Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Gz3DexHW5QVpoIwcxOeyRNH3ssc.roa
File:                     Gz3DexHW5QVpoIwcxOeyRNH3ssc.roa (raw, json)
Hash identifier:          QlJhimGDzccfltt/k74aRWNwDNBR7nen2gRHkjj3JhI=
Subject key identifier:   1B:3D:C3:7B:11:D6:E5:05:69:A0:8C:1C:C4:E7:B2:44:D1:F7:B2:C7
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       054C
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Gz3DexHW5QVpoIwcxOeyRNH3ssc.roa
Signing time:             Wed 18 Dec 2024 02:44:24 +0000
ROA not before:           Wed 18 Dec 2024 02:44:24 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        210.188.180.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1356 (0x54c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:44:24 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=1B3DC37B11D6E50569A08C1CC4E7B244D1F7B2C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5b:66:94:23:ba:0e:98:70:aa:d3:67:02:f9:
                    3d:2c:68:19:5f:57:9f:eb:59:ab:17:0a:98:a3:76:
                    0e:00:5e:c7:47:e0:b2:83:4e:ce:08:0f:80:d8:82:
                    0a:a7:9b:22:e7:3d:4a:b8:8c:14:9a:44:1e:f0:8e:
                    dc:2b:43:40:db:47:08:35:54:84:55:ad:ea:ec:96:
                    21:d7:b1:b6:5a:b4:8a:da:32:9e:e8:6a:31:81:b1:
                    b4:e4:6a:d6:cf:07:4e:46:e3:04:cb:e0:dc:30:03:
                    c8:07:e0:4c:92:d9:d2:68:fa:9d:e7:6c:e4:8f:3c:
                    e7:02:4d:2c:9c:30:a7:dd:ca:e2:a6:0f:ea:3f:c7:
                    b9:4a:55:d4:0b:19:38:a1:05:67:42:48:7a:fd:ab:
                    83:7f:ab:9f:02:b3:e8:e6:92:86:25:dd:ad:e5:5c:
                    1a:70:e0:f0:33:94:ad:55:fb:50:4f:39:9b:68:f0:
                    96:6f:54:a3:78:9a:87:f4:39:2a:c6:93:e4:d6:ea:
                    d6:20:34:e6:cd:b6:bf:98:2d:4c:d3:dc:83:af:9f:
                    bb:fc:6c:cf:f4:4e:a2:a7:5f:86:85:6f:92:10:31:
                    8b:69:0e:c9:19:b0:8f:be:8d:35:9c:18:bf:16:eb:
                    7c:4e:16:64:f0:78:25:da:8e:83:96:47:a5:46:18:
                    e3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3D:C3:7B:11:D6:E5:05:69:A0:8C:1C:C4:E7:B2:44:D1:F7:B2:C7
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Gz3DexHW5QVpoIwcxOeyRNH3ssc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:d9:ac:94:1e:2a:ac:8e:cf:23:5a:c8:08:95:9d:eb:2b:0e:
         ef:a0:c4:4a:68:c2:26:6b:bb:0f:f5:cc:c4:23:f2:26:52:80:
         93:c2:de:4d:8a:ee:c0:e5:1e:80:cc:33:37:0b:14:62:d5:17:
         bd:d3:39:e0:24:fb:7b:20:de:ab:7b:9c:1f:2f:96:bc:88:bb:
         aa:a8:21:ab:09:ac:28:10:25:aa:58:f2:bf:fb:af:60:93:5f:
         70:04:a5:03:28:bf:1c:36:cd:2c:23:d9:c7:a5:4d:89:4d:2e:
         cb:58:69:1e:c0:48:fb:b2:9f:04:64:a2:0e:3c:2a:76:65:ad:
         1f:76:b1:35:d8:ca:99:32:25:b0:8d:68:b9:3c:f6:7c:d4:94:
         b0:44:7a:08:18:cd:14:d3:fe:dd:68:3a:12:4f:0f:10:6e:cc:
         0a:62:9a:97:fb:78:a4:b7:17:3f:63:d1:a6:d6:46:67:4f:ff:
         37:05:38:12:9f:32:96:aa:55:72:2c:db:2f:78:84:00:a3:06:
         41:fd:52:13:39:a9:05:76:fa:1a:9b:d0:f9:a6:73:27:69:8a:
         ca:92:3f:ed:da:48:06:49:1a:50:43:ae:81:27:5a:f7:6c:a9:
         05:02:3f:d6:09:f4:47:b0:9f:ac:60:1b:1e:f8:23:77:d9:05:
         44:71:2d:f5
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBUwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw
MjQ0MjRaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDFCM0RDMzdCMTFENkU1
MDU2OUEwOEMxQ0M0RTdCMjQ0RDFGN0IyQzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqW2aUI7oOmHCq02cC+T0saBlfV5/rWasXCpijdg4AXsdH4LKD
Ts4ID4DYggqnmyLnPUq4jBSaRB7wjtwrQ0DbRwg1VIRVrersliHXsbZatIraMp7o
ajGBsbTkatbPB05G4wTL4NwwA8gH4EyS2dJo+p3nbOSPPOcCTSycMKfdyuKmD+o/
x7lKVdQLGTihBWdCSHr9q4N/q58Cs+jmkoYl3a3lXBpw4PAzlK1V+1BPOZto8JZv
VKN4mof0OSrGk+TW6tYgNObNtr+YLUzT3IOvn7v8bM/0TqKnX4aFb5IQMYtpDskZ
sI++jTWcGL8W63xOFmTweCXajoOWR6VGGOPJAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUGz3DexHW5QVpoIwcxOeyRNH3sscwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL0d6M0RleEhXNVFWcG9Jd2N4T2V5Uk5IM3NzYy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADSvLQwDQYJKoZIhvcNAQELBQADggEBAKDZrJQeKqyOzyNayAiVnesrDu+g
xEpowiZruw/1zMQj8iZSgJPC3k2K7sDlHoDMMzcLFGLVF73TOeAk+3sg3qt7nB8v
lryIu6qoIasJrCgQJapY8r/7r2CTX3AEpQMovxw2zSwj2celTYlNLstYaR7ASPuy
nwRkog48KnZlrR92sTXYypkyJbCNaLk89nzUlLBEeggYzRTT/t1oOhJPDxBuzApi
mpf7eKS3Fz9j0abWRmdP/zcFOBKfMpaqVXIs2y94hACjBkH9UhM5qQV2+hqb0Pmm
cydpisqSP+3aSAZJGlBDroEnWvdsqQUCP9YJ9Eewn6xgGx74I3fZBURxLfU=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:41:50 2025 by rpki-client