Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/7ZYV-XLcTvINENUo7VTeYWZI49E.roa
File:                     7ZYV-XLcTvINENUo7VTeYWZI49E.roa (raw, json)
Hash identifier:          eiMmmJKg40jPvDwm4nZPwwJ5LLXx73v4NeFj3+sm/go=
Subject key identifier:   ED:96:15:F9:72:DC:4E:F2:0D:10:D5:28:ED:54:DE:61:66:48:E3:D1
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0473
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/7ZYV-XLcTvINENUo7VTeYWZI49E.roa
Signing time:             Wed 18 Dec 2024 02:26:22 +0000
ROA not before:           Wed 18 Dec 2024 02:26:22 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        203.181.96.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1139 (0x473)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:26:22 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=ED9615F972DC4EF20D10D528ED54DE616648E3D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8e:cf:9b:48:6c:48:6e:fa:02:d8:10:a5:e4:
                    8d:5a:cf:4a:76:89:6e:cd:dd:50:e0:f4:e9:b6:29:
                    3e:16:f3:b1:da:14:0f:ae:8d:99:78:ae:08:81:11:
                    26:c2:d6:d9:30:7b:97:fc:bb:6c:17:3f:92:64:a9:
                    49:7a:e4:8e:7c:3f:86:c0:7f:a9:34:ab:a4:c2:54:
                    ae:71:3e:7a:36:07:67:a0:bf:ff:ec:9f:93:bb:78:
                    42:41:c4:f6:93:73:27:de:00:0f:92:60:25:64:2d:
                    11:bb:4c:4a:ae:3c:7e:1c:ec:23:8b:87:50:76:7e:
                    0f:95:ce:4a:6f:ac:3a:cf:c2:60:70:9b:e2:08:35:
                    89:50:a0:c6:48:69:5e:d3:79:2b:0d:26:7b:4d:3f:
                    a0:8c:13:94:7e:81:34:3e:e2:4c:da:49:86:a9:85:
                    5b:c1:ac:31:12:55:9c:36:93:43:9f:1f:1b:95:06:
                    02:67:48:7a:d4:d1:d5:6f:63:d0:41:c5:a5:eb:a6:
                    b2:38:09:ad:ee:0c:ea:0c:fa:32:c7:13:49:c0:97:
                    4b:70:71:67:1b:77:b3:b5:2d:1d:b5:a6:1d:73:d3:
                    ee:b6:56:d8:69:9c:fb:e9:6a:ed:0f:6c:ff:47:c9:
                    6d:db:f9:7c:74:4f:a0:c9:a3:10:18:dd:89:39:a6:
                    17:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:96:15:F9:72:DC:4E:F2:0D:10:D5:28:ED:54:DE:61:66:48:E3:D1
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/7ZYV-XLcTvINENUo7VTeYWZI49E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.181.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         28:a8:69:6a:35:da:47:e4:de:ba:72:ee:ce:8b:2e:d5:da:22:
         8b:e4:92:65:dc:a6:c4:95:50:d3:96:1f:f1:82:f8:cc:42:85:
         26:ae:e8:6a:83:71:fa:7a:b0:c7:c8:8c:aa:9e:13:4b:e4:b2:
         6a:6b:67:d1:f9:0f:41:76:a5:d7:ee:f4:86:6f:b7:73:df:29:
         e0:a5:fa:21:92:19:57:52:bc:f0:4f:11:1b:a1:59:8e:34:cc:
         2b:de:b2:a6:b7:a7:fb:11:64:d5:d0:19:74:38:83:be:12:64:
         fa:7f:b9:95:f0:29:29:25:74:2c:19:72:83:c6:c2:ef:19:7e:
         f0:be:6a:c3:b4:f2:67:fe:aa:6f:c3:f3:ef:69:e9:92:ee:26:
         13:77:28:a1:d0:72:76:b4:6a:96:d6:f4:d7:84:f3:3f:47:21:
         91:00:56:8d:87:af:14:17:0d:a7:1c:88:16:bf:a2:39:5f:4e:
         d4:da:2f:37:82:a7:98:27:0d:fe:bf:0f:41:18:f7:81:65:62:
         44:32:74:86:9b:a3:ae:92:ce:19:b5:4c:08:c4:f9:b3:17:57:
         db:b8:83:fb:cf:0d:7b:5c:9c:ce:77:12:c1:af:c3:ff:36:4c:
         e7:6f:76:39:f2:be:bd:b4:ec:4a:0c:23:ad:58:2f:c5:a0:1d:
         ab:dd:58:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:39 2025 by rpki-client