Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/965/udt0lG_tZB8R18vtGykImhucsvs.roa
File:                     udt0lG_tZB8R18vtGykImhucsvs.roa (raw, json)
Hash identifier:          tyC2IIQtm/GLDnuBpwDIHuOXwTwrNeAvzdHDDhR0PUg=
Subject key identifier:   B9:DB:74:94:6F:ED:64:1F:11:D7:CB:ED:1B:29:08:9A:1B:9C:B2:FB
Certificate issuer:       /CN=989E82672C98A627120ABA72DEBEBE22015849A0
Certificate serial:       1C
Authority key identifier: 98:9E:82:67:2C:98:A6:27:12:0A:BA:72:DE:BE:BE:22:01:58:49:A0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/udt0lG_tZB8R18vtGykImhucsvs.roa
Signing time:             Sat 01 Mar 2025 01:29:20 +0000
ROA not before:           Sat 01 Mar 2025 01:29:20 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     59127
IP address blocks:        180.92.16.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=989E82672C98A627120ABA72DEBEBE22015849A0
        Validity
            Not Before: Mar  1 01:29:20 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=B9DB74946FED641F11D7CBED1B29089A1B9CB2FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cc:f8:d2:c7:cf:4f:0f:02:50:94:8f:f0:f9:
                    7a:1b:04:f6:67:78:72:72:42:61:14:b1:d4:4b:81:
                    15:02:37:7d:d5:94:5e:49:86:6c:7d:20:1b:b8:1f:
                    4a:db:24:97:33:97:03:70:c2:87:e1:25:0f:b0:62:
                    29:af:4f:0c:88:fb:45:d4:2f:7e:28:58:46:91:ac:
                    64:c6:a2:86:0c:37:7a:40:da:cb:60:82:8e:5c:84:
                    6f:fc:e9:89:8e:74:21:c5:f9:4f:24:6a:73:bc:ec:
                    64:59:fa:6f:65:5a:7f:68:32:e8:b3:90:ae:ba:71:
                    80:38:e3:de:d0:ae:30:93:d7:8f:2e:7a:cf:d4:d8:
                    93:4c:00:70:a7:da:5b:09:11:02:f7:07:b3:86:c9:
                    d7:20:41:3a:af:14:a4:05:84:6a:aa:54:fb:d0:4f:
                    55:10:ca:b8:cd:94:98:f7:35:cb:6a:7e:33:54:7a:
                    8b:ca:34:e1:f5:eb:17:1a:9c:b3:ac:9e:8b:8c:4b:
                    e0:3b:f4:0a:f4:a0:65:d0:18:1d:03:0b:a8:1f:c2:
                    17:bc:34:4a:d2:0e:fb:63:39:ad:0b:0b:d5:4f:00:
                    ff:ef:3c:f5:cd:ed:25:40:4b:c8:03:81:0f:a8:4c:
                    9b:b1:52:6e:e6:30:9b:12:a7:57:f5:ef:f4:5b:8f:
                    ed:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:DB:74:94:6F:ED:64:1F:11:D7:CB:ED:1B:29:08:9A:1B:9C:B2:FB
            X509v3 Authority Key Identifier:
                keyid:98:9E:82:67:2C:98:A6:27:12:0A:BA:72:DE:BE:BE:22:01:58:49:A0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/udt0lG_tZB8R18vtGykImhucsvs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.92.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         49:b4:fe:cc:94:eb:e9:73:c4:c5:15:bf:e0:5e:21:b1:d3:1a:
