fc:3b:d1:
         07:4c:86:2c:6d:dd:59:1c:ca:58:ce:d1:3a:f8:b6:10:42:98:
         ae:c2:30:5c:ea:71:fd:ac:58:b0:09:8d:db:35:33:a8:a1:6d:
         4e:83:01:57:05:f4:0c:83:e4:0e:e1:0f:f6:12:d3:12:0a:ee:
         71:fa:e1:53:ae:52:2f:6a:33:34:b3:70:d8:bd:e3:41:b8:0b:
         29:1e:91:17:f2:d5:69:7c:f5:d2:e8:04:cc:0e:bc:04:71:35:
         61:7d:1e:7b:83:5b:61:77:8e:3d:11:00:85:f5:14:5e:5d:80:
         9f:07:ff:aa:9a:58:8e:18:cc:24:c1:fe:78:a6:41:2a:0f:e9:
         68:dc:75:d9:65:f6:33:fc:df:59:74:cd:5a:f8:00:f5:86:78:
         2c:15:b2:43:b5:84:30:e9:2a:43:6b:4a:2e:18:4e:79:28:ff:
         b0:27:f8:df:c6:e9:3c:dd:d9:19:9f:21:b8:44:34:d0:17:d5:
         5e:41:a0:06
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBXTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwRDcx
MjVBRTRDRUFFMTMzNUZFNUQ0MjlBQTAzMENFOTA3MERGMTlDMB4XDTIyMDcyMjA0
MDI1NFoXDTIzMDcyMTA0MDcxM1owMzExMC8GA1UEAxMoOEM3NkJDN0JBMDI1M0VE
QTVCRjZBMUY4NjI5RjhFQkQ1RTcyNTU2QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANDsYmu+pEdTbPkAGj9+J4HSa8xjAf6GcnSvcv6W/+o01mbDBNbb
ywVZrXVdwofTIFm+JsaG3wBqjRb9PmKnui2xA5UJvl3l7kWgabib4guKGhjhcGMD
kMoibSX9o2nBplk3thYoFefabHY8CzOiVKUQNZLPOy9OHqn8ZGBz2Uom2iH4kcwe
/bdXm9KSuYnmQXAp0eWL4l6GeiZw7VGrDBIVZ1OXqwIz3dXKYZCZVYBwU0ULPKVY
Yq8va6heAAdMvUutORZDxb/Isk/sOdrhNO/a+brKEvgGr2BOucn9mWwdTstX8k5H
MCHBp1eWIV0kdzdZzEkeokHQSqPQaUKTMZUCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSMdrx7oCU+2lv2ofhin469XnJVajAfBgNVHSMEGDAWgBQNcSWuTOrhM1/l1Cmq
AwzpBw3xnDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzk0L0RYRWxya3pxNFROZjVkUXBxZ01NNlFjTjhady5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0RYRWxya3pxNFROZjVkUXBxZ01NNlFj
Tjhady5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zOTQvakhhOGU2QWxQdHBiOXFINFlwLU92VjV5VldvLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBxuHgDANBgkqhkiG9w0BAQsFAAOCAQEARTTQtb54hJ6SKhOmaGnYKj9Apuix
VJfn+0Rd/Gn6RnTyzfp3Y407DEp/ODIEkR2OpdL0XhpmlwJcG53R039Noyq4LkkT
/DvRB0yGLG3dWRzKWM7ROvi2EEKYrsIwXOpx/axYsAmN2zUzqKFtToMBVwX0DIPk
DuEP9hLTEgrucfrhU65SL2ozNLNw2L3jQbgLKR6RF/LVaXz10ugEzA68BHE1YX0e
e4NbYXeOPREAhfUUXl2Anwf/qppYjhjMJMH+eKZBKg/paNx12WX2M/zfWXTNWvgA
9YZ4LBWyQ7WEMOkqQ2tKLhhOeSj/sCf438bpPN3ZGZ8huEQ00BfVXkGgBg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:20 2025 by rpki-client