Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/GXQa9yIRhgNCdOWM-JU_Oi4TvLo.roa
File:                     GXQa9yIRhgNCdOWM-JU_Oi4TvLo.roa (raw, json)
Hash identifier:          FhRM4qec6tbXH8Aj2HM64H1lBuGR2UfPS7aZ/KJgpHc=
Subject key identifier:   19:74:1A:F7:22:11:86:03:42:74:E5:8C:F8:95:3F:3A:2E:13:BC:BA
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       043C
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/GXQa9yIRhgNCdOWM-JU_Oi4TvLo.roa
Signing time:             Wed 18 Dec 2024 02:22:21 +0000
ROA not before:           Wed 18 Dec 2024 02:22:21 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        124.211.128.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1084 (0x43c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:22:21 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=19741AF7221186034274E58CF8953F3A2E13BCBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:16:b5:15:b0:32:c6:89:eb:72:6b:ef:d5:b1:
                    74:d4:80:61:78:af:bd:47:1a:ff:27:e2:b4:ae:85:
                    f7:6c:34:51:2c:09:11:18:7f:59:d9:a1:3b:84:13:
                    1e:0b:b7:99:05:13:95:72:cc:4e:aa:55:02:52:b4:
                    24:5a:05:9e:42:ec:0a:76:fe:f1:b1:0f:00:04:18:
                    e7:9c:25:12:56:d8:56:0a:b9:4a:59:c8:03:04:b0:
                    bf:d5:e4:74:8e:59:76:c2:23:72:2f:d7:3b:99:5b:
                    25:ab:e1:19:34:4f:9a:cb:a2:c9:7c:f4:9b:7b:cd:
                    ee:22:c2:ff:ed:53:cb:ec:89:c1:32:ca:ac:2b:b1:
                    61:3f:55:a2:73:9c:7a:40:e5:6b:14:3f:5e:0a:f7:
                    f6:50:dc:cd:a0:e6:e5:8d:f0:c1:db:ed:76:47:60:
                    46:5e:06:6b:d7:c5:1d:79:b2:c7:e1:9e:24:b7:bd:
                    e8:56:dd:5e:35:ea:84:e5:e2:1f:87:3d:dd:5f:45:
                    88:bb:89:9a:ac:4f:71:4e:e0:ce:26:4b:a3:39:de:
                    fd:4f:ff:d7:73:41:af:ee:c7:12:1a:a9:aa:75:f4:
                    2f:ec:c6:cb:b7:b6:04:20:a8:7e:2a:48:0b:da:91:
                    b9:2a:5e:66:7b:41:22:3d:96:73:79:7a:39:05:0f:
                    6c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:74:1A:F7:22:11:86:03:42:74:E5:8C:F8:95:3F:3A:2E:13:BC:BA
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/GXQa9yIRhgNCdOWM-JU_Oi4TvLo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.211.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         50:6a:d5:ef:d4:9d:f2:b9:38:da:c0:24:29:e1:2c:b2:df:ea:
         9c:99:6b:d2:48:8f:7f:79:46:24:3a:06:ec:ea:f8:d9:9f:36:
         4c:17:3b:17:be:21:24:7c:f0:0f:e8:67:ab:fd:e3:1e:3e:b4:
         3f:b5:a6:cf:56:03:dc:f1:af:4d:85:c3:1a:f2:d7:a8:a4:17:
         19:28:37:5e:b8:0d:58:bc:ab:64:5c:a9:3b:ce:20:dc:c9:a9:
         66:0b:bb:3f:c7:f3:28:ef:38:d5:81:e9:16:c9:01:f6:1b:e2:
         0e:1a:79:a0:b3:bb:a4:06:93:6f:bf:e3:2a:70:7c:42:00:28:
         6c:93:0a:10:8b:fa:eb:18:19:e7:17:2b:dd:94:68:63:15:e3:
         8a:dc:c5:cd:a4:35:93:aa:65:a8:5d:d3:80:da:62:a2:d3:7e:
         35:75:f9:4c:00:ba:f0:96:fd:b8:0f:1b:66:b4:78:8a:22:67:
         62:28:62:24:2f:58:fd:71:99:c6:d1:5b:68:50:11:6c:75:d0:
         b5:06:4c:89:79:b7:e9:b4:48:31:34:e1:26:e5:cf:56:37:72:
         58:7e:fc:4e:91:a3:52:1b:7f:24:4d:f0:e5:03:7b:ab:d5:cd:
         e2:79:3f:8d:b8:a0:39:dc:3f:8b:26:10:c4:97:8f:ef:6c:db:
         f1:56:af:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:23:07 2025 by rpki-client