Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/B-0Iw8JSuqyXg2SmtwTFInr4VSs.roa
File:                     B-0Iw8JSuqyXg2SmtwTFInr4VSs.roa (raw, json)
Hash identifier:          CXP2WZuMn0NiJi2yIAB/tL/+7PucWauZeRvHdeukqI8=
Subject key identifier:   07:ED:08:C3:C2:52:BA:AC:97:83:64:A6:B7:04:C5:22:7A:F8:55:2B
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       056F
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/B-0Iw8JSuqyXg2SmtwTFInr4VSs.roa
Signing time:             Wed 18 Dec 2024 03:00:56 +0000
ROA not before:           Wed 18 Dec 2024 03:00:56 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        106.184.64.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1391 (0x56f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 03:00:56 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=07ED08C3C252BAAC978364A6B704C5227AF8552B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:46:46:27:df:3e:6e:cc:d2:42:41:7e:7d:92:
                    c8:cf:24:86:6e:0a:0b:36:c0:96:ce:c4:a0:3c:20:
                    23:e2:38:77:be:1b:f1:73:8a:87:b5:4a:62:88:e1:
                    23:1c:86:60:f6:ac:b3:b1:d4:71:f9:92:43:10:33:
                    87:8a:06:da:52:d0:5f:d6:46:b2:04:59:a2:78:5c:
                    fe:29:01:d6:22:21:5d:ce:c6:99:db:93:48:8e:90:
                    10:1b:9a:2e:ac:ff:29:c8:05:0e:a4:2e:95:11:d9:
                    c9:af:b7:08:0e:ec:8f:7a:63:bc:47:ac:d3:41:68:
                    43:eb:77:e4:df:58:7a:c0:9f:4c:54:d8:40:e9:8b:
                    00:ad:65:11:ca:27:c3:96:92:42:7e:32:a9:7f:ba:
                    2c:e7:14:18:a8:d7:fd:8f:57:ea:ef:3f:14:40:cc:
                    e3:9e:c8:2e:df:8c:bc:83:c6:c1:73:70:fc:cf:ba:
                    f3:f7:20:72:6f:74:ba:6c:67:aa:87:e5:1b:be:cd:
                    9d:33:46:d9:2e:3d:80:e5:37:0f:17:ab:bc:fd:8f:
                    3b:1a:d2:6e:6d:ab:95:2d:48:e9:4e:65:d5:20:7a:
                    78:8b:38:c7:d1:13:7f:16:2a:a0:9f:ed:6a:b1:42:
                    de:a0:f9:14:ed:76:57:ba:38:30:c9:35:88:78:15:
                    23:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:ED:08:C3:C2:52:BA:AC:97:83:64:A6:B7:04:C5:22:7A:F8:55:2B
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/B-0Iw8JSuqyXg2SmtwTFInr4VSs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.184.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7a:a7:d7:6b:dd:9d:61:97:c6:65:3e:2c:8d:92:51:e4:6a:a8:
         b5:23:99:a7:d9:74:86:67:29:80:a0:8c:7c:54:7a:61:e4:d1:
         2a:f9:ab:97:47:0f:f7:65:47:d0:d4:3d:92:26:fa:87:5d:fd:
         3d:f6:5d:6f:53:35:4d:3a:b6:bb:8f:55:70:c8:f6:bc:22:f7:
         03:82:3d:eb:21:24:60:43:1b:82:64:32:86:53:a9:68:4e:b4:
         85:92:af:a4:7c:ab:e1:d6:f4:e8:f0:f4:4e:17:ae:9b:6f:fd:
         bf:5a:f0:c1:03:fa:9d:86:9d:b3:d6:04:cd:d8:86:7e:75:14:
         11:2c:9d:29:16:8e:9b:6b:31:6b:80:1d:49:53:f2:26:d2:08:
         ba:6f:70:e2:9b:9d:56:ac:c2:9a:fa:f7:5e:cf:dd:aa:7f:7a:
         cc:f8:17:d3:21:aa:08:0f:11:f1:7f:a1:c6:29:47:98:cf:68:
         9c:9c:96:55:65:8d:08:79:fe:42:ff:86:45:c3:69:01:35:ce:
         6a:74:02:9c:74:16:e4:0d:9e:c6:5a:09:e9:47:56:45:29:a4:
         4d:75:5d:a5:18:fb:fe:ff:eb:45:55:b7:fd:3f:01:fe:4f:ff:
         83:55:ee:eb:72:62:ed:5b:6f:2e:f7:61:8e:1a:3f:84:88:c2:
         e7:89:94:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:29 2025 by rpki-client