Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/00CRl8SHDmyKHnN0XfqIbfrf8BU.roa
File:                     00CRl8SHDmyKHnN0XfqIbfrf8BU.roa (raw, json)
Hash identifier:          qv/mJWJGod9Q3DZSjDTduxREDy9kmIpIr0jGQVzq8vo=
Subject key identifier:   D3:40:91:97:C4:87:0E:6C:8A:1E:73:74:5D:FA:88:6D:FA:DF:F0:15
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       058C
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/00CRl8SHDmyKHnN0XfqIbfrf8BU.roa
Signing time:             Fri 31 Jan 2025 01:42:07 +0000
ROA not before:           Fri 31 Jan 2025 01:42:07 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     10010
IP address blocks:        219.124.128.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1420 (0x58c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan 31 01:42:07 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=D3409197C4870E6C8A1E73745DFA886DFADFF015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b0:71:be:ee:83:9e:8a:85:ce:17:8d:87:d0:
                    24:2c:25:a9:97:2f:a3:d4:7a:02:8c:48:33:16:d8:
                    2c:f0:9b:fd:7f:e5:85:f2:96:1a:ca:be:03:06:7d:
                    6b:b8:08:1b:2b:98:35:e6:00:4f:63:3e:af:3c:b4:
                    cd:dc:d9:38:b3:3f:0d:1c:ca:dc:3e:ea:31:79:b3:
                    29:c6:08:29:25:a0:02:1c:28:c9:69:6e:47:19:f3:
                    fe:65:78:d6:d0:7b:52:3f:6a:86:27:47:50:17:00:
                    cd:20:cb:44:fc:af:9b:e5:0a:a1:29:11:cd:af:88:
                    78:e9:50:00:77:3f:9f:a7:e4:f9:74:ec:39:ff:3a:
                    dd:27:95:b9:ef:3f:95:1d:fa:14:aa:6a:a1:2b:01:
                    29:c8:12:6b:c4:ca:d8:a7:28:df:4e:bc:e7:58:47:
                    9e:48:e0:8d:da:89:af:14:f2:bd:62:21:37:bd:aa:
                    48:98:62:1c:83:28:fc:ac:06:b4:7f:ad:88:cd:34:
                    d5:9e:a4:87:ab:08:37:a0:67:3e:8c:7a:d8:9f:da:
                    aa:a3:c3:df:9c:96:7c:ba:d9:29:5d:77:43:f4:ea:
                    34:f9:6e:dc:60:11:a2:40:da:3d:0a:de:8c:12:33:
                    cf:ad:92:e8:d7:99:c3:6d:1f:a9:99:44:26:6e:1e:
                    dd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:40:91:97:C4:87:0E:6C:8A:1E:73:74:5D:FA:88:6D:FA:DF:F0:15
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/00CRl8SHDmyKHnN0XfqIbfrf8BU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.124.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c5:df:3e:29:94:1c:36:67:09:ce:e4:28:99:c8:d9:31:38:e7:
         13:02:79:76:34:9d:a7:54:c2:0e:c1:80:16:cf:bc:c3:b0:8b:
         9f:da:c3:37:bf:30:28:38:f3:13:9b:d6:36:21:62:59:87:dd:
         7f:02:a2:95:8a:d5:9b:0d:d7:a4:f2:53:f8:33:1b:03:f8:d0:
         19:28:8d:c1:98:2d:af:95:2f:be:cf:64:ca:7d:fa:a7:d8:f2:
         85:84:96:8e:8b:4a:2b:be:30:a4:94:1a:e1:d2:d1:a1:1c:f0:
         03:28:85:a6:14:98:84:d9:41:59:5d:2c:8d:ce:f8:5a:1a:d5:
         d7:19:70:f5:97:48:7b:11:8e:70:7c:57:c9:83:b6:32:72:d1:
         21:28:65:10:a0:b7:6e:04:96:f0:96:de:af:e3:6f:c0:16:b9:
         9a:96:e7:f9:54:69:78:d3:de:f6:b9:76:6f:10:2d:bd:6c:43:
         13:66:5b:15:c0:47:78:d4:7f:6a:be:67:36:5c:db:b3:df:2a:
         f6:c9:41:9b:e0:00:c8:6e:72:3d:1d:0e:04:93:b6:6b:db:e4:
         c5:dd:e8:8d:e3:0f:bc:a9:a7:f1:98:4a:0f:e3:13:2b:06:8e:
         8d:c1:99:fc:1e:02:2c:a0:04:9a:a1:f7:b7:98:8a:47:f8:93:
         50:d9:17:98
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBYwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNTAxMzEw
MTQyMDdaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEQzNDA5MTk3QzQ4NzBF
NkM4QTFFNzM3NDVERkE4ODZERkFERkYwMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDcsHG+7oOeioXOF42H0CQsJamXL6PUegKMSDMW2Czwm/1/5YXy
lhrKvgMGfWu4CBsrmDXmAE9jPq88tM3c2TizPw0cytw+6jF5synGCCkloAIcKMlp
bkcZ8/5leNbQe1I/aoYnR1AXAM0gy0T8r5vlCqEpEc2viHjpUAB3P5+n5Pl07Dn/
Ot0nlbnvP5Ud+hSqaqErASnIEmvEytinKN9OvOdYR55I4I3aia8U8r1iITe9qkiY
YhyDKPysBrR/rYjNNNWepIerCDegZz6Metif2qqjw9+clny62Sldd0P06jT5btxg
EaJA2j0K3owSM8+tkujXmcNtH6mZRCZuHt3BAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU00CRl8SHDmyKHnN0XfqIbfrf8BUwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1LzAwQ1JsOFNIRG15S0huTjBYZnFJYmZyZjhCVS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXbfIAwDQYJKoZIhvcNAQELBQADggEBAMXfPimUHDZnCc7kKJnI2TE45xMC
eXY0nadUwg7BgBbPvMOwi5/awze/MCg48xOb1jYhYlmH3X8CopWK1ZsN16TyU/gz
GwP40BkojcGYLa+VL77PZMp9+qfY8oWElo6LSiu+MKSUGuHS0aEc8AMohaYUmITZ
QVldLI3O+Foa1dcZcPWXSHsRjnB8V8mDtjJy0SEoZRCgt24ElvCW3q/jb8AWuZqW
5/lUaXjT3va5dm8QLb1sQxNmWxXAR3jUf2q+ZzZc27PfKvbJQZvgAMhucj0dDgST
tmvb5MXd6I3jD7ypp/GYSg/jEysGjo3BmfweAiygBJqh97eYikf4k1DZF5g=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:29 2025 by rpki-client