Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/DW5mPRDCq08bYe8mVa2aEIYka60.roa
File:                     DW5mPRDCq08bYe8mVa2aEIYka60.roa (raw, json)
Hash identifier:          5vKOimazThVOm3w14S8R0nmO+UbVMzaH2kY49G3gJcA=
Subject key identifier:   0D:6E:66:3D:10:C2:AB:4F:1B:61:EF:26:55:AD:9A:10:86:24:6B:AD
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       04DF
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/DW5mPRDCq08bYe8mVa2aEIYka60.roa
Signing time:             Wed 18 Dec 2024 02:37:05 +0000
ROA not before:           Wed 18 Dec 2024 02:37:05 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        210.235.192.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1247 (0x4df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:37:05 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=0D6E663D10C2AB4F1B61EF2655AD9A1086246BAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:82:52:7f:46:3b:9b:24:8c:83:bb:c5:6f:fb:
                    53:1f:8b:39:18:f0:16:e3:ce:fd:f9:83:fc:27:a4:
                    63:9e:4b:75:b6:6e:52:37:6b:8d:34:ec:67:f9:3d:
                    e5:18:9e:45:14:86:a6:cb:eb:71:42:96:d9:4b:5b:
                    4c:3b:02:21:b8:92:07:c7:6f:6c:63:0a:95:49:a7:
                    ed:c3:a5:b2:6e:73:8c:f3:15:31:29:1b:23:b7:71:
                    ef:5d:37:c6:6e:a4:8f:a6:ef:05:16:4e:59:01:33:
                    31:d2:65:4a:0e:12:5b:35:75:f1:5f:27:b0:24:f2:
                    b5:51:0a:ff:e6:54:cf:d3:ac:1c:20:51:85:84:78:
                    c7:26:fa:0b:b5:22:8b:a4:77:92:b9:39:3b:e0:92:
                    25:d3:e5:1d:53:1c:d9:d8:8e:7d:8c:37:12:00:74:
                    61:17:f2:29:2b:89:3d:d3:eb:e6:0f:3c:b5:79:5f:
                    72:c4:85:31:63:d3:e0:a3:a2:20:a7:7b:ff:37:ff:
                    b0:c0:9a:9f:57:35:aa:25:39:c7:47:aa:af:76:e4:
                    50:7f:41:44:d3:19:bc:c0:be:5b:2b:6b:95:87:13:
                    cc:ae:46:7e:a0:2c:91:d7:bd:ec:e0:43:1d:0c:69:
                    d4:11:a5:92:a4:10:51:34:51:64:1b:1d:e6:e3:4b:
                    dc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6E:66:3D:10:C2:AB:4F:1B:61:EF:26:55:AD:9A:10:86:24:6B:AD
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/DW5mPRDCq08bYe8mVa2aEIYka60.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.235.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3d:c6:86:60:2c:cd:42:c0:3f:31:62:2e:bd:5a:26:a5:69:d1:
         ef:54:a4:ba:a8:0b:0a:5f:8d:07:e6:40:61:12:2a:f8:d8:70:
         00:b8:1f:0b:91:f5:d5:c2:a4:78:84:5b:3e:86:4f:00:bd:5f:
         d1:42:d4:af:85:01:05:99:9d:b7:1b:77:51:de:a0:d1:7f:5b:
         83:18:22:b0:09:9f:53:97:8e:06:61:ad:08:fa:d1:50:44:27:
         ec:19:ab:2b:95:7c:a2:79:7e:b4:b6:00:d1:f9:ac:ab:3f:7a:
         1b:ed:ee:ec:77:45:d2:62:d2:46:d8:c0:f7:c4:70:9d:9b:4b:
         79:e8:40:53:37:c6:b8:28:04:b2:35:75:c1:c9:c8:cc:d1:a0:
         7c:4c:56:8f:9a:09:f9:d7:d5:a6:ba:32:8d:7b:24:2f:5d:11:
         e2:41:c1:3d:cf:70:63:e8:29:d8:21:56:97:a4:95:00:60:a7:
         e0:cb:43:0d:7c:d0:fa:d6:e8:c9:68:ad:f6:38:e2:e3:f1:ed:
         1f:a3:fc:cf:8c:2d:8c:61:7d:72:fa:4e:52:04:42:a8:48:9b:
         28:ff:dd:a7:90:45:65:cf:a3:72:b7:5a:e4:4c:58:fd:c1:92:
         1b:3a:a8:21:7e:ae:ab:92:0f:f9:0b:79:07:e9:01:b0:e8:d6:
         3a:82:44:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:20:23 2025 by rpki-client