Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/3O3leMIBIUx4n5CPavbLjWFpAe0.roa
File:                     3O3leMIBIUx4n5CPavbLjWFpAe0.roa (raw, json)
Hash identifier:          LGm5ID2Hsa0kbOVjowWbVstQiQ7+8Udv1HKfFDYqHZo=
Subject key identifier:   DC:ED:E5:78:C2:01:21:4C:78:9F:90:8F:6A:F6:CB:8D:61:69:01:ED
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0489
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/3O3leMIBIUx4n5CPavbLjWFpAe0.roa
Signing time:             Wed 18 Dec 2024 02:26:30 +0000
ROA not before:           Wed 18 Dec 2024 02:26:30 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        125.48.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1161 (0x489)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:26:30 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=DCEDE578C201214C789F908F6AF6CB8D616901ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f6:27:9d:ea:ec:16:17:74:f4:81:2d:d0:fc:
                    f3:dc:73:d1:b8:51:5a:78:bb:13:8b:71:56:80:db:
                    c5:ee:f2:d4:12:a1:f8:e7:af:72:e5:05:cd:de:bc:
                    f8:25:d9:f5:95:b0:d5:64:26:8d:b4:07:04:53:46:
                    58:71:64:53:88:85:76:3e:e2:06:26:25:1d:c5:be:
                    81:98:82:46:19:93:7c:b0:84:f2:c2:4f:ad:5c:1e:
                    e0:10:7e:f3:30:14:95:e7:34:34:86:4c:e0:5a:b9:
                    cb:3f:1a:66:8c:30:82:d3:aa:38:fc:96:51:df:58:
                    cc:0c:6d:ee:04:41:72:1f:db:da:2b:f1:36:b5:b8:
                    e4:c0:5b:7f:ee:7c:4a:82:81:48:88:a0:d8:90:0e:
                    1b:b5:1b:6d:ed:f7:e3:54:ff:56:91:1f:1c:ed:c6:
                    3f:2c:ff:18:e0:ac:8c:82:8e:a2:b8:ca:80:b8:dd:
                    be:f6:ef:f5:fb:44:3e:81:00:f7:b5:27:c8:1a:15:
                    82:6f:a9:1c:12:37:93:29:40:59:64:40:7f:d7:ac:
                    fe:30:f0:bd:85:7b:6d:4c:21:68:2a:64:54:bf:4b:
                    38:3a:81:14:40:57:cf:12:99:56:d3:da:1d:ac:5b:
                    e6:2b:1d:19:ef:5f:ac:bd:d1:21:12:45:bf:88:b1:
                    c3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:ED:E5:78:C2:01:21:4C:78:9F:90:8F:6A:F6:CB:8D:61:69:01:ED
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/3O3leMIBIUx4n5CPavbLjWFpAe0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.48.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9b:56:f6:34:53:31:e7:93:ae:16:9a:9d:fb:26:97:24:ef:ae:
         d8:71:c8:04:b4:30:20:fa:d9:40:64:ae:af:d2:d1:bb:8b:58:
         57:80:56:cb:79:11:d6:d5:00:f3:8a:9e:20:c4:f5:90:78:6e:
         b3:29:0a:64:c8:f4:1f:72:99:f3:01:b0:4f:52:08:d1:da:25:
         11:5c:fd:97:d1:d4:09:c4:c7:0f:4b:d9:9e:62:ef:5c:f7:52:
         ab:6d:09:a6:44:3e:53:95:1c:7a:56:a7:f7:22:f7:6a:b9:58:
         f1:3a:1c:51:63:2f:62:8f:5a:86:1a:bd:63:27:67:0d:84:78:
         95:ac:a6:a2:7f:a8:64:b2:7a:91:6d:df:d0:28:9c:1d:7e:fc:
         8e:0c:c4:aa:1f:82:d2:7d:a1:1e:b2:13:ce:da:8c:ab:0c:aa:
         54:26:49:4b:96:07:36:e1:ff:f0:94:59:ed:a9:78:63:00:ce:
         95:0f:a1:0f:e0:e2:43:0b:80:7a:ec:bb:27:aa:fc:c1:9f:35:
         80:9d:f0:fc:c9:d6:17:68:cf:82:61:fa:a7:d1:69:6f:22:62:
         64:7e:db:c6:23:6e:8c:13:51:a6:29:aa:33:33:a5:90:40:26:
         94:df:0b:57:34:46:5f:07:0c:2a:c2:95:33:d1:13:3a:23:89:
         aa:05:ed:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:39 2025 by rpki-client