Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/512/suLd3Eh2tOuo8XrC6P500D24q68.roa
File:                     suLd3Eh2tOuo8XrC6P500D24q68.roa (raw, json)
Hash identifier:          TAj1+KcjnkOJVb//Ju4668pSvX6vr6GebqFKezl7x54=
Subject key identifier:   B2:E2:DD:DC:48:76:B4:EB:A8:F1:7A:C2:E8:FE:74:D0:3D:B8:AB:AF
Certificate issuer:       /CN=BAED0E35A7B58DAC2159F7F1CD740A54B9E8B407
Certificate serial:       04
Authority key identifier: BA:ED:0E:35:A7:B5:8D:AC:21:59:F7:F1:CD:74:0A:54:B9:E8:B4:07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uu0ONae1jawhWffxzXQKVLnotAc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/suLd3Eh2tOuo8XrC6P500D24q68.roa
Signing time:             Tue 11 Oct 2022 04:37:03 +0000
ROA not before:           Tue 11 Oct 2022 04:37:03 +0000
ROA not after:            Wed 11 Oct 2023 04:31:36 +0000
asID:                     55376
IP address blocks:        202.223.24.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAED0E35A7B58DAC2159F7F1CD740A54B9E8B407
        Validity
            Not Before: Oct 11 04:37:03 2022 GMT
            Not After : Oct 11 04:31:36 2023 GMT
        Subject: CN=B2E2DDDC4876B4EBA8F17AC2E8FE74D03DB8ABAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:40:c2:2a:15:30:bd:3a:b3:7a:dc:1c:f0:8a:
                    ca:c8:60:8f:7c:cc:e7:3a:43:52:a1:8c:f2:bd:25:
                    a8:22:07:75:e0:22:be:d9:9e:fa:c6:73:18:c6:a9:
                    39:b3:57:f9:47:7a:e2:0e:c8:04:b8:9c:1e:df:ca:
                    0d:25:f3:09:90:ba:4d:ca:d4:18:fe:13:28:29:34:
                    0e:b3:27:9d:a4:b9:34:3e:61:3e:27:46:a1:82:98:
                    5e:78:c4:97:9c:09:3f:df:89:31:42:36:ec:37:50:
                    ab:3e:b9:ea:04:1e:4c:77:67:a6:e9:a0:96:d1:8e:
                    c8:37:79:a3:38:de:51:64:e3:cc:6d:df:2b:c8:e4:
                    c5:9b:76:f4:1a:be:6f:b0:3d:57:40:36:3a:fa:5f:
                    a1:e2:9b:67:fb:50:2b:fb:59:0f:b4:2a:d2:77:1f:
                    86:c2:87:db:cb:d3:29:44:88:e4:bd:79:14:2b:80:
                    b1:06:6e:d4:e2:f0:b9:5b:e7:62:47:01:95:8b:86:
                    fb:b0:38:1a:2d:c6:1f:5b:f8:65:f8:9e:fc:f4:63:
                    ec:35:99:f4:a4:d6:87:50:c9:0c:3a:15:ea:43:a3:
                    be:47:32:7f:bf:e2:db:de:2e:f2:85:7b:95:0b:97:
                    22:42:c1:92:96:32:21:8d:06:8e:d7:78:41:30:d9:
                    b7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E2:DD:DC:48:76:B4:EB:A8:F1:7A:C2:E8:FE:74:D0:3D:B8:AB:AF
            X509v3 Authority Key Identifier:
