Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20214/OlwirgxsTs-wQ0PVyzRYw3G6rjM.roa
File:                     OlwirgxsTs-wQ0PVyzRYw3G6rjM.roa (raw, json)
Hash identifier:          YsJ3mHND1WCnzCijwnLsXIqhzxPybbcukgfq8xTesyA=
Subject key identifier:   3A:5C:22:AE:0C:6C:4E:CF:B0:43:43:D5:CB:34:58:C3:71:BA:AE:33
Certificate issuer:       /CN=39A31F0A0AB11DD34610190A580D694755F7DAA3
Certificate serial:       03
Authority key identifier: 39:A3:1F:0A:0A:B1:1D:D3:46:10:19:0A:58:0D:69:47:55:F7:DA:A3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OaMfCgqxHdNGEBkKWA1pR1X32qM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/OlwirgxsTs-wQ0PVyzRYw3G6rjM.roa
Signing time:             Wed 10 May 2023 15:01:12 +0000
ROA not before:           Wed 10 May 2023 15:01:12 +0000
ROA not after:            Fri 26 Apr 2024 11:14:05 +0000
asID:                     63800
IP address blocks:        103.131.151.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39A31F0A0AB11DD34610190A580D694755F7DAA3
        Validity
            Not Before: May 10 15:01:12 2023 GMT
            Not After : Apr 26 11:14:05 2024 GMT
        Subject: CN=3A5C22AE0C6C4ECFB04343D5CB3458C371BAAE33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:79:66:80:3a:d7:89:a5:f6:3a:30:a0:b2:fa:
                    53:2b:b5:8a:9e:cd:c7:26:95:5d:1b:e3:72:dd:5e:
                    fb:32:9b:da:00:79:99:07:81:d3:42:b6:4b:c7:37:
                    af:5d:2b:b4:a4:14:69:de:48:e4:16:cf:ce:cf:af:
                    c5:c3:b5:89:a4:cc:af:a9:c5:e1:87:a4:9a:6d:0e:
                    2f:4e:64:cb:06:a4:f7:c0:ba:5f:b2:f1:90:4b:56:
                    61:29:2f:c3:2c:2c:ca:65:9e:76:19:9a:9b:57:89:
                    e6:34:a6:49:fb:3b:65:92:18:d6:3d:d5:e6:5c:0b:
                    19:6e:98:a3:31:e4:02:21:57:96:c2:dd:12:74:6f:
                    d2:3e:ff:3b:9b:fa:95:9d:dd:cb:c1:41:f9:94:1d:
                    62:b9:be:08:97:e4:9a:97:f2:e4:0f:6a:1e:27:c8:
                    40:fa:8b:a3:73:86:57:c3:d7:a8:c3:27:e4:d5:fd:
                    5d:18:b7:27:6a:68:46:35:0d:13:f4:0c:b1:79:af:
                    c4:53:8c:64:4c:9a:0b:d0:a7:7f:0d:4c:2c:c4:54:
                    13:64:3b:95:98:67:c0:cf:15:41:26:be:60:9f:e3:
                    52:44:d8:a6:84:7a:55:fc:99:ce:6e:87:31:01:7e:
                    1b:a9:18:19:93:4c:56:aa:ab:5b:ff:a9:bb:3d:9d:
                    38:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:5C:22:AE:0C:6C:4E:CF:B0:43:43:D5:CB:34:58:C3:71:BA:AE:33
            X509v3 Authority Key Identifier:
