Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/989/3y54IFAGW1xJNwufKhnj1iWMcyg.roa
File:                     3y54IFAGW1xJNwufKhnj1iWMcyg.roa (raw, json)
Hash identifier:          yWjlXlRlbwOYfZdreimoBK4LSbT3vMa9lmuAOyMllIg=
Subject key identifier:   DF:2E:78:20:50:06:5B:5C:49:37:0B:9F:2A:19:E3:D6:25:8C:73:28
Certificate issuer:       /CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
Certificate serial:       70
Authority key identifier: 8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/3y54IFAGW1xJNwufKhnj1iWMcyg.roa
Signing time:             Fri 31 Jan 2025 01:31:42 +0000
ROA not before:           Fri 31 Jan 2025 01:31:42 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     45680
IP address blocks:        183.81.176.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
        Validity
            Not Before: Jan 31 01:31:42 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=DF2E782050065B5C49370B9F2A19E3D6258C7328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:56:5d:e9:a4:1f:d8:12:98:7c:43:26:d9:93:
                    93:4c:e3:fa:e4:fc:5e:dd:62:6f:66:0d:f8:67:ef:
                    65:6d:f1:c5:c3:fc:ed:f0:17:05:63:90:13:57:f5:
                    29:5f:22:24:85:1b:79:50:04:aa:5f:a2:3e:d9:bb:
                    60:18:2e:a1:9c:e6:6a:d4:8e:36:97:a3:61:34:be:
                    d9:ce:34:d6:d8:c9:df:86:81:54:c6:99:9c:83:c8:
                    f5:dd:8b:9b:83:46:43:f5:f4:c2:c5:a1:e8:06:25:
                    e3:bd:73:63:df:6c:2a:73:31:e3:c8:19:e4:52:a5:
                    4d:bc:d4:97:60:85:1f:fb:71:ee:44:1e:98:74:4e:
                    7e:b3:63:03:9a:02:59:fc:26:f3:e9:8d:f4:24:8c:
                    a7:79:b3:5f:98:a3:7e:39:fd:7c:62:2b:d5:1d:6f:
                    da:90:87:9c:0a:74:d0:b0:cc:1d:f9:5c:ae:80:83:
                    69:67:94:0d:e4:df:43:4f:e4:1b:70:48:45:2b:09:
                    93:4a:61:5e:78:76:e6:53:48:1d:84:a3:4a:cb:92:
                    e1:ee:c3:56:01:21:b7:88:1e:be:f6:54:9a:8a:a8:
                    43:f5:05:04:2e:11:a8:76:de:92:70:0d:c0:97:4f:
                    8f:cb:91:b7:41:22:c1:0a:7e:89:bc:b8:cf:99:e3:
                    7a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:2E:78:20:50:06:5B:5C:49:37:0B:9F:2A:19:E3:D6:25:8C:73:28
            X509v3 Authority Key Identifier:
                keyid:8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/3y54IFAGW1xJNwufKhnj1iWMcyg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.81.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:f3:55:a9:77:eb:7c:4d:81:33:73:da:8c:04:c4:6a:c4:13:
         1a:da:aa:33:9b:a1:45:4c:4d:39:34:95:09:55:b3:bc:86:b1:
         c0:0f:1b:48:e8:79:35:eb:7b:03:2c:1c:9f:29:8c:3e:1b:0b:
         7c:f4:c8:df:e0:78:07:60:84:b5:c9:40:3a:b6:a8:4b:a3:e3:
         c7:42:8d:66:7c:dc:f5:e0:ad:2c:7f:7c:a5:fe:3a:a1:b3:35:
         54:f6:5c:b1:19:67:4e:4f:a7:3f:07:51:38:b7:2f:ce:bf:2c:
         71:2e:82:38:6b:1f:d1:68:9e:71:a4:61:8b:f3:ae:f2:75:4c:
         07:87:8f:f9:1d:a8:5f:6c:6f:0f:02:9f:86:2a:26:bb:0b:d2:
         fc:91:ce:59:ea:69:c4:a1:e5:3d:05:2f:9f:1e:1a:b9:73:29:
         60:2f:88:b0:16:30:3a:5f:eb:5c:1f:2e:2e:60:c6:fa:ae:2e:
         72:f9:a4:af:42:5a:6f:81:71:f5:e1:59:9a:a0:5c:e8:b0:7e:
         79:e9:08:df:53:53:6d:ce:d8:ca:f6:22:89:de:e0:80:10:bd:
         3c:17:ee:84:fb:1c:e4:0c:f9:61:da:00:65:3a:a7:38:3b:b5:
         ab:3c:07:8d:9f:39:09:44:5e:0c:74:58:1f:cc:25:8a:24:6f:
         46:2d:b4:f6
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBcDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDI2
RTBEMTdFMzBEOEJGNTcxNEY0QkE5MkVFRUIwRDIyREREQjFEMB4XDTI1MDEzMTAx
MzE0MloXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoREYyRTc4MjA1MDA2NUI1
QzQ5MzcwQjlGMkExOUUzRDYyNThDNzMyODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM9WXemkH9gSmHxDJtmTk0zj+uT8Xt1ib2YN+GfvZW3xxcP87fAX
BWOQE1f1KV8iJIUbeVAEql+iPtm7YBguoZzmatSONpejYTS+2c401tjJ34aBVMaZ
nIPI9d2Lm4NGQ/X0wsWh6AYl471zY99sKnMx48gZ5FKlTbzUl2CFH/tx7kQemHRO
frNjA5oCWfwm8+mN9CSMp3mzX5ijfjn9fGIr1R1v2pCHnAp00LDMHflcroCDaWeU
DeTfQ0/kG3BIRSsJk0phXnh25lNIHYSjSsuS4e7DVgEht4gevvZUmoqoQ/UFBC4R
qHbeknANwJdPj8uRt0EiwQp+iby4z5njemECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTfLnggUAZbXEk3C58qGePWJYxzKDAfBgNVHSMEGDAWgBSNJuDRfjDYv1cU9LqS
7usNIt3bHTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTg5L2pTYmcwWDR3Mkw5WEZQUzZrdTdyRFNMZDJ4MC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pTYmcwWDR3Mkw5WEZQUzZrdTdyRFNM
ZDJ4MC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85ODkvM3k1NElGQUdXMXhKTnd1ZktobmoxaVdNY3lnLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEArdRsDANBgkqhkiG9w0BAQsFAAOCAQEAb/NVqXfrfE2BM3PajATEasQTGtqq
M5uhRUxNOTSVCVWzvIaxwA8bSOh5Net7AywcnymMPhsLfPTI3+B4B2CEtclAOrao
S6Pjx0KNZnzc9eCtLH98pf46obM1VPZcsRlnTk+nPwdROLcvzr8scS6COGsf0Wie
caRhi/Ou8nVMB4eP+R2oX2xvDwKfhiomuwvS/JHOWeppxKHlPQUvnx4auXMpYC+I
sBYwOl/rXB8uLmDG+q4ucvmkr0Jab4Fx9eFZmqBc6LB+eekI31NTbc7YyvYiid7g
gBC9PBfuhPsc5Az5YdoAZTqnODu1qzwHjZ85CUReDHRYH8wliiRvRi209g==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:10 2025 by rpki-client