                keyid:BA:ED:0E:35:A7:B5:8D:AC:21:59:F7:F1:CD:74:0A:54:B9:E8:B4:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/uu0ONae1jawhWffxzXQKVLnotAc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uu0ONae1jawhWffxzXQKVLnotAc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/suLd3Eh2tOuo8XrC6P500D24q68.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.223.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:81:9a:bd:74:1f:42:97:0d:44:32:b3:51:b7:4c:b4:2e:c7:
         95:4f:92:3f:fe:db:40:7b:32:64:06:24:a6:cd:19:86:b5:cd:
         69:8d:25:7b:cc:da:09:ec:8e:7c:76:f0:ac:85:89:c4:3a:b0:
         e2:5c:4b:3a:7f:3d:a9:b2:f1:54:db:a5:69:ae:49:a5:43:86:
         47:2f:09:72:51:fa:ba:38:ad:eb:03:bf:49:f4:f5:12:db:d7:
         c2:35:d1:37:44:a7:e8:e0:05:1a:3e:4d:92:7e:b5:98:77:e1:
         ed:27:96:45:e4:5b:3a:c6:c3:0c:34:02:b7:e9:28:f5:70:7e:
         c8:a5:9d:4a:ca:da:4e:dc:9f:10:f1:6d:2e:b8:69:be:d6:a4:
         02:a7:cf:95:a7:53:9e:83:6f:b9:85:8e:fd:63:a7:df:b6:96:
         8f:75:f5:91:e4:aa:b4:cf:3e:8c:d4:1b:41:2e:91:c8:6c:7a:
         6d:87:7e:ce:d2:b9:cd:0d:a1:b5:db:88:26:95:31:86:d3:f4:
         d2:74:9b:71:86:5d:ec:e5:c4:a6:dd:65:7f:20:44:7e:4c:03:
         63:cd:ca:17:e4:e0:a3:6e:37:7a:fc:e9:0f:19:21:4c:80:3d:
         d0:a7:cf:6d:b6:0e:0d:a7:e6:41:9e:b7:07:ef:11:d8:58:6f:
         ae:d0:11:82
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCQUVE
MEUzNUE3QjU4REFDMjE1OUY3RjFDRDc0MEE1NEI5RThCNDA3MB4XDTIyMTAxMTA0
MzcwM1oXDTIzMTAxMTA0MzEzNlowMzExMC8GA1UEAxMoQjJFMkREREM0ODc2QjRF
QkE4RjE3QUMyRThGRTc0RDAzREI4QUJBRjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK9AwioVML06s3rcHPCKyshgj3zM5zpDUqGM8r0lqCIHdeAivtme
+sZzGMapObNX+Ud64g7IBLicHt/KDSXzCZC6TcrUGP4TKCk0DrMnnaS5ND5hPidG
oYKYXnjEl5wJP9+JMUI27DdQqz656gQeTHdnpumgltGOyDd5ozjeUWTjzG3fK8jk
xZt29Bq+b7A9V0A2OvpfoeKbZ/tQK/tZD7Qq0ncfhsKH28vTKUSI5L15FCuAsQZu
1OLwuVvnYkcBlYuG+7A4Gi3GH1v4Zfie/PRj7DWZ9KTWh1DJDDoV6kOjvkcyf7/i
294u8oV7lQuXIkLBkpYyIY0Gjtd4QTDZt0UCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSy4t3cSHa066jxesLo/nTQPbirrzAfBgNVHSMEGDAWgBS67Q41p7WNrCFZ9/HN
dApUuei0BzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTEyL3V1ME9OYWUxamF3aFdmZnh6WFFLVkxub3RBYy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3V1ME9OYWUxamF3aFdmZnh6WFFLVkxu
b3RBYy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81MTIvc3VMZDNFaDJ0T3VvOFhyQzZQNTAwRDI0cTY4LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAsrfGDANBgkqhkiG9w0BAQsFAAOCAQEArYGavXQfQpcNRDKzUbdMtC7HlU+S
P/7bQHsyZAYkps0ZhrXNaY0le8zaCeyOfHbwrIWJxDqw4lxLOn89qbLxVNulaa5J
pUOGRy8JclH6ujit6wO/SfT1EtvXwjXRN0Sn6OAFGj5Nkn61mHfh7SeWReRbOsbD
DDQCt+ko9XB+yKWdSsraTtyfEPFtLrhpvtakAqfPladTnoNvuYWO/WOn37aWj3X1
keSqtM8+jNQbQS6RyGx6bYd+ztK5zQ2htduIJpUxhtP00nSbcYZd7OXEpt1lfyBE
fkwDY83KF+Tgo243evzpDxkhTIA90KfPbbYODafmQZ63B+8R2FhvrtARgg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:37:53 2025 by rpki-client