Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/3AvnyPOFP9NpgF-3fgYPUBbLr9U.roa
File:                     3AvnyPOFP9NpgF-3fgYPUBbLr9U.roa (raw, json)
Hash identifier:          F/0O+E+JS4kAXkN8K4ePZ/hh9EdzvyjedoBpq7zVaFk=
Subject key identifier:   DC:0B:E7:C8:F3:85:3F:D3:69:80:5F:B7:7E:06:0F:50:16:CB:AF:D5
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       9A
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/3AvnyPOFP9NpgF-3fgYPUBbLr9U.roa
Signing time:             Sat 01 Mar 2025 01:32:00 +0000
ROA not before:           Sat 01 Mar 2025 01:32:00 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     4685
IP address blocks:        122.223.192.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar  1 01:32:00 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=DC0BE7C8F3853FD369805FB77E060F5016CBAFD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:40:3d:b3:84:59:2a:16:fa:62:a8:85:ac:9d:
                    a0:ff:d4:98:1b:60:15:21:62:01:cc:c7:b1:58:c1:
                    da:08:e5:be:61:70:4f:35:f2:55:fb:db:d2:d3:fc:
                    fe:52:ba:15:66:33:5d:21:90:71:95:bf:03:0e:d5:
                    32:9b:56:b4:e3:a5:88:4c:58:61:6f:28:c1:8d:cf:
                    4e:3d:33:f0:c3:68:d0:60:1b:48:24:b7:a1:5c:d1:
                    10:6b:07:15:95:cc:e1:a0:8c:67:c3:b6:2f:f2:33:
                    4e:4a:73:a5:a4:12:0a:13:ea:9f:67:39:30:a9:f7:
                    91:e8:36:26:2b:80:84:14:0e:ea:a7:5f:65:ca:f8:
                    4d:30:d3:c3:2a:4a:56:a3:76:61:12:0d:07:6d:45:
                    4d:c5:13:47:4f:78:8d:07:a8:86:c3:ef:7c:94:9a:
                    d4:a5:07:32:ce:63:7c:09:3b:cb:30:b2:89:a7:dc:
                    77:06:0f:30:06:d8:08:b7:4d:a3:b3:0e:fd:af:66:
                    14:02:ff:09:c8:26:4b:1f:54:e6:c8:af:56:5d:d3:
                    86:c5:43:11:da:9f:8a:e5:ba:1a:8b:64:7f:e2:62:
                    ad:25:9f:10:cf:b5:a1:0c:27:b1:da:76:3e:3f:d2:
                    f0:79:ba:bb:46:ea:eb:84:e6:21:32:60:fb:9d:78:
                    e7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:0B:E7:C8:F3:85:3F:D3:69:80:5F:B7:7E:06:0F:50:16:CB:AF:D5
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/3AvnyPOFP9NpgF-3fgYPUBbLr9U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.223.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9d:7a:6e:ca:a2:82:90:92:f8:b2:cc:a4:90:71:56:ef:c7:66:
         f5:82:ca:9d:0b:17:39:65:44:7e:27:83:17:b2:db:7e:b0:e4:
         35:ef:1f:b3:b9:9f:a2:b4:f4:b5:a3:c2:f6:a3:91:97:62:44:
         19:e3:2e:f1:a8:38:12:df:c5:5e:3b:a4:06:f4:d5:6e:29:94:
         8d:14:85:dc:46:4d:a9:1d:95:f7:34:dc:7f:12:29:bb:2d:6b:
         6e:c9:dd:76:c3:95:8c:47:07:ce:71:f0:4f:01:e1:ca:cb:f5:
         e9:06:81:b7:e8:d8:1b:ee:5b:d1:32:2e:df:05:21:e0:72:ee:
         c2:55:f6:bd:33:3c:34:a6:45:28:ed:1e:07:5d:2a:92:67:2b:
         34:a3:a2:0b:62:bb:ab:6c:9c:bb:29:ff:62:06:60:cd:bd:c2:
         60:90:74:fe:21:b9:1e:34:66:42:2e:c5:98:38:1c:2e:3c:c0:
         3a:49:fb:b5:66:5f:b4:00:02:08:db:44:ef:66:91:0b:e3:4f:
         a3:26:6f:a7:63:0c:2f:fa:b6:fb:4a:1c:92:f7:44:4f:62:b6:
         2f:67:1d:c0:7a:38:72:d5:5c:6c:2c:9d:f8:74:bf:52:26:6d:
         4b:e4:bb:54:b5:76:62:05:33:dd:9a:f0:2d:5e:bc:0d:10:99:
         a5:ba:7a:21
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgICAJowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUJF
M0FCMEY4REIyNjVBQkIyMjg3RTc1MTUxRTdGNUE5M0IyQzczNjAeFw0yNTAzMDEw
MTMyMDBaFw0yNjAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKERDMEJFN0M4RjM4NTNG
RDM2OTgwNUZCNzdFMDYwRjUwMTZDQkFGRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDcQD2zhFkqFvpiqIWsnaD/1JgbYBUhYgHMx7FYwdoI5b5hcE81
8lX729LT/P5SuhVmM10hkHGVvwMO1TKbVrTjpYhMWGFvKMGNz049M/DDaNBgG0gk
t6Fc0RBrBxWVzOGgjGfDti/yM05Kc6WkEgoT6p9nOTCp95HoNiYrgIQUDuqnX2XK
+E0w08MqSlajdmESDQdtRU3FE0dPeI0HqIbD73yUmtSlBzLOY3wJO8swsomn3HcG
DzAG2Ai3TaOzDv2vZhQC/wnIJksfVObIr1Zd04bFQxHan4rluhqLZH/iYq0lnxDP
taEMJ7Hadj4/0vB5urtG6uuE5iEyYPudeOdpAgMBAAGjggIiMIICHjAdBgNVHQ4E
FgQU3AvnyPOFP9NpgF+3fgYPUBbLr9UwHwYDVR0jBBgwFoAUG+OrD42yZauyKH51
FR5/WpOyxzYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzUwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BPeXh6WS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BP
eXh6WS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81MC8zQXZueVBPRlA5TnBnRi0zZmdZUFVCYkxyOVUucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQFet/AMA0GCSqGSIb3DQEBCwUAA4IBAQCdem7KooKQkviyzKSQcVbvx2b1gsqd
Cxc5ZUR+J4MXstt+sOQ17x+zuZ+itPS1o8L2o5GXYkQZ4y7xqDgS38VeO6QG9NVu
KZSNFIXcRk2pHZX3NNx/Eim7LWtuyd12w5WMRwfOcfBPAeHKy/XpBoG36Ngb7lvR
Mi7fBSHgcu7CVfa9Mzw0pkUo7R4HXSqSZys0o6ILYrurbJy7Kf9iBmDNvcJgkHT+
IbkeNGZCLsWYOBwuPMA6Sfu1Zl+0AAII20TvZpEL40+jJm+nYwwv+rb7ShyS90RP
YrYvZx3Aejhy1VxsLJ34dL9SJm1L5LtUtXZiBTPdmvAtXrwNEJmlunoh
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:22:48 2025 by rpki-client