Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/0GjVrxSz72VSnsr7S0gdFzu-kAs.roa
File:                     0GjVrxSz72VSnsr7S0gdFzu-kAs.roa (raw, json)
Hash identifier:          P85NTqNs7Ywxgf/OsuGJBXnps+ZZ7QbCEQqYSj2EozA=
Subject key identifier:   D0:68:D5:AF:14:B3:EF:65:52:9E:CA:FB:4B:48:1D:17:3B:BE:90:0B
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0393
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/0GjVrxSz72VSnsr7S0gdFzu-kAs.roa
Signing time:             Sat 31 Aug 2024 01:29:55 +0000
ROA not before:           Sat 31 Aug 2024 01:29:55 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        113.145.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 915 (0x393)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Aug 31 01:29:55 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=D068D5AF14B3EF65529ECAFB4B481D173BBE900B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:75:a9:ef:ed:3a:ad:12:57:56:7f:fe:7c:ee:
                    3e:5d:ff:ab:40:e5:fa:7e:1f:e1:d0:c2:37:88:94:
                    ad:3e:17:6b:52:23:69:ac:e8:0e:81:3f:cc:be:45:
                    c3:76:8d:dd:78:11:a7:79:51:07:34:f6:3a:20:5e:
                    aa:da:eb:4a:53:c4:3f:83:9c:b2:3d:32:60:eb:57:
                    5a:5b:f8:40:15:80:f1:c7:80:6a:8e:58:1b:9e:28:
                    b0:5b:3c:15:cd:b4:a2:dd:68:18:e8:e5:2e:c9:8e:
                    74:8e:20:b8:8e:eb:94:c7:8a:64:78:28:1d:77:49:
                    bc:5d:53:ed:1c:e5:39:a3:dd:81:55:40:10:06:a6:
                    69:4c:55:3b:23:86:92:c2:63:aa:f4:fa:f9:08:d6:
                    f8:75:e5:ce:af:e9:44:b9:44:ee:a8:ec:a4:5f:91:
                    81:8e:a5:08:6a:e3:54:37:f6:bf:59:23:72:ca:a8:
                    41:05:5e:ad:5f:ab:12:cc:20:74:10:0c:9b:a7:49:
                    81:a5:9b:81:15:52:89:b0:9e:ea:6f:2b:29:e0:b6:
                    36:95:52:ee:71:56:00:9d:6e:e7:a0:43:0c:41:1b:
                    9b:02:06:3d:cf:1d:fe:6f:25:50:de:ee:b0:d9:13:
                    ef:3e:ae:bd:06:79:f7:02:7e:52:f6:3c:e6:e9:f3:
                    16:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:68:D5:AF:14:B3:EF:65:52:9E:CA:FB:4B:48:1D:17:3B:BE:90:0B
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/0GjVrxSz72VSnsr7S0gdFzu-kAs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.145.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5b:29:f4:b3:fc:72:52:9c:1e:eb:21:84:d0:2b:94:8c:9b:da:
         13:fe:e0:a6:26:4e:8e:75:4a:77:2a:a0:e0:58:ba:2c:5b:2e:
         4f:68:ce:ef:cd:16:30:20:de:91:07:43:e0:8b:9c:54:64:26:
         26:d2:66:d3:71:49:da:86:06:d6:48:46:6f:20:7a:8c:85:cb:
         fc:5c:3f:cc:0f:1a:58:ea:65:67:54:3e:46:fc:31:57:88:54:
         c7:2c:66:61:4b:5d:bb:70:9a:5d:7b:cb:c3:9f:b3:b3:02:5e:
         f5:20:d7:8b:4a:30:3d:e4:ef:25:ee:56:2f:b9:ac:4d:e6:e6:
         a0:e3:11:a7:8b:a1:0d:12:1c:ac:f6:09:46:20:e4:60:75:44:
         74:12:aa:94:1a:59:66:5d:fd:a1:40:68:b0:e3:9f:ad:b9:df:
         ff:56:7b:a3:e2:3a:d2:d9:b8:93:f3:63:d7:a6:c0:c3:17:d7:
         60:5d:27:29:ac:9a:e2:e8:c0:7e:63:35:de:be:75:7b:11:7b:
         9c:c3:90:a2:32:e9:6a:60:3f:e7:1b:87:e8:6f:47:01:ba:d3:
         ab:de:16:0a:f9:77:49:3b:2b:b5:81:92:78:55:f6:0b:b2:e0:
         65:df:4a:18:6a:be:d9:79:46:32:81:ae:d6:3c:b0:65:d5:e8:
         68:5d:57:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:06 2025 by rpki-client