Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/18M8hESWqszrREoG6VHl6ovsWxY.roa
File:                     18M8hESWqszrREoG6VHl6ovsWxY.roa (raw, json)
Hash identifier:          Uh6GxFVG3catqQniCee4qDdu6v+fmFkmGF10Cps7nVc=
Subject key identifier:   D7:C3:3C:84:44:96:AA:CC:EB:44:4A:06:E9:51:E5:EA:8B:EC:5B:16
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0571
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/18M8hESWqszrREoG6VHl6ovsWxY.roa
Signing time:             Wed 18 Dec 2024 03:00:57 +0000
ROA not before:           Wed 18 Dec 2024 03:00:57 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        210.224.128.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1393 (0x571)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 03:00:57 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=D7C33C844496AACCEB444A06E951E5EA8BEC5B16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b1:81:ce:9a:35:8b:2a:c5:54:1f:2f:e2:fa:
                    94:99:53:a3:cc:fe:ef:10:36:37:7f:39:41:51:3e:
                    59:20:ee:d1:6d:0c:e0:88:36:0f:39:70:a6:91:dd:
                    89:fe:e4:1f:54:ed:20:6e:f7:b5:fc:71:40:46:3e:
                    21:11:fa:75:7a:d0:70:21:fa:e4:12:bc:6e:d4:3e:
                    13:d3:b6:db:5e:78:0b:95:e2:fd:9c:51:a3:a2:7e:
                    11:35:98:2f:39:27:0a:fd:89:9d:2c:cf:4a:4e:85:
                    fd:6e:ed:74:38:ff:2f:9f:04:8b:6e:d7:2d:03:b8:
                    20:b9:5f:ff:f9:e8:c7:51:18:fd:86:57:3e:5f:31:
                    99:0a:cd:a0:77:a7:52:ba:92:02:b9:dd:20:78:55:
                    68:4e:be:6d:eb:85:57:5b:10:3e:4a:05:5b:d5:8f:
                    47:b1:24:c4:45:4d:ba:d8:86:82:eb:66:10:25:80:
                    36:96:4a:e8:f8:72:ff:7b:b9:85:df:6f:ea:61:60:
                    65:68:92:7c:c6:06:09:74:7f:89:22:5a:2a:3f:79:
                    18:91:a3:51:42:51:0f:38:d0:75:8a:79:e8:6f:e9:
                    dc:fc:cf:44:65:51:44:6d:ee:16:6d:f3:a9:c5:ab:
                    b9:e6:3b:c7:fa:44:e4:f0:08:f8:db:4e:61:a8:ac:
                    0c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C3:3C:84:44:96:AA:CC:EB:44:4A:06:E9:51:E5:EA:8B:EC:5B:16
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/18M8hESWqszrREoG6VHl6ovsWxY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.224.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8b:23:29:fb:33:9d:b1:d6:22:69:c1:57:e7:37:12:3b:64:fb:
         0f:da:62:af:8d:dd:9f:e1:32:18:5d:c4:07:d4:d8:83:4e:ef:
         d6:b8:55:bf:0c:6e:cf:cb:a9:85:93:23:4e:fc:33:94:60:03:
         9d:f7:80:79:64:bd:58:32:1a:60:5c:5b:30:d6:ea:16:12:05:
         bc:27:43:52:31:42:30:b6:cb:ac:ad:10:96:04:f7:b4:51:7d:
         07:12:1c:c3:e3:ec:f0:2a:37:7e:81:60:d7:af:be:78:d7:17:
         b8:1e:31:79:13:28:cf:bf:bc:5d:2a:26:14:33:a5:b9:2b:74:
         c7:9f:50:19:93:02:50:ac:3e:4f:2c:cf:2c:1f:b9:29:29:29:
         bd:05:fc:ad:2c:21:7b:44:7a:53:4c:b3:b1:9f:3f:80:cd:86:
         fc:b0:c1:16:e6:cb:67:18:e5:f0:f6:0e:60:32:68:63:7c:b6:
         1d:ec:bf:3f:6e:07:4c:e7:2e:e4:85:aa:8b:75:e2:a6:95:87:
         61:23:6a:12:b7:26:a1:74:dc:54:b9:22:84:ed:85:3a:2e:ac:
         b0:17:bf:91:8c:fd:e4:4e:16:73:71:f7:5a:97:1e:8f:cd:bb:
         14:30:8a:7b:24:37:a3:f7:82:af:b7:34:ed:ce:73:ef:77:fd:
         10:72:75:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:23:01 2025 by rpki-client