Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/Fk53SWT2QkP5vdkQH4RDxAd_Izo.roa
File:                     Fk53SWT2QkP5vdkQH4RDxAd_Izo.roa (raw, json)
Hash identifier:          +pLtV5NsfnVZDc8xHjsyc38LoOIF4snx2uyMjzDyVC4=
Subject key identifier:   16:4E:77:49:64:F6:42:43:F9:BD:D9:10:1F:84:43:C4:07:7F:23:3A
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0576
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/Fk53SWT2QkP5vdkQH4RDxAd_Izo.roa
Signing time:             Fri 31 Jan 2025 01:39:48 +0000
ROA not before:           Fri 31 Jan 2025 01:39:48 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     10010
IP address blocks:        220.216.110.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1398 (0x576)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan 31 01:39:48 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=164E774964F64243F9BDD9101F8443C4077F233A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:66:a8:fe:4e:2a:bd:51:37:fd:5f:b7:4b:38:
                    91:aa:f1:44:a4:b8:13:89:b9:80:5f:13:71:b4:4b:
                    24:05:ef:e3:c3:a9:bd:de:23:bf:69:44:c0:f3:ac:
                    43:8a:5c:7e:af:e8:ea:3f:08:e1:11:ef:5f:4c:a4:
                    87:a6:5e:1d:4b:01:9c:04:53:ec:40:ba:bf:7c:72:
                    89:75:cf:83:36:a7:30:39:10:b5:2b:70:13:00:84:
                    89:36:d8:c0:a4:8b:4b:86:2f:de:5e:f9:ca:03:c7:
                    9a:23:f0:43:c8:c2:dd:5c:d5:32:e2:1a:19:e3:30:
                    41:77:cf:7d:13:c3:a5:c4:d0:d4:53:c0:01:69:46:
                    95:60:bb:77:68:9a:ed:83:0f:a3:2f:bc:ea:eb:5e:
                    4b:00:22:8a:2f:03:f4:4d:4a:b7:ca:d5:50:ce:0d:
                    b9:4f:e6:25:1c:b6:87:96:18:55:6c:d5:52:52:1e:
                    2c:e5:9b:1e:f7:97:0c:ec:b2:a7:9c:78:20:f0:76:
                    29:6f:16:d5:79:ab:a9:6f:ff:cd:1f:67:fe:72:26:
                    35:44:ab:ad:1a:2e:20:45:02:a2:f2:48:da:a3:e2:
                    ef:d9:80:ad:95:b4:8a:eb:d5:41:43:86:56:4a:a7:
                    75:db:6c:82:3b:8b:db:1d:4f:51:4a:78:0e:92:b2:
                    df:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4E:77:49:64:F6:42:43:F9:BD:D9:10:1F:84:43:C4:07:7F:23:3A
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/Fk53SWT2QkP5vdkQH4RDxAd_Izo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:d5:af:c3:04:96:15:7b:6a:7a:0e:87:b5:f8:c1:cd:fc:1e:
         a9:83:10:9c:a9:9b:2e:22:40:a9:aa:87:fc:f3:70:67:cf:50:
         41:8b:44:17:be:07:92:e6:ec:b6:bd:41:8b:b8:2c:27:6a:93:
         f9:3f:34:66:73:23:3f:c0:0f:16:39:f0:83:57:ed:92:7c:23:
         b5:bd:3e:a5:ce:f4:32:0a:83:38:31:57:5f:74:49:60:86:e9:
         3f:e1:d7:d0:01:55:59:19:13:f6:46:b7:e9:9d:94:5b:73:d1:
         2e:3f:a7:34:61:fa:cb:6c:b3:62:45:ad:4f:43:ce:5b:d0:0e:
         ca:49:c1:29:2a:99:33:ad:b3:49:24:65:84:af:01:f1:b4:7f:
         52:2b:ae:dd:e5:06:aa:a3:95:53:09:c1:52:e2:29:6e:c9:2c:
         ab:b5:cd:fa:55:48:84:8e:91:f5:b2:40:f2:91:8f:73:b3:1f:
         b6:4f:5a:64:22:c0:e7:45:10:78:d2:3e:9c:a8:11:01:a4:f5:
         bd:8b:5f:18:bb:eb:20:8c:dd:a4:5a:b3:a6:de:61:29:65:d1:
         fd:f5:ae:7d:51:78:d2:09:06:53:9d:e0:68:3c:1e:b3:b7:0d:
         fd:fc:4e:3e:4b:de:0d:c9:82:6b:6a:f7:b7:bb:ec:87:5a:94:
         aa:24:a9:31
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBXYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNTAxMzEw
MTM5NDhaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDE2NEU3NzQ5NjRGNjQy
NDNGOUJERDkxMDFGODQ0M0M0MDc3RjIzM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCuZqj+Tiq9UTf9X7dLOJGq8USkuBOJuYBfE3G0SyQF7+PDqb3e
I79pRMDzrEOKXH6v6Oo/COER719MpIemXh1LAZwEU+xAur98col1z4M2pzA5ELUr
cBMAhIk22MCki0uGL95e+coDx5oj8EPIwt1c1TLiGhnjMEF3z30Tw6XE0NRTwAFp
RpVgu3domu2DD6MvvOrrXksAIoovA/RNSrfK1VDODblP5iUctoeWGFVs1VJSHizl
mx73lwzssqeceCDwdilvFtV5q6lv/80fZ/5yJjVEq60aLiBFAqLySNqj4u/ZgK2V
tIrr1UFDhlZKp3XbbII7i9sdT1FKeA6Sst+rAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUFk53SWT2QkP5vdkQH4RDxAd/IzowHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1L0ZrNTNTV1QyUWtQNXZka1FINFJEeEFkX0l6by5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADc2G4wDQYJKoZIhvcNAQELBQADggEBALnVr8MElhV7anoOh7X4wc38HqmD
EJypmy4iQKmqh/zzcGfPUEGLRBe+B5Lm7La9QYu4LCdqk/k/NGZzIz/ADxY58INX
7ZJ8I7W9PqXO9DIKgzgxV190SWCG6T/h19ABVVkZE/ZGt+mdlFtz0S4/pzRh+sts
s2JFrU9DzlvQDspJwSkqmTOts0kkZYSvAfG0f1Irrt3lBqqjlVMJwVLiKW7JLKu1
zfpVSISOkfWyQPKRj3OzH7ZPWmQiwOdFEHjSPpyoEQGk9b2LXxi76yCM3aRas6be
YSll0f31rn1ReNIJBlOd4Gg8HrO3Df38Tj5L3g3Jgmtq97e77IdalKokqTE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:21 2025 by rpki-client