Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/HDwoX60RMpKmHdOTEtqyEGNoIV4.roa
File:                     HDwoX60RMpKmHdOTEtqyEGNoIV4.roa (raw, json)
Hash identifier:          4yxlh+jsjHKZg6GdaoIl3OYtAlD+WmN4/BEdpFH1Iv8=
Subject key identifier:   1C:3C:28:5F:AD:11:32:92:A6:1D:D3:93:12:DA:B2:10:63:68:21:5E
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0455
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/HDwoX60RMpKmHdOTEtqyEGNoIV4.roa
Signing time:             Wed 18 Dec 2024 02:24:08 +0000
ROA not before:           Wed 18 Dec 2024 02:24:08 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        113.157.224.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1109 (0x455)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:24:08 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=1C3C285FAD113292A61DD39312DAB2106368215E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:46:70:4d:f6:86:39:ed:a0:4a:09:3c:59:2c:
                    bc:7e:99:42:a0:b0:7c:9d:fd:ed:a1:60:48:38:b8:
                    a1:5a:a7:78:27:a7:54:5f:6a:ac:3d:b4:58:67:e6:
                    3a:a6:22:a3:31:a7:13:2a:ea:a1:32:e7:5c:9e:3b:
                    98:f2:90:62:3e:2f:cc:3a:a7:33:0e:cc:26:5d:2f:
                    4c:69:3d:73:4d:98:68:f5:b1:63:fa:7e:a1:57:c5:
                    e3:3d:69:3a:5c:fb:54:82:25:17:2b:48:25:03:15:
                    4f:ed:98:01:12:54:fc:dc:79:e5:90:fb:4a:29:8a:
                    9e:8e:d3:bc:7e:f8:4a:3d:02:ae:29:fe:d0:54:6b:
                    e8:d7:5b:63:9c:eb:8b:fa:3d:bc:73:58:42:0f:db:
                    3a:d8:44:88:b0:18:61:5c:c7:30:84:0f:66:63:12:
                    d2:fc:fe:8c:68:ff:07:f5:ac:e4:94:5a:8e:5c:50:
                    c9:20:88:c1:6a:92:83:4a:4a:e0:4b:22:48:36:d3:
                    ca:17:86:85:57:60:28:80:1f:60:f4:97:10:04:e5:
                    ef:c4:b3:1a:98:f9:ca:27:5a:65:96:bd:96:13:33:
                    84:e2:7d:bc:53:5d:2f:9b:fb:08:8a:c3:7f:2b:90:
                    c6:ce:2a:03:8a:61:66:f1:60:72:1f:af:d3:28:c4:
                    9c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:3C:28:5F:AD:11:32:92:A6:1D:D3:93:12:DA:B2:10:63:68:21:5E
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/HDwoX60RMpKmHdOTEtqyEGNoIV4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.157.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         36:fd:66:76:2e:d9:af:13:9a:a6:20:54:77:17:df:98:2c:77:
         0e:d2:fc:71:a3:67:5f:10:d6:2a:a6:92:ed:09:a2:cf:b0:bd:
         7e:fb:d9:7a:19:c4:6a:67:04:3a:0a:99:bb:b7:93:f3:94:38:
         77:34:a0:4c:ae:bf:f2:7a:eb:e0:f6:b4:94:e2:16:b4:ba:01:
         85:8b:f3:6e:7d:f1:97:82:2c:1c:7d:ed:ea:52:90:f0:07:0c:
         f7:7f:19:6d:e2:c2:62:cc:a8:1f:96:87:5f:5d:40:97:39:d0:
         35:1a:02:e5:a2:33:cc:e0:06:3c:99:6b:51:e2:96:15:86:2e:
         0b:82:59:88:03:54:e7:02:c7:f4:78:44:6f:5f:f3:10:7d:aa:
         e9:13:fe:dc:e7:f8:46:f9:d9:05:94:51:9a:94:4e:d0:73:53:
         01:c0:e9:82:1b:01:72:66:be:a5:b8:9f:34:3b:66:12:75:4e:
         2c:61:15:bd:73:d0:25:4e:f7:1c:31:39:53:9d:52:2e:c1:a0:
         77:c3:8a:79:77:0d:b3:70:4c:a3:f5:88:d5:74:1b:97:26:9a:
         59:c9:95:ed:a7:7b:8b:8b:8c:aa:45:07:e5:c9:54:a4:7e:22:
         fd:8c:d3:64:b5:e1:74:9a:08:36:ac:38:ff:59:96:cd:00:de:
         fb:a8:a6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:12 2025 by rpki-client