Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/EfWypNoPGinBqYJfd4slaqu129w.roa
File:                     EfWypNoPGinBqYJfd4slaqu129w.roa (raw, json)
Hash identifier:          +58eRv4azW/izVFfS70tceo03Wx/Ai6Z6bkHNhDNg4M=
Subject key identifier:   11:F5:B2:A4:DA:0F:1A:29:C1:A9:82:5F:77:8B:25:6A:AB:B5:DB:DC
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       03D7
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/EfWypNoPGinBqYJfd4slaqu129w.roa
Signing time:             Wed 18 Dec 2024 02:16:27 +0000
ROA not before:           Wed 18 Dec 2024 02:16:27 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        124.213.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 983 (0x3d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:16:27 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=11F5B2A4DA0F1A29C1A9825F778B256AABB5DBDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:dc:ad:65:b0:4b:ef:e7:7f:64:5e:39:3b:1e:
                    19:ad:b6:90:96:bf:a7:f5:61:f5:7c:af:e1:02:1e:
                    83:d6:18:f4:b7:c6:75:a4:ac:1e:a9:1a:f9:8d:56:
                    73:20:6d:b7:ac:fc:58:4a:00:df:02:c8:fd:48:41:
                    df:83:51:9f:05:15:b3:1e:e4:58:54:d9:4d:2d:21:
                    fe:c9:fb:55:19:c5:9f:38:f7:ab:ba:54:3f:9e:ed:
                    0c:c3:94:f5:31:2f:bd:f0:14:1e:68:4c:ff:99:40:
                    fc:ff:b6:e0:37:71:d3:f1:af:a7:04:f6:62:ef:9c:
                    9e:80:c9:0d:ba:c0:ad:c5:43:8e:eb:a5:57:ab:70:
                    27:b5:66:58:6f:11:dd:d7:1a:5d:e2:c2:4b:05:a1:
                    26:11:5c:9a:00:7c:78:3b:43:ec:76:9b:9f:1f:e5:
                    fb:de:25:d0:45:e9:4a:76:38:6f:2b:ee:49:af:10:
                    b2:fa:e2:a7:40:97:b5:65:a2:cf:8f:ce:1c:0c:c6:
                    cb:66:af:09:96:13:e4:fd:33:3a:0f:09:27:ac:82:
                    86:d8:64:44:de:1f:9d:f7:19:41:a5:17:78:81:a0:
                    7e:fd:1b:aa:30:08:87:8a:e9:a8:b2:76:52:2c:3a:
                    8a:24:5d:1f:53:84:0e:ee:75:ec:42:56:86:db:31:
                    6f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F5:B2:A4:DA:0F:1A:29:C1:A9:82:5F:77:8B:25:6A:AB:B5:DB:DC
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/EfWypNoPGinBqYJfd4slaqu129w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.213.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2f:6b:30:10:b2:58:b4:5b:5d:c9:aa:33:60:6d:6b:6b:41:8a:
         f1:d9:96:31:54:2a:59:2e:2a:9b:d7:d1:2c:78:a5:57:80:aa:
         ce:7f:29:bc:d5:bd:70:f2:c8:1e:99:b5:a0:96:13:a6:ff:e9:
         60:36:f0:90:1b:71:80:ed:9b:cd:ed:e4:eb:67:9f:f2:90:e8:
         c2:34:3d:be:b9:f4:93:80:86:ae:d3:d6:bd:29:3f:30:62:ea:
         6c:6f:75:9b:b4:15:3a:c5:0e:6e:35:fa:a9:b4:ab:87:7e:ef:
         c8:52:14:2f:a0:44:f5:42:4b:f3:d9:d1:60:ad:ce:ea:e7:c0:
         ad:40:b4:0b:b0:ff:37:00:6e:f6:05:04:e6:36:60:b4:3e:dd:
         85:6b:15:ca:94:1e:35:a9:62:63:46:14:bc:f6:f2:97:95:b5:
         cc:bc:c5:52:44:00:39:c7:8f:28:fb:74:b1:3f:15:f5:6c:d5:
         19:da:70:49:58:49:59:e1:35:a1:f9:a0:72:ce:99:dc:f7:59:
         ca:2f:20:11:4c:4b:ea:36:6e:37:75:1d:7a:1a:a0:3a:18:40:
         4f:74:31:96:fe:64:9d:b6:18:39:5f:a6:96:91:5e:8d:b0:1a:
         41:cb:4e:ba:a9:57:d2:4a:8e:28:2c:d3:3e:56:7d:eb:22:20:
         b8:b2:c7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:28 2025 by rpki-client