Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/3ewmaj6tkeqXq_FpZNz1QBLDUMk.roa
File:                     3ewmaj6tkeqXq_FpZNz1QBLDUMk.roa (raw, json)
Hash identifier:          gudaYwbGZ/J3fobxOwrZY5U7Gj8VLAq0ndw25iIjNyE=
Subject key identifier:   DD:EC:26:6A:3E:AD:91:EA:97:AB:F1:69:64:DC:F5:40:12:C3:50:C9
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       93
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/3ewmaj6tkeqXq_FpZNz1QBLDUMk.roa
Signing time:             Sat 01 Mar 2025 01:31:57 +0000
ROA not before:           Sat 01 Mar 2025 01:31:57 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     4685
IP address blocks:        36.3.192.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar  1 01:31:57 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=DDEC266A3EAD91EA97ABF16964DCF54012C350C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a7:5a:af:68:a1:b0:65:d3:cb:66:34:da:47:
                    7e:48:14:24:5f:a9:dc:44:b8:eb:be:ec:8d:72:94:
                    ef:da:a4:78:50:8f:1a:1f:be:81:41:7d:e9:bc:3d:
                    ae:3e:7c:a8:c7:11:85:00:af:4e:92:32:ae:5b:a4:
                    40:2a:36:90:44:3c:01:f0:78:67:85:8a:77:9c:4d:
                    aa:d9:00:bb:0d:1d:cb:02:28:c4:96:db:a6:75:0e:
                    c9:1b:2e:85:64:10:b5:ca:6e:4f:28:e5:c9:3a:b2:
                    d9:15:b6:26:08:e4:c2:33:38:ea:3b:3d:d3:96:7f:
                    db:0f:77:36:28:a7:3d:a1:5e:75:dd:23:20:03:66:
                    d2:00:19:db:e9:f5:ba:e7:53:c0:d1:7c:92:d2:e9:
                    32:40:c0:4f:c2:bd:74:be:73:9a:07:7f:c3:c2:74:
                    d3:62:23:35:0a:b6:d5:1d:73:9e:45:2f:e5:e6:e0:
                    7d:67:9c:0f:64:e8:1f:f5:b6:f2:4d:8e:c5:23:7c:
                    ca:d0:e7:4c:1f:a1:28:ad:d0:09:2a:3d:b3:8f:ff:
                    61:49:9d:1a:87:b6:a4:1c:7b:f2:c1:29:ae:cf:84:
                    e4:a8:56:c5:0f:f7:20:9a:b3:31:17:2a:7a:c5:b3:
                    41:3c:f1:3e:0c:48:b5:bf:92:72:69:83:b1:35:75:
                    14:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:EC:26:6A:3E:AD:91:EA:97:AB:F1:69:64:DC:F5:40:12:C3:50:C9
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/3ewmaj6tkeqXq_FpZNz1QBLDUMk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.3.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ab:3e:80:34:ab:54:d2:86:7e:fd:5b:59:3d:6c:75:2c:43:d4:
         f9:26:c3:f0:75:8c:3d:9b:56:41:f4:28:ec:2e:7f:88:7b:e3:
         ee:54:89:62:31:f4:c2:28:11:e6:4c:5e:a8:90:e8:15:f5:1a:
         ba:c6:e9:c6:e6:0d:f6:ac:c5:00:94:87:58:14:36:1b:5b:c1:
         20:8d:41:a7:be:fd:b0:84:d5:cc:bb:fa:c5:dd:0f:03:bb:2b:
         cd:ed:2c:e2:ae:26:c8:42:ee:71:25:60:0a:e9:ec:76:77:4f:
         52:4e:c4:cb:bb:cf:be:4e:d6:66:bd:08:f3:e8:fb:35:a4:25:
         57:ac:45:99:62:f1:82:2c:4f:ca:93:2e:34:3f:42:b9:af:42:
         92:91:3c:ac:23:91:eb:4f:fd:b0:3f:aa:7f:2a:dd:e6:2b:17:
         45:97:ba:e4:87:1c:96:3e:64:1b:97:34:3a:da:47:e8:23:1a:
         a2:db:76:6b:c9:37:8a:0b:99:0f:02:bd:05:8d:43:2f:8a:a8:
         b8:48:b5:cb:67:23:21:62:db:cc:42:b3:45:6e:1c:fe:73:19:
         8d:61:31:e3:ca:d3:97:99:f0:5a:b5:01:3e:e4:28:9b:71:44:
         ee:7b:d4:05:e2:17:59:85:95:68:5b:5c:5f:ae:4b:32:40:40:
         f0:ef:59:85
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUJF
M0FCMEY4REIyNjVBQkIyMjg3RTc1MTUxRTdGNUE5M0IyQzczNjAeFw0yNTAzMDEw
MTMxNTdaFw0yNjAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKERERUMyNjZBM0VBRDkx
RUE5N0FCRjE2OTY0RENGNTQwMTJDMzUwQzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvp1qvaKGwZdPLZjTaR35IFCRfqdxEuOu+7I1ylO/apHhQjxof
voFBfem8Pa4+fKjHEYUAr06SMq5bpEAqNpBEPAHweGeFinecTarZALsNHcsCKMSW
26Z1DskbLoVkELXKbk8o5ck6stkVtiYI5MIzOOo7PdOWf9sPdzYopz2hXnXdIyAD
ZtIAGdvp9brnU8DRfJLS6TJAwE/CvXS+c5oHf8PCdNNiIzUKttUdc55FL+Xm4H1n
nA9k6B/1tvJNjsUjfMrQ50wfoSit0AkqPbOP/2FJnRqHtqQce/LBKa7PhOSoVsUP
9yCaszEXKnrFs0E88T4MSLW/knJpg7E1dRTtAgMBAAGjggIiMIICHjAdBgNVHQ4E
FgQU3ewmaj6tkeqXq/FpZNz1QBLDUMkwHwYDVR0jBBgwFoAUG+OrD42yZauyKH51
FR5/WpOyxzYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzUwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BPeXh6WS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BP
eXh6WS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81MC8zZXdtYWo2dGtlcVhxX0ZwWk56MVFCTERVTWsucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQFJAPAMA0GCSqGSIb3DQEBCwUAA4IBAQCrPoA0q1TShn79W1k9bHUsQ9T5JsPw
dYw9m1ZB9CjsLn+Ie+PuVIliMfTCKBHmTF6okOgV9Rq6xunG5g32rMUAlIdYFDYb
W8EgjUGnvv2whNXMu/rF3Q8DuyvN7SziribIQu5xJWAK6ex2d09STsTLu8++TtZm
vQjz6Ps1pCVXrEWZYvGCLE/Kky40P0K5r0KSkTysI5HrT/2wP6p/Kt3mKxdFl7rk
hxyWPmQblzQ62kfoIxqi23ZryTeKC5kPAr0FjUMviqi4SLXLZyMhYtvMQrNFbhz+
cxmNYTHjytOXmfBatQE+5CibcUTue9QF4hdZhZVoW1xfrksyQEDw71mF
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:20:05 2025 by rpki-client