Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/EWv90_H35kWeyzXBYH7UtmWv9cE.roa
File:                     EWv90_H35kWeyzXBYH7UtmWv9cE.roa (raw, json)
Hash identifier:          LDRHoOGez7RnIV3rQKdarVOYyCcM8sdvRPJa4JGpQeU=
Subject key identifier:   11:6B:FD:D3:F1:F7:E6:45:9E:CB:35:C1:60:7E:D4:B6:65:AF:F5:C1
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0416
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/EWv90_H35kWeyzXBYH7UtmWv9cE.roa
Signing time:             Wed 18 Dec 2024 02:18:58 +0000
ROA not before:           Wed 18 Dec 2024 02:18:58 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        59.142.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1046 (0x416)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:18:58 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=116BFDD3F1F7E6459ECB35C1607ED4B665AFF5C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1f:1f:2d:03:ed:de:ce:75:e3:d4:5b:67:40:
                    0e:9c:71:37:b8:b6:b2:4b:47:22:79:fe:a0:bf:04:
                    ad:27:87:c4:4b:59:88:20:c1:28:13:4c:47:53:cc:
                    8c:c8:4b:05:78:0f:a6:df:43:eb:2f:b3:9d:09:b5:
                    11:0f:2d:c2:18:59:20:5e:f4:d6:33:cf:cb:c7:68:
                    fb:68:84:a0:f6:9f:4b:0a:f3:35:ef:ec:b7:82:9f:
                    8c:15:42:ca:b2:fd:b9:37:05:8d:55:ce:b7:28:72:
                    d2:b8:a9:99:9a:7e:ef:7d:31:a9:22:bd:99:0b:29:
                    e8:bc:60:1d:36:77:48:27:5c:6f:6b:da:16:53:5a:
                    e7:45:94:e5:a4:b0:44:0c:d5:bd:26:21:4e:47:e3:
                    50:b5:ef:79:39:2e:5a:b9:9e:e1:47:2b:2f:af:41:
                    8e:ee:15:05:d5:b4:2f:ab:34:3f:c0:dd:89:69:6f:
                    de:a0:65:5a:66:5d:96:47:c5:74:47:c0:39:91:40:
                    82:0a:a4:07:62:79:74:a4:12:c0:dc:3c:6e:86:8d:
                    75:91:da:76:98:88:70:8e:b1:06:e4:9f:1f:2f:7d:
                    af:63:62:84:2e:c9:c2:42:aa:60:3b:d7:55:d6:c6:
                    5c:11:c8:2f:fd:a7:e7:62:ef:a1:bf:b0:1b:53:bb:
                    25:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:6B:FD:D3:F1:F7:E6:45:9E:CB:35:C1:60:7E:D4:B6:65:AF:F5:C1
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/EWv90_H35kWeyzXBYH7UtmWv9cE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.142.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         20:f1:1a:28:76:af:2b:9e:1e:ea:67:de:ba:da:2b:e8:78:a7:
         f0:e5:c4:3f:fb:cd:35:16:0b:a3:88:40:43:5e:44:f6:14:8e:
         63:d6:20:46:56:57:92:5a:06:b5:7f:cf:39:3d:70:4b:ad:ed:
         ab:45:c1:ff:e6:6a:92:0e:7e:b3:f5:fa:d5:49:c5:be:9a:42:
         24:c2:70:0f:7c:e5:33:8d:17:cc:eb:fd:4a:8d:9e:4b:f2:c7:
         21:45:0a:59:50:25:f2:7d:0a:24:99:67:9c:39:ea:33:f4:4d:
         eb:79:bc:98:d7:2d:e5:40:ee:6b:6d:d0:04:d5:9e:11:5f:dd:
         f8:46:b0:f7:85:7b:86:eb:e2:cc:5b:e5:4f:b9:93:4d:22:50:
         69:e2:5f:36:b4:ec:98:1c:5b:cc:87:a8:a4:9b:0c:f6:a4:52:
         93:1b:34:a7:68:f1:0c:4a:88:2b:e7:d9:91:d6:5d:b2:49:ee:
         24:5b:94:2d:5a:fa:5b:9e:fa:ad:93:fd:5a:33:12:5b:93:4d:
         a8:eb:28:6c:8c:bd:e3:47:a6:cf:0a:47:c1:67:4a:cb:41:ab:
         d9:37:c8:48:71:54:5e:28:2b:bf:fe:f6:fd:e6:a9:68:7e:b8:
         cc:da:05:21:58:a0:1c:fd:a4:19:49:d1:d9:5b:ed:b3:4e:01:
         0d:e7:5a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:08 2025 by rpki-client