                keyid:39:A3:1F:0A:0A:B1:1D:D3:46:10:19:0A:58:0D:69:47:55:F7:DA:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/OaMfCgqxHdNGEBkKWA1pR1X32qM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OaMfCgqxHdNGEBkKWA1pR1X32qM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/OlwirgxsTs-wQ0PVyzRYw3G6rjM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:2c:50:62:78:9e:eb:83:cf:10:0c:cf:9f:7f:d0:c3:1b:98:
         63:21:26:43:d9:18:ae:c9:0c:7c:7e:bf:b3:93:ad:73:ef:d5:
         51:bd:5b:81:09:3f:c4:aa:ad:3d:19:46:12:7d:3f:61:fd:da:
         b8:a7:e6:70:43:2b:cc:de:8f:84:38:2b:52:35:c7:b8:c4:b8:
         d4:02:6d:13:14:bf:06:68:06:3a:a6:d0:ca:da:ce:c4:3c:5c:
         df:77:45:5b:84:4d:68:07:54:8e:57:42:4a:da:60:f2:3e:05:
         c0:7f:dc:85:fc:16:d2:5c:f3:a5:f3:16:54:e7:38:64:39:0e:
         83:1b:d7:da:09:3a:77:23:7e:e2:a2:64:fc:f8:30:c4:15:24:
         80:8d:e0:2c:45:db:bd:cd:5a:81:a8:70:9f:a3:41:35:7f:42:
         70:a7:d1:d1:0d:8f:fe:06:a0:d4:37:a5:5b:e2:ac:82:d6:c6:
         e0:33:77:1f:c4:71:40:50:09:74:91:ad:6f:06:62:c6:40:85:
         5f:a5:8b:51:15:49:b0:a9:a5:fe:e9:97:7a:35:5b:2c:d6:02:
         cd:34:8f:14:59:be:d3:6b:68:e3:6e:6a:24:ec:6d:64:23:cb:
         64:c0:61:cd:78:be:bc:5b:77:35:56:a5:53:70:a4:df:ff:b6:
         cf:d3:e0:a6
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzOUEz
MUYwQTBBQjExREQzNDYxMDE5MEE1ODBENjk0NzU1RjdEQUEzMB4XDTIzMDUxMDE1
MDExMloXDTI0MDQyNjExMTQwNVowMzExMC8GA1UEAxMoM0E1QzIyQUUwQzZDNEVD
RkIwNDM0M0Q1Q0IzNDU4QzM3MUJBQUUzMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMV5ZoA614ml9jowoLL6Uyu1ip7NxyaVXRvjct1e+zKb2gB5mQeB
00K2S8c3r10rtKQUad5I5BbPzs+vxcO1iaTMr6nF4Yekmm0OL05kywak98C6X7Lx
kEtWYSkvwywsymWedhmam1eJ5jSmSfs7ZZIY1j3V5lwLGW6YozHkAiFXlsLdEnRv
0j7/O5v6lZ3dy8FB+ZQdYrm+CJfkmpfy5A9qHifIQPqLo3OGV8PXqMMn5NX9XRi3
J2poRjUNE/QMsXmvxFOMZEyaC9Cnfw1MLMRUE2Q7lZhnwM8VQSa+YJ/jUkTYpoR6
VfyZzm6HMQF+G6kYGZNMVqqrW/+puz2dOBUCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQ6XCKuDGxOz7BDQ9XLNFjDcbquMzAfBgNVHSMEGDAWgBQ5ox8KCrEd00YQGQpY
DWlHVffaozAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAyMTQvT2FNZkNncXhIZE5HRUJrS1dBMXBSMVgzMnFNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvT2FNZkNncXhIZE5HRUJrS1dBMXBS
MVgzMnFNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMjE0L09sd2lyZ3hzVHMtd1EwUFZ5elJZdzNHNnJqTS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABng5cwDQYJKoZIhvcNAQELBQADggEBAGcsUGJ4nuuDzxAMz59/0MMb
mGMhJkPZGK7JDHx+v7OTrXPv1VG9W4EJP8SqrT0ZRhJ9P2H92rin5nBDK8zej4Q4
K1I1x7jEuNQCbRMUvwZoBjqm0MrazsQ8XN93RVuETWgHVI5XQkraYPI+BcB/3IX8
FtJc86XzFlTnOGQ5DoMb19oJOncjfuKiZPz4MMQVJICN4CxF273NWoGocJ+jQTV/
QnCn0dENj/4GoNQ3pVvirILWxuAzdx/EcUBQCXSRrW8GYsZAhV+li1EVSbCppf7p
l3o1WyzWAs00jxRZvtNraONuaiTsbWQjy2TAYc14vrxbdzVWpVNwpN//ts/T4KY=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:01 2025 by rpki-client