Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/IG0Q42YzGGGbeXLuPEHdqokMUJQ.roa
File:                     IG0Q42YzGGGbeXLuPEHdqokMUJQ.roa (raw, json)
Hash identifier:          9kc5WbvBNTOZlDvwsRXuSuPrCUGC+NCtkTHeIMFeT0Y=
Subject key identifier:   20:6D:10:E3:66:33:18:61:9B:79:72:EE:3C:41:DD:AA:89:0C:50:94
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       04BE
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/IG0Q42YzGGGbeXLuPEHdqokMUJQ.roa
Signing time:             Wed 18 Dec 2024 02:32:23 +0000
ROA not before:           Wed 18 Dec 2024 02:32:23 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        113.145.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1214 (0x4be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:32:23 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=206D10E3663318619B7972EE3C41DDAA890C5094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bb:a7:55:f3:7c:00:34:fc:d9:4a:6b:85:c8:
                    e3:ad:3a:38:39:2f:ef:00:1f:c1:fc:7f:97:06:f1:
                    05:e2:5a:0d:49:9e:83:e2:75:24:02:f1:05:75:5f:
                    8f:19:55:46:fb:f3:bb:25:48:b3:e1:ad:11:90:13:
                    44:1e:30:71:03:19:29:8f:10:81:df:ee:86:2e:bc:
                    40:44:83:2a:9c:75:34:b0:b8:cf:96:75:94:0e:8b:
                    23:24:20:e5:83:2d:4e:05:4d:da:88:de:28:cd:40:
                    29:00:ed:2a:9c:ea:a7:01:f1:69:bb:e8:4e:f7:ea:
                    4f:9d:e2:d7:4a:3d:c7:94:5e:b4:26:43:c2:f8:6a:
                    82:ed:37:37:2f:52:08:a8:fd:6c:de:fc:90:9f:8e:
                    a1:0e:60:fb:33:9b:5b:cf:94:83:a3:64:f1:a8:89:
                    18:00:f1:5a:23:7f:01:5e:f2:87:d1:13:91:dd:f2:
                    c8:04:81:12:bc:ea:2c:74:43:f2:ee:6f:fc:fd:66:
                    c4:cb:f6:48:5b:a1:f2:b8:d1:30:c0:80:31:49:02:
                    cf:ec:8a:c2:c6:98:33:07:82:59:30:64:47:7d:51:
                    b7:b9:a7:b6:c2:5a:e3:9f:28:ae:83:0e:be:9a:c7:
                    8c:fb:32:16:cc:b3:07:0c:a1:9c:da:63:21:bb:43:
                    95:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6D:10:E3:66:33:18:61:9B:79:72:EE:3C:41:DD:AA:89:0C:50:94
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/IG0Q42YzGGGbeXLuPEHdqokMUJQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.145.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9a:6e:ea:b1:90:60:53:74:fb:a6:89:96:ce:42:89:96:70:da:
         2e:ab:d2:4b:15:d0:6a:ea:fb:d6:0d:63:eb:21:5a:94:f8:56:
         79:2f:d0:0d:5e:9e:5c:2d:48:7a:37:da:11:20:80:82:3e:5b:
         71:a9:b8:cf:c5:98:14:be:98:f3:63:bd:30:d5:75:ee:d9:fe:
         39:18:d2:de:70:16:db:d9:55:44:e2:26:2e:4b:c0:6f:0e:8c:
         dc:d7:ad:19:8c:3f:20:ce:39:7e:f4:fb:38:0c:2d:81:86:14:
         51:c9:a8:f9:82:a6:b9:84:6f:8f:61:7f:a2:70:98:16:af:7c:
         8b:08:79:2a:5a:02:ce:92:af:29:fc:72:c8:e4:2f:be:99:fa:
         60:09:b4:85:51:7a:22:64:14:21:3b:d6:a8:8e:9d:c9:5d:f7:
         2c:ef:36:d8:ea:f2:53:1f:42:de:e8:d9:87:25:3f:c9:a1:89:
         cc:19:9f:ce:b2:1b:63:65:00:25:bc:5f:36:d6:2c:64:42:9c:
         c8:d8:01:fd:93:d2:cc:00:1a:5d:02:fd:dc:2c:6b:f6:cc:dd:
         df:cd:e4:e9:c1:6b:ed:42:f9:2d:86:16:f0:4a:ab:b7:75:76:
         79:bf:94:25:52:36:e2:c4:1e:47:5c:87:17:77:90:1d:fc:c2:
         cb:c4:7f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:47:54 2025 by rpki-client