Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/L2PDr-LYWRsJ3guL912InMk1aW0.roa
File:                     L2PDr-LYWRsJ3guL912InMk1aW0.roa (raw, json)
Hash identifier:          YH6fmk+kEki4E7IIUQL0r4MGNPbN37jw6cDCe7aqrEo=
Subject key identifier:   2F:63:C3:AF:E2:D8:59:1B:09:DE:0B:8B:F7:5D:88:9C:C9:35:69:6D
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       9C
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/L2PDr-LYWRsJ3guL912InMk1aW0.roa
Signing time:             Sat 01 Mar 2025 01:32:02 +0000
ROA not before:           Sat 01 Mar 2025 01:32:02 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     4685
IP address blocks:        222.228.32.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar  1 01:32:02 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=2F63C3AFE2D8591B09DE0B8BF75D889CC935696D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6b:7a:53:a3:df:f9:46:5d:f8:33:e0:8e:3f:
                    b5:d0:29:64:e3:44:3e:a1:b2:32:ae:2f:6e:99:3a:
                    5b:f1:aa:1d:c2:99:28:df:0a:3f:db:9e:7d:29:a3:
                    02:18:09:95:6d:9d:c9:dc:5b:b2:80:d0:bc:2e:7d:
                    61:43:4c:bb:9e:39:e8:92:b0:58:9f:6d:70:c7:dd:
                    17:9e:25:ed:fd:60:d5:b7:59:d6:3f:ed:ae:00:81:
                    ec:d0:ae:58:db:56:dc:1d:74:93:a3:89:40:a6:e0:
                    9b:bf:15:e4:ce:81:af:82:b9:10:82:93:04:61:d5:
                    f4:69:10:5a:ea:05:e3:f5:c2:44:67:e0:26:72:65:
                    5a:6d:6e:ee:2d:27:36:0d:33:d2:31:cd:90:0f:d0:
                    83:ed:14:f9:72:7c:40:19:a3:bd:5f:5a:0d:d3:00:
                    a2:ae:44:57:05:83:c1:25:e1:36:33:26:d2:ee:f8:
                    eb:97:42:a2:76:ba:56:28:d4:8b:3d:26:ed:7a:74:
                    4b:e2:0d:60:81:0e:01:8f:6d:56:6a:4f:88:3a:a8:
                    21:a5:a6:3b:57:d3:74:d1:37:bf:8e:69:51:43:4d:
                    25:a8:b8:04:30:97:75:67:44:1e:14:eb:55:23:dc:
                    08:f5:8e:1a:1c:81:43:6d:13:94:07:d5:c4:50:a1:
                    9a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:63:C3:AF:E2:D8:59:1B:09:DE:0B:8B:F7:5D:88:9C:C9:35:69:6D
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/L2PDr-LYWRsJ3guL912InMk1aW0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.228.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0e:3f:de:51:a2:99:46:24:f9:d7:41:6f:5a:79:23:f5:31:a6:
         a2:0d:9c:c2:08:9a:5d:c2:88:7c:87:85:f3:00:f9:30:8f:75:
         cd:4a:68:5e:ec:73:de:ed:86:58:9f:25:55:92:a7:d5:b2:e6:
         f1:12:96:2a:e9:ba:bc:9e:a9:ef:a0:e9:ab:36:a6:70:44:d2:
         58:9f:5b:fe:22:e7:1a:28:b4:fb:12:d2:9b:3b:f8:77:b0:9d:
         9b:d5:3d:3a:9c:5c:97:2b:d9:59:fe:ac:d5:08:1b:5d:55:52:
         45:a5:a6:17:a0:f6:50:3a:35:6d:8e:3d:1d:21:a7:d2:c1:15:
         43:07:0a:a5:66:77:71:9f:59:e4:16:a2:a3:16:01:f5:5d:b1:
         d9:cf:82:8f:64:4a:27:03:22:f7:9f:96:b8:88:a6:29:c6:50:
         c5:9a:9d:b5:7b:98:96:c1:c5:0a:35:2a:65:81:00:e3:f2:95:
         37:d2:13:3d:e0:56:be:e3:79:1b:be:d5:40:0e:d2:68:a7:0f:
         1f:6b:7f:59:b3:c3:01:6f:48:bc:2d:1a:03:e4:87:fa:ee:f3:
         18:8b:d2:20:9c:ab:61:38:b4:ae:53:d6:ab:c1:ae:5a:a9:4f:
         2c:85:fc:1b:64:89:04:94:6f:c7:6e:8c:d2:09:fd:fe:f7:29:
         78:7a:66:05
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUJF
M0FCMEY4REIyNjVBQkIyMjg3RTc1MTUxRTdGNUE5M0IyQzczNjAeFw0yNTAzMDEw
MTMyMDJaFw0yNjAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDJGNjNDM0FGRTJEODU5
MUIwOURFMEI4QkY3NUQ4ODlDQzkzNTY5NkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4a3pTo9/5Rl34M+COP7XQKWTjRD6hsjKuL26ZOlvxqh3CmSjf
Cj/bnn0powIYCZVtncncW7KA0LwufWFDTLueOeiSsFifbXDH3ReeJe39YNW3WdY/
7a4AgezQrljbVtwddJOjiUCm4Ju/FeTOga+CuRCCkwRh1fRpEFrqBeP1wkRn4CZy
ZVptbu4tJzYNM9IxzZAP0IPtFPlyfEAZo71fWg3TAKKuRFcFg8El4TYzJtLu+OuX
QqJ2ulYo1Is9Ju16dEviDWCBDgGPbVZqT4g6qCGlpjtX03TRN7+OaVFDTSWouAQw
l3VnRB4U61Uj3Aj1jhocgUNtE5QH1cRQoZrJAgMBAAGjggIiMIICHjAdBgNVHQ4E
FgQUL2PDr+LYWRsJ3guL912InMk1aW0wHwYDVR0jBBgwFoAUG+OrD42yZauyKH51
FR5/WpOyxzYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzUwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BPeXh6WS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BP
eXh6WS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81MC9MMlBEci1MWVdSc0ozZ3VMOTEySW5NazFhVzAucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQF3uQgMA0GCSqGSIb3DQEBCwUAA4IBAQAOP95RoplGJPnXQW9aeSP1MaaiDZzC
CJpdwoh8h4XzAPkwj3XNSmhe7HPe7YZYnyVVkqfVsubxEpYq6bq8nqnvoOmrNqZw
RNJYn1v+IucaKLT7EtKbO/h3sJ2b1T06nFyXK9lZ/qzVCBtdVVJFpaYXoPZQOjVt
jj0dIafSwRVDBwqlZndxn1nkFqKjFgH1XbHZz4KPZEonAyL3n5a4iKYpxlDFmp21
e5iWwcUKNSplgQDj8pU30hM94Fa+43kbvtVADtJopw8fa39Zs8MBb0i8LRoD5If6
7vMYi9IgnKthOLSuU9arwa5aqU8shfwbZIkElG/HbozSCf3+9yl4emYF
-----END CERTIFICATE-----
Generated at Fri Apr 11 15:59:47 2025 by rpki-client