Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/BoF4OP5177j3JFFZf3EjEE72VwE.roa
File:                     BoF4OP5177j3JFFZf3EjEE72VwE.roa (raw, json)
Hash identifier:          F0jaJ3sjoZpd7CP8rsZrZq8vHDtRtgY3FuGiA2Dv88Y=
Subject key identifier:   06:81:78:38:FE:75:EF:B8:F7:24:51:59:7F:71:23:10:4E:F6:57:01
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       03E4
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/BoF4OP5177j3JFFZf3EjEE72VwE.roa
Signing time:             Wed 18 Dec 2024 02:16:33 +0000
ROA not before:           Wed 18 Dec 2024 02:16:33 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        113.146.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 996 (0x3e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:16:33 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=06817838FE75EFB8F72451597F7123104EF65701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:16:0f:1d:95:e9:f7:d6:ec:32:aa:d1:fb:4c:
                    5b:e8:8f:54:c8:91:5f:b6:c3:37:76:c0:c9:39:c8:
                    15:80:21:6b:67:1d:d5:9b:e2:7c:ee:92:26:0e:fc:
                    90:9e:26:20:8d:f7:fd:b4:5f:70:b4:53:91:05:7e:
                    91:d7:c4:d8:fd:9a:67:f4:5f:be:98:95:82:25:9d:
                    94:19:07:79:97:85:49:58:d5:d9:2c:3a:e3:ed:25:
                    32:5d:99:f3:5a:9f:36:ea:ba:be:cf:a5:4d:e4:11:
                    f1:23:1f:02:1e:f8:7e:2f:ee:54:b3:ec:cf:2a:78:
                    62:df:c1:5e:9d:25:43:6b:dc:bd:09:cf:9e:8a:70:
                    a2:ca:fb:64:aa:e0:9f:ca:33:b6:9b:ad:f1:11:6d:
                    8b:53:92:62:a7:c9:1b:96:5c:81:cd:38:7a:a7:2d:
                    14:64:6e:7c:73:79:1c:ee:c0:67:77:72:1d:3f:02:
                    c0:07:62:69:8a:18:29:db:02:44:7b:09:0d:7c:43:
                    85:9f:ee:37:42:67:f0:54:fd:95:61:c3:2e:0a:4c:
                    ae:d7:bf:5b:39:a1:80:6d:eb:91:08:77:8f:bc:bf:
                    b9:3f:fd:02:1a:8a:6a:7c:6e:c7:e4:58:4d:cf:30:
                    18:b1:a9:a5:42:c0:73:33:c8:8f:25:68:75:36:90:
                    a1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:81:78:38:FE:75:EF:B8:F7:24:51:59:7F:71:23:10:4E:F6:57:01
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/BoF4OP5177j3JFFZf3EjEE72VwE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.146.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         54:46:58:e3:a6:42:cc:ba:9d:d7:3e:3e:e8:69:9e:28:fc:c7:
         fa:b7:67:74:3a:6d:9a:d6:f4:93:e6:23:f2:1d:50:7c:a6:37:
         44:b1:b8:d7:8d:f7:c1:32:29:8c:f9:61:05:d7:23:7a:d5:94:
         18:44:fe:d4:39:60:3f:27:1c:ed:9a:a7:80:3d:1b:18:35:1c:
         bf:aa:54:af:5a:dc:7b:92:5c:f0:86:3b:b2:ce:ae:1f:58:78:
         ac:da:93:7b:26:d6:3a:16:e4:40:b7:9f:f8:b4:b2:35:14:b1:
         12:04:2a:8f:2d:12:58:f8:6a:75:4a:d2:04:63:ee:7c:f2:d7:
         88:5c:e8:ba:0f:64:d4:9d:d5:46:13:94:6f:19:4e:23:a5:6b:
         99:21:0a:ee:ca:08:64:96:53:6f:0d:1f:53:d7:24:aa:b9:59:
         cd:4e:91:bd:fd:6a:b8:ed:f6:35:59:00:0b:2f:b8:6f:5d:99:
         0b:71:cf:39:0d:2a:b0:ea:d9:29:72:83:d9:52:09:bf:77:ef:
         ad:38:aa:93:79:a3:42:d2:06:20:cf:46:05:6d:0e:2c:94:66:
         95:5d:a3:c1:49:15:0b:75:5d:d1:47:05:f6:5d:bb:6f:28:7b:
         2e:8f:f5:2d:c9:62:fe:88:88:c2:6d:fb:f6:62:7a:b5:05:c0:
         cc:39:aa:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:17:22 2025 by rpki-client