Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/7MpQ1OdmIoX0Qp6oSqyiLlv0jaA.roa
File:                     7MpQ1OdmIoX0Qp6oSqyiLlv0jaA.roa (raw, json)
Hash identifier:          Sco+f5ameRgy06vwhgNlvgcNkqnXzFGiom8MCJ/PXHc=
Subject key identifier:   EC:CA:50:D4:E7:66:22:85:F4:42:9E:A8:4A:AC:A2:2E:5B:F4:8D:A0
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       054E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/7MpQ1OdmIoX0Qp6oSqyiLlv0jaA.roa
Signing time:             Wed 18 Dec 2024 02:44:25 +0000
ROA not before:           Wed 18 Dec 2024 02:44:25 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        211.10.196.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1358 (0x54e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:44:25 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=ECCA50D4E7662285F4429EA84AACA22E5BF48DA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9a:7d:4d:c5:09:49:6d:ac:8b:5b:70:ff:f7:
                    43:6a:02:e4:0d:40:ce:dc:9b:b9:28:41:94:69:2c:
                    6f:7a:3b:2d:fc:ec:0b:97:3d:9d:c9:95:8b:c2:ab:
                    63:55:b1:28:e1:c3:2b:c7:db:6b:ab:be:eb:05:a2:
                    67:d6:72:d2:a3:6e:32:9c:17:94:45:2a:7d:bf:d8:
                    d5:0d:e8:12:63:c7:ff:85:16:f4:05:a7:1e:c7:3c:
                    40:53:7a:56:3c:d3:4a:01:df:30:9b:b2:81:62:ef:
                    be:52:50:63:a9:db:36:8b:98:f5:a7:e9:f9:ef:63:
                    bb:c4:7a:96:9a:7f:cd:c7:76:46:61:06:72:08:c2:
                    d0:7a:a2:1b:47:d9:45:e6:2d:4a:4f:4e:17:0a:3d:
                    25:fa:86:ea:2c:19:4c:3e:bd:c9:e1:7e:1b:c8:0e:
                    6a:c5:2b:2f:9a:4e:73:1e:66:d9:c2:97:22:52:a8:
                    c3:f2:ce:03:c4:ac:f7:33:20:9d:b2:69:30:78:93:
                    0d:50:51:16:ab:e5:88:27:ae:2a:e2:ab:f2:84:6a:
                    3c:14:b4:17:e6:f1:c3:aa:24:ec:54:b9:dc:af:76:
                    99:15:21:b3:20:67:7a:c2:d7:d3:8e:57:e8:4b:65:
                    12:b0:d2:b5:21:7b:09:91:4b:d9:56:f7:e9:89:7e:
                    64:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CA:50:D4:E7:66:22:85:F4:42:9E:A8:4A:AC:A2:2E:5B:F4:8D:A0
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/7MpQ1OdmIoX0Qp6oSqyiLlv0jaA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:88:f3:84:64:54:0c:ba:ca:ec:0e:47:05:60:20:5b:cf:bd:
         35:3e:a5:d8:3e:e0:01:80:61:3d:38:cc:68:a7:2e:a9:db:d5:
         38:79:33:ed:8d:d3:49:1a:a5:3c:e8:c4:29:dd:92:b6:d2:6c:
         89:4f:35:f0:d2:ae:54:c2:7f:95:06:b1:8a:7c:57:03:ae:b6:
         5f:99:f1:09:64:a9:dd:6d:f5:ff:d7:9f:f4:dc:f2:68:0c:c9:
         ea:88:4e:6e:87:8d:7d:36:b8:dc:e8:31:c1:05:f1:f0:c4:bd:
         36:15:9f:ff:a3:67:d1:49:c8:71:af:ba:f3:25:3c:9f:57:bc:
         bf:75:8d:12:3c:e4:9b:18:1f:96:b2:f3:54:7e:f7:ea:bb:be:
         c7:1f:a7:a8:74:37:15:f9:2f:3b:a7:3c:3b:47:38:59:83:75:
         c6:a2:9c:2c:02:00:95:ab:d0:59:f4:35:51:d6:88:8a:d9:e5:
         a8:be:58:cf:c0:de:7b:73:6f:4b:a2:b8:28:f5:f4:b3:21:fa:
         70:94:70:85:2c:41:37:65:8c:8c:a6:5d:b3:aa:aa:de:98:22:
         f2:f8:65:d1:1d:3c:5f:6a:07:51:4c:42:b9:a6:c3:b1:fc:bb:
         b3:3c:39:62:a0:a6:06:47:b5:01:ea:fc:29:00:d5:f6:b3:bf:
         34:63:44:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:20 2025 by rpki-client