Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/958/ezC2WsyzanZf3KVp0gJcV43NyTo.roa
File:                     ezC2WsyzanZf3KVp0gJcV43NyTo.roa (raw, json)
Hash identifier:          xb+fXTdi/yZyPu7o2CeYrXjuFaRuw8RkdFcDSGLwsgs=
Subject key identifier:   7B:30:B6:5A:CC:B3:6A:76:5F:DC:A5:69:D2:02:5C:57:8D:CD:C9:3A
Certificate issuer:       /CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
Certificate serial:       8D
Authority key identifier: 99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/ezC2WsyzanZf3KVp0gJcV43NyTo.roa
Signing time:             Thu 29 Feb 2024 01:30:37 +0000
ROA not before:           Thu 29 Feb 2024 01:30:37 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     38631
IP address blocks:        119.235.224.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
        Validity
            Not Before: Feb 29 01:30:37 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=7B30B65ACCB36A765FDCA569D2025C578DCDC93A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:33:a1:dc:a7:d7:f3:e3:b5:2f:40:eb:30:47:
                    78:62:37:31:27:97:63:e6:36:39:8b:ba:cf:2f:6a:
                    5f:4b:38:00:fd:a7:30:7a:49:b8:e4:a9:43:7a:d0:
                    4a:8a:88:2f:93:ec:fb:42:19:c2:81:c0:7c:ea:fb:
                    18:9f:40:d0:d6:c7:fa:cb:48:c7:81:fd:78:bd:e3:
                    3b:02:b5:f3:dc:32:24:2b:e4:92:ab:91:57:6d:b7:
                    47:e7:35:d6:90:60:85:ce:5a:c4:f6:ec:7b:a9:a7:
                    15:3b:74:2a:c4:4f:54:22:f2:ec:69:cd:ff:4b:f7:
                    2f:c5:db:30:a2:51:49:0a:ff:17:0f:90:6d:a9:ef:
                    82:a1:11:72:4c:87:0a:4c:7e:2d:99:51:03:62:2d:
                    59:0f:e6:c4:c6:3a:a5:c4:16:73:6b:a9:3c:fb:91:
                    af:ee:35:7a:2f:ad:23:d6:0b:82:1c:43:52:38:43:
                    f2:e2:39:6b:77:a4:74:37:9b:86:56:6b:8a:62:8f:
                    d5:0a:18:e8:3f:d8:bd:be:e0:22:e8:10:16:29:78:
                    98:6c:a2:d1:dd:72:ea:be:3c:8a:3a:20:f1:02:a1:
                    e7:a9:42:06:78:e6:44:2c:89:03:72:3d:05:0c:f2:
                    af:52:4d:99:d3:3c:6b:a7:4c:20:7a:33:02:f7:bb:
                    c5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:30:B6:5A:CC:B3:6A:76:5F:DC:A5:69:D2:02:5C:57:8D:CD:C9:3A
            X509v3 Authority Key Identifier:
                keyid:99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/ezC2WsyzanZf3KVp0gJcV43NyTo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.235.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:1b:33:1b:d2:d7:b4:11:2e:83:1d:af:65:65:f2:f8:d4:49:
         0a:81:bd:ef:7a:74:b1:c2:86:2e:1f:1e:6a:62:1d:7d:f7:bd:
         11:30:69:75:27:01:56:61:08:02:a7:54:57:87:52:e4:23:c3:
         53:85:16:9c:b9:e4:d2:80:b8:e5:85:b1:a8:f4:94:24:6a:d8:
         8b:7d:df:57:85:1d:85:72:50:06:41:97:c9:c0:fd:2f:f0:da:
         b3:1d:03:40:3d:b4:7d:cf:fa:d6:59:fd:66:3e:91:8c:76:5c:
         d9:ec:fd:33:3f:a1:0b:d3:eb:9d:32:59:1f:9d:d0:d3:b7:22:
         29:91:a6:9f:70:40:b0:ce:11:9f:b7:28:e1:4f:0f:ff:68:b3:
         db:c0:51:d3:59:3b:da:d6:5c:4e:ac:22:5c:1f:46:94:0c:4f:
         1c:e5:b7:e7:47:6d:39:03:01:58:e7:4a:7e:a8:05:2e:2c:7c:
         ce:e1:7e:3d:28:b0:38:5a:8f:ae:b7:88:05:ca:bc:8b:62:4b:
         de:b8:2b:e2:5b:6f:8c:ee:2d:44:9f:21:a8:9b:be:60:da:66:
         68:ce:a4:e7:94:73:1e:aa:9b:bb:f2:a4:d8:33:d3:b2:e0:bd:
         f6:5e:b5:3d:46:36:d1:c5:ae:78:36:65:20:62:e3:84:b2:1b:
         76:6a:33:2d
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTkw
NEVDQkNEODVGMjJBMkU4QUU3RTFGOTkxRTgzNDVEMDZBOTgxNjAeFw0yNDAyMjkw
MTMwMzdaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDdCMzBCNjVBQ0NCMzZB
NzY1RkRDQTU2OUQyMDI1QzU3OERDREM5M0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCkM6Hcp9fz47UvQOswR3hiNzEnl2PmNjmLus8val9LOAD9pzB6
SbjkqUN60EqKiC+T7PtCGcKBwHzq+xifQNDWx/rLSMeB/Xi94zsCtfPcMiQr5JKr
kVdtt0fnNdaQYIXOWsT27HuppxU7dCrET1Qi8uxpzf9L9y/F2zCiUUkK/xcPkG2p
74KhEXJMhwpMfi2ZUQNiLVkP5sTGOqXEFnNrqTz7ka/uNXovrSPWC4IcQ1I4Q/Li
OWt3pHQ3m4ZWa4pij9UKGOg/2L2+4CLoEBYpeJhsotHdcuq+PIo6IPECoeepQgZ4
5kQsiQNyPQUM8q9STZnTPGunTCB6MwL3u8WzAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUezC2WsyzanZf3KVp0gJcV43NyTowHwYDVR0jBBgwFoAUmQTsvNhfIqLorn4f
mR6DRdBqmBYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzk1OC9tUVRzdk5oZklxTG9ybjRmbVI2RFJkQnFtQlkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9tUVRzdk5oZklxTG9ybjRmbVI2RFJk
QnFtQlkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvOTU4L2V6QzJXc3l6YW5aZjNLVnAwZ0pjVjQzTnlUby5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAB36+AwDQYJKoZIhvcNAQELBQADggEBAG8bMxvS17QRLoMdr2Vl8vjUSQqB
ve96dLHChi4fHmpiHX33vREwaXUnAVZhCAKnVFeHUuQjw1OFFpy55NKAuOWFsaj0
lCRq2It931eFHYVyUAZBl8nA/S/w2rMdA0A9tH3P+tZZ/WY+kYx2XNns/TM/oQvT
650yWR+d0NO3IimRpp9wQLDOEZ+3KOFPD/9os9vAUdNZO9rWXE6sIlwfRpQMTxzl
t+dHbTkDAVjnSn6oBS4sfM7hfj0osDhaj663iAXKvItiS964K+Jbb4zuLUSfIaib
vmDaZmjOpOeUcx6qm7vypNgz07LgvfZetT1GNtHFrng2ZSBi44SyG3ZqMy0=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:58 2025 by rpki-client