Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/DACuS68dPKdHzAKFKiHhgcSMGFo.roa
File:                     DACuS68dPKdHzAKFKiHhgcSMGFo.roa (raw, json)
Hash identifier:          YCCkcKnNDsffmZSc3niKeilpc3U7Rmszghvt1AWVH6c=
Subject key identifier:   0C:00:AE:4B:AF:1D:3C:A7:47:CC:02:85:2A:21:E1:81:C4:8C:18:5A
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0560
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/DACuS68dPKdHzAKFKiHhgcSMGFo.roa
Signing time:             Wed 18 Dec 2024 03:00:49 +0000
ROA not before:           Wed 18 Dec 2024 03:00:49 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        106.186.64.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1376 (0x560)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 03:00:49 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=0C00AE4BAF1D3CA747CC02852A21E181C48C185A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f8:c8:b4:f6:44:03:d7:ae:59:39:b8:ef:1f:
                    2f:6d:72:06:d3:16:2a:00:35:18:e5:aa:5a:d6:1a:
                    b3:f4:c5:89:af:9b:4b:29:fe:8f:2e:e4:66:3a:3f:
                    80:d5:9f:03:1c:51:0b:fa:93:92:99:82:89:d3:c0:
                    5d:8e:f6:86:ae:8a:ae:88:b3:db:d4:ad:bf:1c:8e:
                    19:94:10:9a:cf:b7:86:bd:ec:06:d7:3e:94:ce:fc:
                    41:20:4b:e2:7a:0f:cb:fd:69:bd:51:83:6f:93:9b:
                    56:b5:51:17:ae:49:5b:e9:a1:30:e2:45:b1:78:81:
                    30:cf:3b:a0:88:87:46:4a:1f:04:34:a5:16:03:4b:
                    31:c0:79:af:af:98:ed:72:40:de:bc:2e:ec:4a:8c:
                    a1:ae:66:22:02:d8:8e:95:db:0c:eb:97:83:f9:30:
                    59:ca:1e:f4:cc:ec:5a:58:59:46:b3:5e:dd:63:7d:
                    66:ce:7d:d3:2b:94:6d:2a:42:db:78:68:53:80:bc:
                    b3:2f:8b:8a:c4:35:92:8d:10:6c:5b:9d:a5:19:e3:
                    99:02:af:c1:4d:2c:ee:6b:dd:fc:07:f9:c9:9b:4f:
                    50:e6:c7:c7:82:c5:8c:58:af:ab:66:86:15:80:95:
                    6d:72:d3:35:c5:f8:e8:9a:40:87:20:af:41:a2:59:
                    1e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:00:AE:4B:AF:1D:3C:A7:47:CC:02:85:2A:21:E1:81:C4:8C:18:5A
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/DACuS68dPKdHzAKFKiHhgcSMGFo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.186.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         62:2b:dd:e8:3c:8a:c0:8c:f9:e0:22:78:ab:6d:a5:51:56:30:
         da:93:f5:03:c1:ec:e5:2e:92:e9:40:a6:1c:a6:f6:9b:71:10:
         6a:c3:8e:71:7d:60:73:a1:bf:b0:4c:67:82:5c:5c:0e:98:80:
         ad:59:57:f6:e5:f8:7b:0c:ce:b1:e7:e0:a4:ba:10:ba:ac:b2:
         54:40:e4:72:6e:58:ca:03:ef:3a:92:7e:fa:c0:a6:f4:06:d3:
         44:ab:bd:5a:13:88:50:48:df:2d:24:78:83:0f:5b:3d:e6:dd:
         75:6c:63:4e:7d:e7:4c:60:f1:dd:ed:cf:a7:a0:86:34:66:41:
         0a:6d:46:a5:c2:ef:b4:30:c3:39:18:f7:b4:b1:95:dd:23:09:
         22:8b:50:2b:bb:e0:68:dc:36:c7:af:6d:d4:08:60:88:35:1f:
         cd:5a:04:24:fb:88:50:4a:ae:f2:f3:f6:07:24:66:93:61:ea:
         53:ce:a5:06:bf:39:f5:db:18:b4:04:20:13:32:83:05:1c:54:
         a7:5b:7a:34:e8:b2:0c:80:2a:51:cb:e8:4c:04:cd:85:cf:6d:
         0e:18:9c:ca:2e:a2:da:e7:e9:a2:e7:3b:e0:36:5c:fe:5d:33:
         be:5e:66:3e:24:c8:73:d9:a4:3a:d6:33:04:a6:5f:4a:33:a1:
         07:a9:78:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:11 2025 by rpki-client