Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/kA8djdqq7qU7Am1C1AeLeHRnvNI.roa
File:                     kA8djdqq7qU7Am1C1AeLeHRnvNI.roa (raw, json)
Hash identifier:          WvbYgwNwh+X1QOjhkFrSCuS73CYWxyexoOTtedAAx/g=
Subject key identifier:   90:0F:1D:8D:DA:AA:EE:A5:3B:02:6D:42:D4:07:8B:78:74:67:BC:D2
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       DF
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/kA8djdqq7qU7Am1C1AeLeHRnvNI.roa
Signing time:             Thu 28 Jul 2022 05:43:46 +0000
ROA not before:           Thu 28 Jul 2022 05:43:46 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        183.181.64.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 28 05:43:46 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=900F1D8DDAAAEEA53B026D42D4078B787467BCD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b4:8f:f9:a2:2f:8d:e7:75:6c:be:db:dd:e7:
                    e4:f6:bd:29:90:47:10:a7:90:04:f1:9b:2a:b0:cd:
                    f3:3b:e5:e3:8d:b0:aa:93:ed:63:e7:28:e8:76:b7:
                    c5:37:79:8c:23:2c:97:dc:da:65:d1:63:0b:a0:bf:
                    89:1b:9b:eb:6c:a9:fa:fa:bd:03:f8:24:ba:a3:64:
                    0c:ff:11:4e:22:f2:9d:31:49:c3:e7:1e:2c:60:6a:
                    10:5a:f1:ec:ce:d3:9e:7f:6e:89:fc:64:4f:16:12:
                    44:fd:7c:47:b8:95:09:d3:fd:75:5e:00:96:ed:95:
                    8b:81:c0:f3:d5:9b:c6:cc:82:a7:58:5c:bd:48:d3:
                    2d:a1:2b:c5:7c:e4:04:ba:62:f3:6d:d5:ee:20:4f:
                    5f:89:49:10:90:27:34:e1:4c:3f:db:e2:28:d0:91:
                    93:dd:4e:58:a3:6f:e8:8b:2f:66:35:5a:27:4f:eb:
                    16:5f:be:d2:31:47:7e:f2:af:cb:e5:0f:1c:12:b1:
                    b4:60:94:b8:40:94:df:6e:e3:60:be:b3:d9:b9:37:
                    3d:ba:f8:3f:c9:83:f2:92:fe:a6:0b:73:96:e3:7e:
                    73:6c:c6:8f:6f:76:49:4d:ee:24:69:d7:88:d1:60:
                    a5:7a:79:57:8c:22:38:b4:84:ec:53:cb:89:3b:aa:
                    63:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:0F:1D:8D:DA:AA:EE:A5:3B:02:6D:42:D4:07:8B:78:74:67:BC:D2
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/kA8djdqq7qU7Am1C1AeLeHRnvNI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9b:96:75:b2:d4:af:cc:b2:38:10:fc:da:12:cc:a7:14:a2:64:
         ee:f2:bb:18:4a:ce:c8:0e:34:c6:c0:72:31:5e:ec:c8:bc:8e:
         82:90:1d:49:36:76:e2:e6:d2:04:c3:c1:73:12:3a:ca:63:08:
         6b:b9:15:f0:09:91:8c:c4:cc:3c:59:fe:db:39:a1:56:fa:46:
         12:60:9d:4f:b5:c5:52:2b:20:02:1e:45:3a:e7:c9:ee:fd:29:
         00:d6:8f:5e:d9:3c:6a:62:60:72:c2:15:da:93:04:c5:85:27:
         16:ce:15:b2:9a:ae:f7:84:f4:5f:bb:81:4c:7d:da:21:2f:71:
         3e:5d:35:ef:f8:63:d2:d1:57:eb:ad:b1:5a:a1:e7:2b:59:14:
         76:83:87:ad:8d:89:b0:d8:9e:ec:9b:84:d5:74:09:84:8c:cd:
         9b:ea:19:4e:85:15:56:99:44:de:32:6a:10:0b:f3:ae:21:61:
         b0:ff:d7:d8:41:83:e0:4b:c3:cc:72:5c:e6:6f:1c:6c:30:00:
         ed:31:74:34:40:9b:2e:a2:c7:a8:9f:85:0e:97:8b:d0:ce:0f:
         07:36:2c:c0:d6:c3:b0:50:a7:3e:58:ac:00:bb:c2:ba:d1:fd:
         04:99:db:88:b7:56:dc:e7:cb:5c:34:39:90:15:f0:5d:0f:34:
         78:6e:6e:d4
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMjA3Mjgw
NTQzNDZaFw0yMzA3MjEwNDA3MTNaMDMxMTAvBgNVBAMTKDkwMEYxRDhEREFBQUVF
QTUzQjAyNkQ0MkQ0MDc4Qjc4NzQ2N0JDRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCTtI/5oi+N53Vsvtvd5+T2vSmQRxCnkATxmyqwzfM75eONsKqT
7WPnKOh2t8U3eYwjLJfc2mXRYwugv4kbm+tsqfr6vQP4JLqjZAz/EU4i8p0xScPn
HixgahBa8ezO055/bon8ZE8WEkT9fEe4lQnT/XVeAJbtlYuBwPPVm8bMgqdYXL1I
0y2hK8V85AS6YvNt1e4gT1+JSRCQJzThTD/b4ijQkZPdTlijb+iLL2Y1WidP6xZf
vtIxR37yr8vlDxwSsbRglLhAlN9u42C+s9m5Nz26+D/Jg/KS/qYLc5bjfnNsxo9v
dklN7iRp14jRYKV6eVeMIji0hOxTy4k7qmOHAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUkA8djdqq7qU7Am1C1AeLeHRnvNIwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L2tBOGRqZHFxN3FVN0FtMUMxQWVMZUhSbnZOSS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAO3tUAwDQYJKoZIhvcNAQELBQADggEBAJuWdbLUr8yyOBD82hLMpxSiZO7y
uxhKzsgONMbAcjFe7Mi8joKQHUk2duLm0gTDwXMSOspjCGu5FfAJkYzEzDxZ/ts5
oVb6RhJgnU+1xVIrIAIeRTrnye79KQDWj17ZPGpiYHLCFdqTBMWFJxbOFbKarveE
9F+7gUx92iEvcT5dNe/4Y9LRV+utsVqh5ytZFHaDh62NibDYnuybhNV0CYSMzZvq
GU6FFVaZRN4yahAL864hYbD/19hBg+BLw8xyXOZvHGwwAO0xdDRAmy6ix6ifhQ6X
i9DODwc2LMDWw7BQpz5YrAC7wrrR/QSZ24i3Vtzny1w0OZAV8F0PNHhubtQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:49 2025 by rpki-client