         c8:f5:15:21:ff:34:19:85:2a:de:4c:a1:dc:f5:41:e7:39:19:
         dd:c6:e9:48:ce:5f:f2:3e:05:fc:08:83:78:af:fe:b0:a6:bc:
         0e:62:33:7f:10:37:96:c3:49:77:6d:e1:df:72:be:f0:66:2f:
         67:f2:62:fb:dc:c2:7a:36:d7:37:d5:67:eb:4c:84:cf:6b:de:
         bb:e3:bb:35:69:43:54:5e:26:cc:aa:af:48:87:cd:3a:65:72:
         02:45:4c:f9:f4:bc:d9:b9:62:83:4b:ca:21:ba:b8:20:f1:ee:
         75:5b:ba:b7:fe:69:9b:e4:3f:43:fe:9f:38:59:be:4f:32:9c:
         3e:a0:b2:af:9a:a9:aa:b9:07:36:27:5c:6e:ac:c3:8e:c4:1b:
         a6:6e:be:e4:89:1f:da:98:68:2e:e7:1c:bf:d9:03:6b:db:7a:
         0d:b4:ce:f3:dc:eb:5e:02:5a:78:19:60:f5:91:0f:bc:b5:90:
         1e:f7:ea:61:07:ba:0f:b5:b5:ca:ab:72:8e:9f:c7:6f:7f:e5:
         4c:f2:09:c6:59:a8:d3:78:d9:48:64:d5:4b:24:b9:4f:51:23:
         60:5e:fa:73:1d:25:33:cc:5d:a5:27:14:d3:7b:5e:3b:a0:55:
         79:7e:76:c5
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5ODlF
ODI2NzJDOThBNjI3MTIwQUJBNzJERUJFQkUyMjAxNTg0OUEwMB4XDTI1MDMwMTAx
MjkyMFoXDTI2MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoQjlEQjc0OTQ2RkVENjQx
RjExRDdDQkVEMUIyOTA4OUExQjlDQjJGQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALHM+NLHz08PAlCUj/D5ehsE9md4cnJCYRSx1EuBFQI3fdWUXkmG
bH0gG7gfStsklzOXA3DCh+ElD7BiKa9PDIj7RdQvfihYRpGsZMaihgw3ekDay2CC
jlyEb/zpiY50IcX5TyRqc7zsZFn6b2Vaf2gy6LOQrrpxgDjj3tCuMJPXjy56z9TY
k0wAcKfaWwkRAvcHs4bJ1yBBOq8UpAWEaqpU+9BPVRDKuM2UmPc1y2p+M1R6i8o0
4fXrFxqcs6yei4xL4Dv0CvSgZdAYHQMLqB/CF7w0StIO+2M5rQsL1U8A/+889c3t
JUBLyAOBD6hMm7FSbuYwmxKnV/Xv9FuP7W0CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBS523SUb+1kHxHXy+0bKQiaG5yy+zAfBgNVHSMEGDAWgBSYnoJnLJimJxIKunLe
vr4iAVhJoDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTY1L21KNkNaeXlZcGljU0NycHkzcjYtSWdGWVNhQS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL21KNkNaeXlZcGljU0NycHkzcjYtSWdG
WVNhQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85NjUvdWR0MGxHX3RaQjhSMTh2dEd5a0ltaHVjc3ZzLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBLRcEDANBgkqhkiG9w0BAQsFAAOCAQEASbT+zJTr6XPExRW/4F4hsdMayPUV
If80GYUq3kyh3PVB5zkZ3cbpSM5f8j4F/AiDeK/+sKa8DmIzfxA3lsNJd23h33K+
8GYvZ/Ji+9zCejbXN9Vn60yEz2veu+O7NWlDVF4mzKqvSIfNOmVyAkVM+fS82bli
g0vKIbq4IPHudVu6t/5pm+Q/Q/6fOFm+TzKcPqCyr5qpqrkHNidcbqzDjsQbpm6+
5Ikf2phoLuccv9kDa9t6DbTO89zrXgJaeBlg9ZEPvLWQHvfqYQe6D7W1yqtyjp/H
b3/lTPIJxlmo03jZSGTVSyS5T1EjYF76cx0lM8xdpScU03teO6BVeX52xQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:09 2025 by rpki-client