Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/El9Upde91dghy5Ue9IbIkIZiCaE.roa
File:                     El9Upde91dghy5Ue9IbIkIZiCaE.roa (raw, json)
Hash identifier:          oO98QGcuqFAFnHq/OuCHnz9F329q/mJSjq4mlVWmpkE=
Subject key identifier:   12:5F:54:A5:D7:BD:D5:D8:21:CB:95:1E:F4:86:C8:90:86:62:09:A1
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       76
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/El9Upde91dghy5Ue9IbIkIZiCaE.roa
Signing time:             Fri 31 Jan 2025 01:32:15 +0000
ROA not before:           Fri 31 Jan 2025 01:32:15 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     32787
IP address blocks:        210.193.97.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: Jan 31 01:32:15 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=125F54A5D7BDD5D821CB951EF486C890866209A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:60:4e:7a:9c:0d:63:99:8d:3a:7c:43:b4:98:
                    aa:68:14:c2:35:c6:84:cc:15:88:80:c7:7d:e8:2a:
                    e5:49:65:86:97:80:be:8f:94:61:39:9c:6d:ed:7a:
                    74:bd:a0:9b:e5:98:80:5a:b8:2a:ad:c8:5d:c0:11:
                    98:40:53:9b:b4:e5:68:5a:97:cf:7e:31:cb:60:88:
                    dc:18:1b:2e:04:c9:6e:61:b5:b8:14:59:ae:3c:85:
                    13:b9:d5:65:e9:b2:5a:56:0f:f2:1a:ea:73:fd:39:
                    e4:6f:99:8b:50:b3:8a:4a:b7:ed:5d:4f:14:85:50:
                    45:ae:6c:22:df:76:8d:cd:1e:e5:a1:30:e1:33:32:
                    e6:33:3c:07:6d:22:f7:fb:90:02:4f:f9:ee:0f:73:
                    33:87:f2:c6:9a:c6:48:ea:52:b5:bb:74:0b:87:c6:
                    68:56:8c:b5:34:f6:22:49:7b:53:a8:2c:7f:7b:be:
                    33:f8:6c:3f:af:e4:60:99:15:d2:ef:48:a1:c4:bb:
                    5f:78:18:8d:b6:27:bb:fd:3f:45:d8:2d:a7:ce:6f:
                    fc:26:54:be:f8:a3:90:1e:af:6f:6a:bb:fd:99:86:
                    68:07:76:6c:ab:6a:57:1a:08:4d:b3:34:91:7f:64:
                    a1:63:c2:cf:25:3e:af:e2:d4:55:5b:78:cf:ba:79:
                    f9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5F:54:A5:D7:BD:D5:D8:21:CB:95:1E:F4:86:C8:90:86:62:09:A1
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/El9Upde91dghy5Ue9IbIkIZiCaE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.193.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:22:44:7c:1d:91:6e:c2:9d:8e:2e:41:a2:de:7a:9d:66:9d:
         9a:71:8f:d0:1b:e7:b1:e4:c4:bf:70:7b:c7:27:dc:8f:1d:db:
         ea:fd:33:43:59:87:60:57:86:21:6c:79:ff:b1:9f:55:33:1a:
         4d:0f:d0:72:dc:e0:8c:c5:40:c9:e7:2a:75:a3:ed:25:8c:9d:
         e1:18:1f:04:e2:b5:f5:0d:ed:75:51:2e:79:d1:df:7a:b4:c4:
         6f:75:4d:18:18:b6:75:0e:55:fb:7a:6c:6a:01:fe:c2:1a:84:
         b9:12:91:63:2d:35:98:c1:b6:f9:f3:7e:52:26:b6:56:9f:c4:
         f7:4e:62:78:74:18:44:ce:8e:9d:3e:ed:20:08:05:6c:c8:e8:
         58:1c:17:90:1c:0d:99:b8:0f:b3:4b:49:23:e3:e4:3c:9a:f3:
         a0:30:d2:18:44:ec:eb:32:43:4c:23:8f:9d:b4:e6:54:55:d0:
         b2:4f:c1:90:ee:38:c6:e7:63:d6:25:98:63:65:b0:81:7d:0f:
         e4:9b:3b:b0:38:97:d3:49:23:e7:27:40:ca:49:d9:3a:8a:94:
         dc:9a:95:d6:f4:b7:64:6d:a8:8c:ed:10:91:4b:64:8b:d2:bc:
         e4:9a:e7:27:88:8a:ea:b8:fc:a7:4a:1b:bb:72:ae:6c:c4:06:
         79:0d:9b:a6
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBdjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0RUZG
MUFCNkVBREEyNzNCQTA2NkRCMEY3N0I3OUQ2QTBEOTAxNTQyMB4XDTI1MDEzMTAx
MzIxNVoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoMTI1RjU0QTVEN0JERDVE
ODIxQ0I5NTFFRjQ4NkM4OTA4NjYyMDlBMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMJgTnqcDWOZjTp8Q7SYqmgUwjXGhMwViIDHfegq5UllhpeAvo+U
YTmcbe16dL2gm+WYgFq4Kq3IXcARmEBTm7TlaFqXz34xy2CI3BgbLgTJbmG1uBRZ
rjyFE7nVZemyWlYP8hrqc/055G+Zi1Czikq37V1PFIVQRa5sIt92jc0e5aEw4TMy
5jM8B20i9/uQAk/57g9zM4fyxprGSOpStbt0C4fGaFaMtTT2Ikl7U6gsf3u+M/hs
P6/kYJkV0u9IocS7X3gYjbYnu/0/Rdgtp85v/CZUvvijkB6vb2q7/ZmGaAd2bKtq
VxoITbM0kX9koWPCzyU+r+LUVVt4z7p5+ZcCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQSX1Sl173V2CHLlR70hsiQhmIJoTAfBgNVHSMEGDAWgBRO/xq26tonO6Bm2w93
t51qDZAVQjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjAyL1R2OGF0dXJhSnp1Z1p0c1BkN2VkYWcyUUZVSS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1R2OGF0dXJhSnp1Z1p0c1BkN2VkYWcy
UUZVSS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82MDIvRWw5VXBkZTkxZGdoeTVVZTlJYklrSVppQ2FFLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANLBYTANBgkqhkiG9w0BAQsFAAOCAQEAtCJEfB2RbsKdji5Bot56nWadmnGP
0BvnseTEv3B7xyfcjx3b6v0zQ1mHYFeGIWx5/7GfVTMaTQ/QctzgjMVAyecqdaPt
JYyd4RgfBOK19Q3tdVEuedHferTEb3VNGBi2dQ5V+3psagH+whqEuRKRYy01mMG2
+fN+Uia2Vp/E905ieHQYRM6OnT7tIAgFbMjoWBwXkBwNmbgPs0tJI+PkPJrzoDDS
GETs6zJDTCOPnbTmVFXQsk/BkO44xudj1iWYY2WwgX0P5Js7sDiX00kj5ydAyknZ
OoqU3JqV1vS3ZG2ojO0QkUtki9K85JrnJ4iK6rj8p0obu3KubMQGeQ2bpg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:08:49 2025 by rpki-client