Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/465/HlSTp7rA7wWp4bEqcfB_791pimQ.roa
File:                     HlSTp7rA7wWp4bEqcfB_791pimQ.roa (raw, json)
Hash identifier:          FuykcMBVHP02K43puKjVIIdPvug9e4xP+sSSCabJiMw=
Subject key identifier:   1E:54:93:A7:BA:C0:EF:05:A9:E1:B1:2A:71:F0:7F:EF:DD:69:8A:64
Certificate issuer:       /CN=47A27188E214C396304497DB571B23F93EBFBDC6
Certificate serial:       5E
Authority key identifier: 47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/HlSTp7rA7wWp4bEqcfB_791pimQ.roa
Signing time:             Sat 30 Nov 2024 01:28:49 +0000
ROA not before:           Sat 30 Nov 2024 01:28:49 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     10011
IP address blocks:        223.27.72.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A27188E214C396304497DB571B23F93EBFBDC6
        Validity
            Not Before: Nov 30 01:28:49 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=1E5493A7BAC0EF05A9E1B12A71F07FEFDD698A64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:83:be:ac:d4:ea:8c:64:c1:8a:2b:23:dc:b3:
                    e8:81:e2:09:9e:83:63:38:e5:8d:44:6c:b1:dd:ab:
                    74:83:a9:2e:cf:81:54:33:f4:4f:c5:8b:7a:8e:4d:
                    3d:e7:4c:e1:5c:cb:ae:44:69:6c:d3:d4:ff:75:53:
                    bd:69:31:67:14:1c:d7:d0:67:f8:5b:ba:31:68:28:
                    de:26:ff:ac:f9:49:c2:74:71:a1:94:dd:cf:59:62:
                    e0:d7:0e:27:45:c7:85:d3:4d:9e:71:ea:5c:c1:6c:
                    da:a7:18:fe:12:37:28:6c:16:6c:a5:57:ec:bd:2c:
                    07:48:63:47:5b:06:03:4e:94:13:82:d3:4a:da:ea:
                    68:85:8b:9a:dd:ab:e8:b7:0a:64:d9:05:a9:74:40:
                    4e:b4:0c:7e:89:c0:56:bd:e6:64:24:f8:2f:24:7c:
                    1a:4a:43:d6:5a:9f:7e:b5:a6:e0:e2:c5:57:aa:5a:
                    b3:b8:19:d4:a5:42:20:35:1e:88:81:f5:e1:04:e6:
                    38:60:45:57:03:ad:d7:b0:b3:72:b6:7b:74:61:2b:
                    94:20:68:cb:6a:db:bd:5f:f5:0b:96:82:2a:d8:3c:
                    9d:aa:ff:dd:2e:17:cd:f8:ac:d1:53:1f:a1:8b:d1:
                    17:94:86:e6:4d:15:ca:76:66:2c:a1:3f:0d:1d:14:
                    b0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:54:93:A7:BA:C0:EF:05:A9:E1:B1:2A:71:F0:7F:EF:DD:69:8A:64
            X509v3 Authority Key Identifier:
                keyid:47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/HlSTp7rA7wWp4bEqcfB_791pimQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.27.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         80:17:39:3a:f0:0f:fa:96:2e:4b:66:0c:b6:f9:73:48:b6:6c:
         86:b8:24:d1:39:ee:3f:0b:ea:68:02:90:ad:00:be:c9:d3:29:
         01:b3:e1:9c:78:20:92:15:2b:12:c4:1a:ee:c9:ed:7c:67:97:
         7e:da:90:d3:21:20:ff:ed:80:3c:36:2c:79:89:28:4f:04:21:
         64:8b:3b:83:67:72:c0:59:95:d0:48:e4:8e:c3:56:46:da:78:
         8e:2d:d9:fe:79:05:ca:27:8f:4a:37:de:75:66:77:5e:7d:28:
         57:70:e5:b8:4c:f5:00:e9:b6:41:01:3f:be:eb:ed:03:a8:1d:
         db:61:2a:a6:7f:5b:ed:f7:82:f3:28:80:aa:6e:62:62:c5:42:
         22:ef:83:00:ce:3a:9a:be:51:98:5d:43:72:67:e5:dd:e6:6f:
         88:18:3c:5b:a5:25:53:3d:41:a3:15:7d:cb:95:d4:c1:8f:a6:
         af:21:30:16:c4:50:73:bc:67:a5:8f:16:e9:04:fa:6b:e1:81:
         f2:de:54:53:65:65:9e:91:1f:ee:38:33:c5:4a:1b:78:a6:c7:
         58:2a:c7:15:85:36:86:e8:e4:40:e3:49:31:70:de:a5:9d:a9:
         f5:00:2c:e3:83:74:45:01:61:3b:7a:d3:76:38:24:1f:d1:cb:
         4b:83:02:78
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBXjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0N0Ey
NzE4OEUyMTRDMzk2MzA0NDk3REI1NzFCMjNGOTNFQkZCREM2MB4XDTI0MTEzMDAx
Mjg0OVoXDTI1MTExNTAxMzAwM1owMzExMC8GA1UEAxMoMUU1NDkzQTdCQUMwRUYw
NUE5RTFCMTJBNzFGMDdGRUZERDY5OEE2NDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMaDvqzU6oxkwYorI9yz6IHiCZ6DYzjljURssd2rdIOpLs+BVDP0
T8WLeo5NPedM4VzLrkRpbNPU/3VTvWkxZxQc19Bn+Fu6MWgo3ib/rPlJwnRxoZTd
z1li4NcOJ0XHhdNNnnHqXMFs2qcY/hI3KGwWbKVX7L0sB0hjR1sGA06UE4LTStrq
aIWLmt2r6LcKZNkFqXRATrQMfonAVr3mZCT4LyR8GkpD1lqffrWm4OLFV6pas7gZ
1KVCIDUeiIH14QTmOGBFVwOt17CzcrZ7dGErlCBoy2rbvV/1C5aCKtg8nar/3S4X
zfis0VMfoYvRF5SG5k0VynZmLKE/DR0UsJ8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQeVJOnusDvBanhsSpx8H/v3WmKZDAfBgNVHSMEGDAWgBRHonGI4hTDljBEl9tX
GyP5Pr+9xjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDY1L1I2SnhpT0lVdzVZd1JKZmJWeHNqLVQ2X3ZjWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1I2SnhpT0lVdzVZd1JKZmJWeHNqLVQ2
X3ZjWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80NjUvSGxTVHA3ckE3d1dwNGJFcWNmQl83OTFwaW1RLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA98bSDANBgkqhkiG9w0BAQsFAAOCAQEAgBc5OvAP+pYuS2YMtvlzSLZshrgk
0TnuPwvqaAKQrQC+ydMpAbPhnHggkhUrEsQa7sntfGeXftqQ0yEg/+2APDYseYko
TwQhZIs7g2dywFmV0EjkjsNWRtp4ji3Z/nkFyiePSjfedWZ3Xn0oV3DluEz1AOm2
QQE/vuvtA6gd22Eqpn9b7feC8yiAqm5iYsVCIu+DAM46mr5RmF1Dcmfl3eZviBg8
W6UlUz1BoxV9y5XUwY+mryEwFsRQc7xnpY8W6QT6a+GB8t5UU2VlnpEf7jgzxUob
eKbHWCrHFYU2hujkQONJMXDepZ2p9QAs44N0RQFhO3rTdjgkH9HLS4MCeA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:00 2025 by rpki-client