Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/4FYqJOwo79Na7El4A_J84VdV04s.roa
File:                     4FYqJOwo79Na7El4A_J84VdV04s.roa (raw, json)
Hash identifier:          7s6QZlUeSmqtRyMl7ZUooy1b7aet+hLgVbxhg4VKkpw=
Subject key identifier:   E0:56:2A:24:EC:28:EF:D3:5A:EC:49:78:03:F2:7C:E1:57:55:D3:8B
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       04EC
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/4FYqJOwo79Na7El4A_J84VdV04s.roa
Signing time:             Wed 18 Dec 2024 02:37:10 +0000
ROA not before:           Wed 18 Dec 2024 02:37:10 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        210.198.118.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1260 (0x4ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:37:10 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=E0562A24EC28EFD35AEC497803F27CE15755D38B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:62:35:0b:0d:4f:84:47:e3:30:69:91:b9:5b:
                    c7:13:f3:ce:10:a1:ee:58:26:fe:84:70:da:10:20:
                    af:f0:85:d1:10:4b:57:1b:9f:94:06:7f:38:39:62:
                    8c:32:88:6e:3e:33:34:fe:4c:41:34:a9:57:e4:ec:
                    4f:d0:6b:37:7e:0b:f9:b2:82:80:9f:ad:e0:bb:74:
                    65:53:66:cc:73:6c:b2:41:cd:77:bd:c7:9c:73:54:
                    69:cb:07:86:ad:9a:35:99:d7:42:e5:c7:9d:84:16:
                    ef:65:23:f7:ba:57:46:c8:3a:63:6c:6e:6c:41:52:
                    7e:2b:58:78:46:bf:8f:3f:d3:e4:59:b2:2b:e1:44:
                    58:f0:4b:c9:c5:81:04:04:76:6a:39:4d:71:88:c9:
                    18:24:db:1f:0b:56:aa:7c:99:88:bf:0d:a3:40:18:
                    df:e8:a3:6d:e3:03:ef:b8:8b:b3:28:41:88:76:98:
                    f7:68:7e:2a:c9:9e:89:63:8c:9b:4e:f9:fb:d3:e9:
                    f6:7c:ad:6f:04:d4:cf:41:63:e8:c0:90:2d:7a:34:
                    27:f7:98:1d:b4:63:48:e4:3f:c9:1d:85:e3:8e:86:
                    f8:df:cc:76:8d:d1:07:b0:b6:92:0c:2e:72:da:0c:
                    75:45:a1:63:cd:28:8c:b0:6f:b5:66:08:ed:d9:ea:
                    7c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:56:2A:24:EC:28:EF:D3:5A:EC:49:78:03:F2:7C:E1:57:55:D3:8B
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/4FYqJOwo79Na7El4A_J84VdV04s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.198.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:bb:71:fb:26:0a:36:cb:dd:6b:4d:e3:80:a0:f1:c7:ce:d5:
         38:c5:a8:9c:80:bb:e8:d5:6c:15:45:b0:3c:fd:10:5a:ab:4e:
         48:90:77:07:d7:58:87:33:84:24:e6:cc:f8:1b:73:6d:3b:2e:
         0f:eb:26:c6:7e:6e:92:95:15:b4:40:53:12:e1:5e:8a:dc:00:
         fc:12:87:3a:31:6d:92:36:94:c1:a7:ee:87:83:4d:82:ee:36:
         8b:81:3b:41:9a:88:61:75:90:ff:ad:4f:d7:8e:51:5a:48:a7:
         53:13:07:0c:42:a8:f3:c0:5c:2d:a2:71:67:cc:83:62:9e:a8:
         bf:05:5c:67:1e:91:45:b7:74:6f:ba:93:29:37:f8:ed:0d:b7:
         2c:4b:fd:9c:a4:33:b2:7f:fd:29:fc:a2:01:8c:8c:17:26:7c:
         b5:76:dc:b6:f5:f1:1e:cc:1f:54:3d:9d:80:a9:e8:d5:f6:41:
         17:57:87:8c:e8:5b:b2:65:85:36:e9:31:92:f8:13:f7:fd:af:
         b0:3e:eb:51:36:7e:72:0d:b1:b1:98:f3:ce:34:da:83:16:2c:
         b8:76:26:23:f4:60:07:76:fc:62:da:5d:10:e8:a0:19:20:62:
         d6:7e:41:4f:71:5a:43:a2:e5:b0:86:b9:3d:65:15:64:ed:27:
         d6:e2:c4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:40 2025 by rpki-client