Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/822/phQHUpTBULYd5EXtpXYc7fI4JVU.roa
File:                     phQHUpTBULYd5EXtpXYc7fI4JVU.roa (raw, json)
Hash identifier:          88rQ6TySeMMM156ZKyAgvqCsVsJnZ2ETsoNGj0IPOUw=
Subject key identifier:   A6:14:07:52:94:C1:50:B6:1D:E4:45:ED:A5:76:1C:ED:F2:38:25:55
Certificate issuer:       /CN=55061B7BA6111F230BDB61E29781E46D0165E99E
Certificate serial:       4A
Authority key identifier: 55:06:1B:7B:A6:11:1F:23:0B:DB:61:E2:97:81:E4:6D:01:65:E9:9E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/phQHUpTBULYd5EXtpXYc7fI4JVU.roa
Signing time:             Thu 27 Feb 2025 02:45:16 +0000
ROA not before:           Thu 27 Feb 2025 02:45:16 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     17529
IP address blocks:        219.100.227.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55061B7BA6111F230BDB61E29781E46D0165E99E
        Validity
            Not Before: Feb 27 02:45:16 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=A614075294C150B61DE445EDA5761CEDF2382555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e5:11:68:cc:60:24:8b:80:d6:f5:f8:59:31:
                    14:7e:65:a5:ea:94:19:49:1f:ff:75:dc:ad:77:86:
                    e2:8b:9d:fb:e0:1a:ad:07:96:e7:02:cd:33:d9:31:
                    89:16:aa:de:dc:a6:8c:5b:f2:6b:2b:e8:05:3d:14:
                    f8:89:19:76:d7:61:c5:89:3f:1d:af:bf:ae:2d:ca:
                    72:89:5e:da:69:89:bc:1c:0d:c2:a7:bc:f9:20:f9:
                    e9:8f:33:03:42:53:88:70:73:4b:9c:11:f5:3d:d7:
                    bd:4a:2a:70:da:59:0d:3c:49:64:fa:23:b7:e3:ec:
                    a3:f7:7c:92:c2:96:72:9a:1f:78:7f:fa:6b:56:43:
                    34:6c:20:8c:fc:05:8a:d2:b7:88:a3:be:ba:ab:82:
                    e6:99:2e:ef:73:59:82:87:4a:95:77:24:2c:fe:84:
                    d3:95:dd:fd:6b:08:40:69:78:23:4d:1f:65:69:4d:
                    04:82:ea:36:8f:2e:8f:58:11:c5:b5:ba:9b:3e:80:
                    3e:3f:80:39:23:60:d6:2f:79:d8:93:83:d1:48:6f:
                    19:8b:0e:63:f6:90:ff:cc:3d:5b:74:b3:9e:49:f3:
                    74:c9:57:68:0e:9f:7a:f3:97:08:5f:e3:0e:8b:c7:
                    aa:55:ab:a0:87:72:25:25:ca:10:29:f0:88:1f:7f:
                    9d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:14:07:52:94:C1:50:B6:1D:E4:45:ED:A5:76:1C:ED:F2:38:25:55
            X509v3 Authority Key Identifier:
                keyid:55:06:1B:7B:A6:11:1F:23:0B:DB:61:E2:97:81:E4:6D:01:65:E9:9E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/VQYbe6YRHyML22Hil4HkbQFl6Z4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/phQHUpTBULYd5EXtpXYc7fI4JVU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:dd:76:e3:d4:f1:a8:17:cb:77:cc:79:7e:27:55:51:24:54:
