Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/F4hDEv25mVhdqJ3EjNo_OY9Gzzs.roa
File:                     F4hDEv25mVhdqJ3EjNo_OY9Gzzs.roa (raw, json)
Hash identifier:          OrWFLM9Iw30zc7/z23lprHC19Nb1bt1xRixdKHqxQEY=
Subject key identifier:   17:88:43:12:FD:B9:99:58:5D:A8:9D:C4:8C:DA:3F:39:8F:46:CF:3B
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       04C6
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/F4hDEv25mVhdqJ3EjNo_OY9Gzzs.roa
Signing time:             Wed 18 Dec 2024 02:32:25 +0000
ROA not before:           Wed 18 Dec 2024 02:32:25 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        59.131.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1222 (0x4c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:32:25 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=17884312FDB999585DA89DC48CDA3F398F46CF3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:18:89:27:bf:26:a1:6d:c2:df:b1:f3:d4:59:
                    94:7f:06:b0:4b:35:fc:96:37:25:f5:8c:8e:08:7e:
                    fc:eb:4b:6f:f8:43:71:58:fe:50:70:a8:9e:05:eb:
                    5e:16:4a:7a:c1:0b:24:ef:35:90:a5:99:f9:2c:aa:
                    da:ab:df:39:04:f8:45:21:f7:c3:22:84:e2:8f:4f:
                    6c:45:0c:6b:5d:01:be:ff:4f:e6:6e:e7:1a:ad:65:
                    8a:64:fa:dd:b4:6c:02:99:53:b2:52:21:e1:0c:4d:
                    0e:f9:f6:76:0b:29:98:75:44:ef:92:f3:6f:0c:23:
                    57:fd:72:b1:c7:f7:7e:3e:2f:a9:fe:f9:a9:21:7f:
                    de:2c:3e:19:28:a0:b9:d5:a8:54:16:b4:35:28:e4:
                    7f:75:ed:9c:70:7b:3e:4b:88:ba:a0:6c:30:1b:d1:
                    22:0d:65:45:7d:b3:6e:55:26:24:79:af:c0:61:ae:
                    93:00:77:ff:56:ce:ef:b1:db:55:4b:99:09:b4:31:
                    ab:87:80:6e:f1:87:cc:1f:d6:b6:43:fc:d0:a0:b0:
                    83:32:55:6d:33:da:02:b7:09:19:4d:3b:fe:d3:39:
                    97:96:27:38:d1:49:20:df:d7:ad:ec:86:f6:24:5e:
                    6c:7f:85:7e:a7:60:04:4c:da:a1:93:0b:0b:6a:ff:
                    84:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:88:43:12:FD:B9:99:58:5D:A8:9D:C4:8C:DA:3F:39:8F:46:CF:3B
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/F4hDEv25mVhdqJ3EjNo_OY9Gzzs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.131.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         04:d9:ae:82:b0:62:ee:9b:80:0d:21:f7:a4:ea:79:ae:37:47:
         93:42:95:b1:12:01:09:56:41:69:9d:83:8f:30:c4:8b:7c:96:
         16:26:ab:a9:8c:d1:0d:69:02:9c:92:c7:9c:58:49:f5:5c:c0:
         dd:bc:3d:52:56:39:7d:00:9f:e3:fe:e5:59:20:c9:d6:39:5a:
         93:ec:24:17:e7:76:b9:26:86:cc:0c:06:12:99:c1:d3:74:31:
         dd:78:a2:e5:32:63:83:54:ee:8b:72:5e:29:02:3c:21:f0:a0:
         8a:4b:6d:a7:cf:18:3e:da:42:7e:f0:3e:d5:fc:06:63:bd:7e:
         9e:db:e9:cb:a1:26:21:59:c5:a6:31:29:6b:3b:46:d6:aa:aa:
         85:af:82:86:8d:ee:73:85:57:26:c9:76:23:ea:85:54:c7:7f:
         22:6e:9b:fa:67:5e:d1:f9:31:d0:47:55:1d:eb:58:e5:d6:7c:
         12:19:d0:b1:cf:a2:f4:b5:ae:b9:13:ae:b3:26:32:ff:55:0b:
         5d:f6:b7:ab:45:f6:00:35:5e:3d:be:c5:e6:f0:e9:89:5b:2c:
         27:2b:c2:16:15:57:53:42:5e:4f:77:d3:65:c3:87:88:b6:8d:
         97:20:da:b6:ed:b9:b5:b2:7b:37:67:c9:57:f4:ed:ab:fa:df:
         07:13:d0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:14 2025 by rpki-client