Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/5aqpzlMsQ3g0_spZEq0VmO5bI94.roa
File:                     5aqpzlMsQ3g0_spZEq0VmO5bI94.roa (raw, json)
Hash identifier:          +i0tmWHVtuewiQei+CoV/JmRs3Q1Fv4cvWu0HiUgyZo=
Subject key identifier:   E5:AA:A9:CE:53:2C:43:78:34:FE:CA:59:12:AD:15:98:EE:5B:23:DE
Certificate issuer:       /CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5
Certificate serial:       5B
Authority key identifier: 1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/5aqpzlMsQ3g0_spZEq0VmO5bI94.roa
Signing time:             Sat 30 Nov 2024 01:28:13 +0000
ROA not before:           Sat 30 Nov 2024 01:28:13 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     55900
IP address blocks:        218.223.128.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5
        Validity
            Not Before: Nov 30 01:28:13 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=E5AAA9CE532C437834FECA5912AD1598EE5B23DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:43:c9:ec:7d:f5:83:3e:b3:ed:7d:13:9b:d1:
                    d9:08:bd:c5:71:0c:cf:29:44:7c:10:3b:c7:8e:a9:
                    3e:b2:ff:c9:94:ea:1b:35:36:ae:9b:88:00:40:b6:
                    b6:1f:ae:6b:38:73:d4:16:b4:ab:58:da:e2:58:4f:
                    03:ff:8a:0c:4f:d8:54:5a:35:65:2f:4e:c6:05:0c:
                    d9:a9:e7:01:0c:92:f3:41:4c:7d:20:8a:34:6a:e5:
                    4d:b8:80:9d:82:ee:b7:bd:65:af:b6:23:09:9e:55:
                    14:49:32:39:aa:47:25:db:2c:31:3a:df:7c:d5:66:
                    72:78:48:8a:8d:30:35:ee:d7:2d:a7:75:27:46:c2:
                    d9:09:4c:ec:bd:59:7e:bd:79:0f:dd:e2:82:ba:5a:
                    46:fb:a1:47:29:f9:0d:05:42:76:57:db:17:6c:32:
                    c8:41:16:29:21:89:ab:80:8c:e6:60:75:2e:57:44:
                    7f:1e:79:77:eb:57:f5:a0:09:9d:76:d9:bd:1b:cf:
                    f4:40:bd:67:49:b7:f5:c7:a7:32:9a:cb:74:e7:19:
                    52:46:f0:30:36:1e:24:d9:12:8a:09:e3:29:03:ad:
                    c1:05:34:b7:c1:f1:ba:cb:a8:fd:ed:6b:c5:70:32:
                    13:08:d5:cc:83:99:06:a9:80:b7:65:cb:38:0d:e9:
                    25:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:AA:A9:CE:53:2C:43:78:34:FE:CA:59:12:AD:15:98:EE:5B:23:DE
            X509v3 Authority Key Identifier:
                keyid:1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/5aqpzlMsQ3g0_spZEq0VmO5bI94.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.223.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:77:a8:7b:fb:11:ff:65:de:ec:00:f4:4d:10:bd:29:a4:96:
         b8:20:6d:57:64:c0:f3:e0:7c:c8:9c:68:8e:e1:5a:46:5e:95:
         08:df:49:b9:fd:69:cc:8e:aa:14:4a:f9:94:aa:22:49:5e:79:
         16:aa:ce:59:86:58:9d:49:16:25:e7:77:71:df:11:9c:cd:a8:
         06:9a:fb:6f:f8:47:4c:a7:34:2c:cd:95:fb:71:64:29:66:30:
         c9:f6:1e:c6:11:40:ef:58:bc:26:7b:d5:4d:05:a4:50:d6:51:
         7a:da:08:87:3e:e0:83:16:51:f7:a8:ed:66:63:44:a4:45:cb:
         8f:e7:b1:3b:7c:26:2c:b8:90:ec:de:c8:77:5b:32:d7:b4:7b:
         53:de:24:13:d2:ae:35:bb:c7:54:29:2f:5c:8e:5e:b4:60:0c:
         47:47:b1:37:d1:87:69:50:a6:3c:d6:75:64:47:8f:11:1d:48:
         63:7f:49:8b:85:1f:fa:1c:c3:f1:28:b1:ff:28:9c:e1:d1:6a:
         a0:ff:f3:c0:c8:34:25:25:80:69:c4:46:ef:d0:1c:cb:a8:bb:
         83:5c:1d:42:cb:0f:06:7c:fa:74:da:04:92:eb:d4:39:1c:3e:
         63:3e:8b:61:1c:ff:50:18:f2:ae:09:d0:ab:16:32:24:c8:f0:
         e2:d1:55:93
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBWzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQjIw
QTA2QTIxMjA1ODIwQjI4RkQwNkNFMEE4NEYwM0ZDREFFQkM1MB4XDTI0MTEzMDAx
MjgxM1oXDTI1MTExNTAxMzAwM1owMzExMC8GA1UEAxMoRTVBQUE5Q0U1MzJDNDM3
ODM0RkVDQTU5MTJBRDE1OThFRTVCMjNERTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANtDyex99YM+s+19E5vR2Qi9xXEMzylEfBA7x46pPrL/yZTqGzU2
rpuIAEC2th+uazhz1Ba0q1ja4lhPA/+KDE/YVFo1ZS9OxgUM2annAQyS80FMfSCK
NGrlTbiAnYLut71lr7YjCZ5VFEkyOapHJdssMTrffNVmcnhIio0wNe7XLad1J0bC
2QlM7L1Zfr15D93igrpaRvuhRyn5DQVCdlfbF2wyyEEWKSGJq4CM5mB1LldEfx55
d+tX9aAJnXbZvRvP9EC9Z0m39cenMprLdOcZUkbwMDYeJNkSignjKQOtwQU0t8Hx
usuo/e1rxXAyEwjVzIOZBqmAt2XLOA3pJccCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTlqqnOUyxDeDT+ylkSrRWY7lsj3jAfBgNVHSMEGDAWgBQbIKBqISBYILKP0Gzg
qE8D/NrrxTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTMwL0d5Q2dhaUVnV0NDeWo5QnM0S2hQQV96YTY4VS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0d5Q2dhaUVnV0NDeWo5QnM0S2hQQV96
YTY4VS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81MzAvNWFxcHpsTXNRM2cwX3NwWkVxMFZtTzViSTk0LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAtrfgDANBgkqhkiG9w0BAQsFAAOCAQEAXXeoe/sR/2Xe7AD0TRC9KaSWuCBt
V2TA8+B8yJxojuFaRl6VCN9Juf1pzI6qFEr5lKoiSV55FqrOWYZYnUkWJed3cd8R
nM2oBpr7b/hHTKc0LM2V+3FkKWYwyfYexhFA71i8JnvVTQWkUNZRetoIhz7ggxZR
96jtZmNEpEXLj+exO3wmLLiQ7N7Id1sy17R7U94kE9KuNbvHVCkvXI5etGAMR0ex
N9GHaVCmPNZ1ZEePER1IY39Ji4Uf+hzD8Six/yic4dFqoP/zwMg0JSWAacRG79Ac
y6i7g1wdQssPBnz6dNoEkuvUORw+Yz6LYRz/UBjyrgnQqxYyJMjw4tFVkw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:47:56 2025 by rpki-client