Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/AMOQad-L9Nx-z7D5DKOcqYlfwOQ.roa
File:                     AMOQad-L9Nx-z7D5DKOcqYlfwOQ.roa (raw, json)
Hash identifier:          ZzAsuWA9w23ko5E7A9M36YFp7T3hSPDVwLif0JG3qBU=
Subject key identifier:   00:C3:90:69:DF:8B:F4:DC:7E:CF:B0:F9:0C:A3:9C:A9:89:5F:C0:E4
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0561
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/AMOQad-L9Nx-z7D5DKOcqYlfwOQ.roa
Signing time:             Wed 18 Dec 2024 03:00:50 +0000
ROA not before:           Wed 18 Dec 2024 03:00:50 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        210.250.0.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1377 (0x561)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 03:00:50 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=00C39069DF8BF4DC7ECFB0F90CA39CA9895FC0E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f0:2f:af:da:db:da:df:a7:66:9e:40:db:24:
                    b4:f4:73:80:92:3a:bc:af:ca:0b:c5:35:09:55:80:
                    1a:19:03:da:87:19:88:9f:3f:91:2f:4f:71:8b:88:
                    11:e5:bb:eb:5f:4c:41:86:86:0b:58:5b:83:92:48:
                    f2:f7:97:97:65:b1:54:9f:1c:56:28:60:ba:12:e5:
                    2e:35:24:35:a9:d0:c0:3b:af:a3:d4:e3:28:0e:ab:
                    ef:9d:d3:da:ce:f8:7c:61:75:0d:4f:6b:71:74:1d:
                    15:9a:c6:25:e5:bf:d8:64:34:c9:7d:79:01:d0:09:
                    d7:35:17:cd:96:9f:66:42:db:8b:78:9d:e0:fc:2a:
                    a9:b2:88:50:e8:e7:1a:39:36:37:f7:27:a4:ba:e7:
                    07:2c:92:5e:fd:61:a5:ff:be:9f:20:d5:c3:82:a6:
                    77:3e:3d:eb:f8:00:a4:2a:c3:41:9d:48:8a:82:c8:
                    f9:63:ec:1a:38:7e:be:88:76:e8:de:36:ee:53:7b:
                    fd:05:a4:69:f2:39:2b:bc:c2:44:cc:67:4e:f9:c5:
                    11:25:28:7d:f6:58:8f:ed:e7:95:f7:ac:0d:8a:10:
                    29:84:c2:85:7b:75:f4:11:60:f7:32:7c:6f:ef:ac:
                    4c:2e:58:eb:99:01:e8:73:ea:45:3f:2d:bd:fc:49:
                    72:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C3:90:69:DF:8B:F4:DC:7E:CF:B0:F9:0C:A3:9C:A9:89:5F:C0:E4
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/AMOQad-L9Nx-z7D5DKOcqYlfwOQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.250.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5e:8b:cc:9b:48:0c:37:5d:73:37:03:87:d8:3f:ce:29:93:ea:
         5c:7a:37:56:f7:07:49:ff:9a:80:19:3e:a3:8b:aa:ac:03:a4:
         3a:fe:93:13:b8:21:46:57:f4:08:13:50:67:28:9e:75:e5:6a:
         c6:3d:29:c1:2f:d8:b7:19:e7:9c:91:09:94:06:31:39:e8:c3:
         70:03:3c:b1:1f:5e:c6:f1:da:2b:4a:7f:ad:28:c9:4d:0c:f9:
         95:69:ef:15:e8:4e:7b:3a:2e:75:f9:e4:dc:22:9d:98:10:d4:
         da:2d:d0:cf:87:b2:c8:29:37:5a:42:f5:56:cf:92:32:5c:bc:
         90:2b:80:ab:b6:e1:4b:f8:2b:91:82:1b:bd:c8:02:dc:27:70:
         8f:38:db:33:09:2e:21:13:1d:e7:30:55:ae:aa:a5:3b:c6:7f:
         a9:55:7e:0c:0f:3b:b0:8c:e8:63:9d:73:23:1d:cd:8b:3c:47:
         73:81:5a:60:7c:05:51:17:bb:d4:ff:87:5b:ab:7b:14:7e:0f:
         0a:60:cc:ae:c6:f6:5a:9c:66:58:72:ae:a0:12:c2:1e:30:90:
         20:26:c3:35:7c:b2:6e:3e:41:08:8c:64:ea:9a:1e:87:7d:0b:
         2b:7b:b6:2c:85:b7:26:37:16:7f:db:e8:bb:d4:ab:71:64:75:
         a1:00:a2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:41:58 2025 by rpki-client