Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/FL-ON_hsnWmXoEZpJhb2-dc39QA.roa
File:                     FL-ON_hsnWmXoEZpJhb2-dc39QA.roa (raw, json)
Hash identifier:          RnWDjBDtB87pCxZn/ZEwnrwr1Q6sHNCS82ejVhaEwN8=
Subject key identifier:   14:BF:8E:37:F8:6C:9D:69:97:A0:46:69:26:16:F6:F9:D7:37:F5:00
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0467
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/FL-ON_hsnWmXoEZpJhb2-dc39QA.roa
Signing time:             Wed 18 Dec 2024 02:24:15 +0000
ROA not before:           Wed 18 Dec 2024 02:24:15 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        118.158.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1127 (0x467)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:24:15 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=14BF8E37F86C9D6997A046692616F6F9D737F500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:32:10:bf:66:1c:7b:0f:cc:1b:43:79:f8:a1:
                    d1:bd:a6:af:ef:7d:86:d2:bc:82:02:c6:4e:53:9b:
                    40:39:af:66:e5:6e:81:28:b3:42:0b:cd:f8:88:4e:
                    c7:5e:af:ba:e6:b7:2e:14:e6:b2:8e:82:0c:3b:98:
                    57:16:41:00:82:96:f2:c2:5a:13:f3:dd:a9:49:77:
                    ce:c8:c5:cb:51:87:29:f7:db:eb:8f:f7:08:3c:0c:
                    43:e0:5f:45:2f:44:01:91:fd:25:54:8b:ce:f4:8b:
                    bb:51:01:49:a4:0b:87:ad:d1:15:26:c4:5c:19:2b:
                    a6:e0:96:de:0b:22:d3:16:c2:e6:14:1c:94:bc:7b:
                    d0:01:46:0b:8b:dd:16:fd:9b:58:54:bb:64:76:2a:
                    98:a5:dd:be:80:ac:de:83:7b:b5:5d:66:84:38:c4:
                    58:61:8d:a9:dc:e1:a8:f3:03:ba:23:06:48:67:bf:
                    cc:e8:21:02:06:c7:c8:10:cb:84:55:6b:97:e3:d3:
                    38:42:45:9b:61:06:d1:aa:c3:22:a0:9c:1a:85:a0:
                    f2:2e:7e:1f:f0:ce:ab:7c:51:0c:c6:94:98:d9:e0:
                    46:88:a7:3d:48:b2:5a:5f:d6:39:17:aa:3c:a0:88:
                    cb:3d:5d:e3:c3:3d:07:c9:a4:ac:21:72:89:34:6a:
                    45:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BF:8E:37:F8:6C:9D:69:97:A0:46:69:26:16:F6:F9:D7:37:F5:00
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/FL-ON_hsnWmXoEZpJhb2-dc39QA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.158.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         33:9b:68:b8:ff:8c:a0:77:84:ce:34:b1:65:f0:ea:3e:56:a5:
         fc:bf:6f:c9:44:ef:e5:9e:87:87:c9:3c:ce:42:2e:89:50:4f:
         d5:97:e6:05:54:30:aa:48:3a:0a:41:ee:12:c2:53:a4:dd:e7:
         15:bd:1f:0f:4b:5d:1b:f3:c5:60:8b:cb:61:0a:f3:14:70:31:
         82:2c:8c:df:51:33:b2:be:49:6a:af:de:b1:d3:e7:32:57:88:
         25:a6:22:fc:50:1b:da:40:47:8c:11:0e:2c:32:a7:b3:49:01:
         4e:dd:22:0b:de:1e:d5:cc:3c:77:ec:89:95:cf:14:bd:c3:bc:
         82:bd:29:d9:91:25:1f:87:68:62:0f:f3:cb:80:58:89:47:32:
         0f:69:54:7f:0b:92:84:40:0f:59:a3:3e:d0:f4:f2:7c:ce:a8:
         ce:27:69:59:d0:e7:fe:6f:c3:9a:5e:06:85:e6:10:24:b2:a1:
         61:e2:89:fb:94:39:0e:a8:8f:1c:c0:55:e1:86:8b:cb:e2:fb:
         d1:92:e3:b0:0e:75:ce:07:e3:89:c4:48:a3:f5:b5:ae:d3:5c:
         65:ea:cc:b9:aa:07:4b:a3:d4:c2:12:70:21:5b:23:1c:e4:fe:
         e0:af:28:10:af:4b:79:d8:1f:1f:04:69:8f:75:4a:44:86:d8:
         29:5c:f0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:09 2025 by rpki-client