Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/9swDzr9TRPirVQZqAKHQMTT4VXk.roa
File:                     9swDzr9TRPirVQZqAKHQMTT4VXk.roa (raw, json)
Hash identifier:          wFbm2aFX97y3olM14L2LGuqhyAYc15xosgzCJcwLypE=
Subject key identifier:   F6:CC:03:CE:BF:53:44:F8:AB:55:06:6A:00:A1:D0:31:34:F8:55:79
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0563
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/9swDzr9TRPirVQZqAKHQMTT4VXk.roa
Signing time:             Wed 18 Dec 2024 03:00:51 +0000
ROA not before:           Wed 18 Dec 2024 03:00:51 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        210.188.128.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1379 (0x563)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 03:00:51 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=F6CC03CEBF5344F8AB55066A00A1D03134F85579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:21:9b:2d:f8:63:1a:3e:84:fc:ba:14:c1:85:
                    21:32:eb:f5:a3:46:96:95:95:c5:09:fe:a2:c1:d2:
                    a8:0e:56:fe:a9:cb:7d:1f:1b:89:99:68:2c:7a:eb:
                    c7:c3:8d:63:20:a7:57:b6:86:44:02:53:b6:08:e3:
                    cb:49:22:74:35:a7:ff:32:f2:b4:31:1a:2e:15:60:
                    b4:aa:ac:18:f1:a6:f1:4f:51:60:95:26:cf:a4:0f:
                    49:90:9a:d8:68:ba:72:07:37:59:57:38:cf:90:6c:
                    52:cd:79:7b:80:cb:9d:37:83:89:86:a8:14:3c:a8:
                    75:40:ca:58:27:09:64:b4:07:5d:f4:d2:4a:73:22:
                    45:8b:e4:0d:ee:8f:d4:b8:65:e5:96:1d:08:d9:77:
                    54:c1:26:60:34:59:3d:ea:82:52:00:f6:ea:26:14:
                    ba:11:f0:3f:a2:a0:2c:09:19:d2:4e:fe:f1:32:76:
                    64:f3:03:34:cb:d8:65:9e:84:8c:af:06:b5:77:35:
                    2b:ee:2b:d8:05:bf:35:ef:b4:b5:67:f7:3e:a6:49:
                    7c:9b:30:22:b2:fd:a8:a6:cb:45:4f:e5:29:cc:fd:
                    0e:93:e7:3b:cb:83:88:ed:6b:85:b0:41:3f:bb:8b:
                    58:dc:08:74:d3:9f:0b:f0:4f:6e:80:27:ab:1d:3d:
                    94:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CC:03:CE:BF:53:44:F8:AB:55:06:6A:00:A1:D0:31:34:F8:55:79
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/9swDzr9TRPirVQZqAKHQMTT4VXk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         53:fe:12:6f:c4:24:7f:47:10:1a:72:55:20:41:c6:c1:c7:37:
         3b:60:02:de:8b:ae:bf:f5:66:a9:d7:cb:7b:f2:36:ad:45:60:
         f2:62:9d:18:64:42:a3:9e:10:c1:66:b6:49:03:3c:bc:3a:07:
         0d:14:53:9e:3b:8a:d9:f8:6d:4a:bb:70:3a:86:9a:2d:e8:bc:
         1b:05:4b:17:dd:fb:bf:d3:1c:69:ce:30:e5:c9:ba:69:5c:7e:
         1f:39:c3:e2:e9:c9:c9:07:66:32:89:09:71:d0:3d:a6:f9:3c:
         53:ae:60:56:7a:b2:bc:9f:1b:af:41:81:25:71:61:65:7d:db:
         e6:88:eb:37:f9:c2:c3:5e:18:62:71:68:38:9a:c8:41:3a:09:
         e3:c4:ed:1c:26:06:e6:3c:a4:77:30:c6:c3:63:59:a3:6f:68:
         fe:76:8c:99:69:56:aa:a2:70:a2:72:0c:3d:bb:98:95:2b:9c:
         16:72:18:28:c6:24:da:37:c6:cb:3e:1c:15:1a:80:d5:cf:42:
         e5:4d:2e:ea:6a:3b:f6:82:b5:18:ac:5c:a3:19:eb:bb:ad:0d:
         4b:f4:fe:ac:d7:8a:c6:09:f0:63:7e:7e:83:e4:cb:92:9b:cb:
         b4:7a:d6:fd:88:57:9f:f1:86:bf:1d:55:39:54:57:36:77:e0:
         e3:d3:e3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:44 2025 by rpki-client