         5a:b7:78:df:fe:3e:89:16:dc:8f:a0:75:bf:6f:f6:43:36:81:
         11:80:69:07:38:12:6e:de:f9:cc:f0:dc:b4:1f:e9:ba:b6:ed:
         97:21:c4:9a:e0:a5:56:d1:9f:d7:da:51:5b:bb:73:21:b1:89:
         06:0a:a5:8e:5f:ea:aa:fe:72:f4:a1:a8:1e:d6:0f:ce:4d:e7:
         11:12:86:9a:89:d5:ac:c6:65:ce:50:f7:71:44:ee:b7:4c:b0:
         9f:73:bf:4d:40:b5:31:fe:12:33:0b:8a:71:a1:d1:1c:c0:4f:
         03:0e:30:0f:bc:bd:be:d5:fb:bf:0c:7b:11:38:e1:76:4c:4a:
         2a:16:7c:d1:ee:c7:f0:25:4b:62:e3:11:59:60:e1:c9:21:ad:
         71:db:08:8c:40:64:db:c3:6c:f9:37:01:e0:64:1b:4c:ba:77:
         9a:24:cc:1b:6c:46:00:62:d5:a2:0b:5c:55:aa:40:fa:0a:68:
         3f:5d:0d:1a:42:4d:6c:cd:b2:6b:b2:21:ff:60:00:09:2e:61:
         2b:a1:34:5e:64:cd:55:89:b9:84:6b:51:a7:df:f4:7b:07:d2:
         c1:f8:e4:04:79:8c:38:ea:ba:57:3f:2e:3c:87:c2:59:51:98:
         2e:bc:58:de
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBSjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1NTA2
MUI3QkE2MTExRjIzMEJEQjYxRTI5NzgxRTQ2RDAxNjVFOTlFMB4XDTI1MDIyNzAy
NDUxNloXDTI2MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoQTYxNDA3NTI5NEMxNTBC
NjFERTQ0NUVEQTU3NjFDRURGMjM4MjU1NTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALrlEWjMYCSLgNb1+FkxFH5lpeqUGUkf/3XcrXeG4oud++AarQeW
5wLNM9kxiRaq3tymjFvyayvoBT0U+IkZdtdhxYk/Ha+/ri3Kcole2mmJvBwNwqe8
+SD56Y8zA0JTiHBzS5wR9T3XvUoqcNpZDTxJZPojt+Pso/d8ksKWcpofeH/6a1ZD
NGwgjPwFitK3iKO+uquC5pku73NZgodKlXckLP6E05Xd/WsIQGl4I00fZWlNBILq
No8uj1gRxbW6mz6APj+AOSNg1i952JOD0UhvGYsOY/aQ/8w9W3SznknzdMlXaA6f
evOXCF/jDovHqlWroIdyJSXKECnwiB9/nbUCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSmFAdSlMFQth3kRe2ldhzt8jglVTAfBgNVHSMEGDAWgBRVBht7phEfIwvbYeKX
geRtAWXpnjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODIyL1ZRWWJlNllSSHlNTDIySGlsNEhrYlFGbDZaNC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1ZRWWJlNllSSHlNTDIySGlsNEhrYlFG
bDZaNC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84MjIvcGhRSFVwVEJVTFlkNUVYdHBYWWM3Zkk0SlZVLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANtk4zANBgkqhkiG9w0BAQsFAAOCAQEAYd1249TxqBfLd8x5fidVUSRUWrd4
3/4+iRbcj6B1v2/2QzaBEYBpBzgSbt75zPDctB/purbtlyHEmuClVtGf19pRW7tz
IbGJBgqljl/qqv5y9KGoHtYPzk3nERKGmonVrMZlzlD3cUTut0ywn3O/TUC1Mf4S
MwuKcaHRHMBPAw4wD7y9vtX7vwx7ETjhdkxKKhZ80e7H8CVLYuMRWWDhySGtcdsI
jEBk28Ns+TcB4GQbTLp3miTMG2xGAGLVogtcVapA+gpoP10NGkJNbM2ya7Ih/2AA
CS5hK6E0XmTNVYm5hGtRp9/0ewfSwfjkBHmMOOq6Vz8uPIfCWVGYLrxY3g==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:41 2025 by rpki-client