Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Ji-SRl3Lk9vivwKSOvaG9I_b_6g.roa
File:                     Ji-SRl3Lk9vivwKSOvaG9I_b_6g.roa (raw, json)
Hash identifier:          V7oUWNvLj4jUdvOo8jTsvB/i28pgu5clfazfT9pkvWo=
Subject key identifier:   26:2F:92:46:5D:CB:93:DB:E2:BF:02:92:3A:F6:86:F4:8F:DB:FF:A8
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0499
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Ji-SRl3Lk9vivwKSOvaG9I_b_6g.roa
Signing time:             Wed 18 Dec 2024 02:28:54 +0000
ROA not before:           Wed 18 Dec 2024 02:28:54 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        106.184.128.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1177 (0x499)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:28:54 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=262F92465DCB93DBE2BF02923AF686F48FDBFFA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4c:fe:98:d9:8c:eb:3b:cb:42:62:9e:a3:61:
                    d5:cd:49:28:0e:0f:63:b4:33:98:51:83:78:b6:c4:
                    ef:90:b2:a1:47:ad:6b:45:38:18:97:fa:41:3a:cf:
                    a5:12:ac:14:fc:ce:a2:81:0d:ba:64:30:24:44:d1:
                    24:c8:61:af:d4:22:c9:85:ed:3c:79:74:d8:6d:b4:
                    f2:5e:6b:a2:db:d0:c2:0d:58:f9:dd:70:12:b9:c7:
                    69:0a:04:75:0f:c3:c8:08:ad:4d:a2:94:f8:ad:23:
                    f3:75:06:71:99:49:91:42:50:44:39:4e:39:d2:68:
                    3e:dc:5c:a9:78:89:16:7d:50:91:c2:86:70:76:36:
                    dc:ef:b3:86:f6:9c:b5:3d:7a:9c:92:92:41:3a:ab:
                    a2:d1:de:1a:bc:69:d6:3a:e7:ff:39:7f:c2:f3:91:
                    64:e2:ec:c6:40:c7:3e:31:60:fb:11:26:49:7f:44:
                    ea:51:04:ae:1c:1a:39:cd:26:ca:6d:da:2c:a8:00:
                    06:2a:6f:91:f3:e6:f4:ab:4e:ee:30:6c:58:1f:18:
                    d8:e5:3a:ac:7a:b8:9a:11:8a:bd:c7:8e:37:07:b9:
                    1c:b7:87:c9:6c:2b:05:b6:67:90:14:5c:b3:f0:ef:
                    28:65:5f:f9:0e:c5:5a:41:d3:e6:0a:ef:8d:c7:d7:
                    68:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2F:92:46:5D:CB:93:DB:E2:BF:02:92:3A:F6:86:F4:8F:DB:FF:A8
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Ji-SRl3Lk9vivwKSOvaG9I_b_6g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.184.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3d:e4:5a:99:a0:2a:d2:3b:d5:3a:12:69:fa:42:f7:5c:af:14:
         2a:e0:01:c8:d0:0f:5a:c8:a1:32:f7:ff:50:3f:8a:06:4a:56:
         f5:41:6a:5a:58:ae:16:5b:9f:77:a1:74:b7:25:5a:92:de:8d:
         49:65:0b:fb:b6:a1:f4:31:62:65:53:f4:37:df:5d:58:df:32:
         3d:57:2f:b6:4a:20:1c:17:7f:38:6d:fb:85:8b:c7:0a:9f:86:
         de:3c:e3:6a:a1:a9:3b:53:d8:bb:97:4f:54:f1:b3:7d:1e:8c:
         b4:d1:3e:16:e0:d6:86:cf:11:0b:b4:13:2e:7e:91:75:7d:5e:
         01:ae:f8:7c:59:9e:3c:8c:11:b1:a1:5b:25:3e:1e:89:8b:3c:
         a0:4c:b2:c3:fd:f5:a2:23:db:3b:26:d8:93:71:99:78:d8:51:
         ba:db:ef:5f:8c:53:9a:0d:80:4b:9e:7f:d2:ce:63:0a:98:4e:
         fc:a7:85:66:40:f3:9e:09:82:ad:a3:22:5b:b7:d5:c0:c2:64:
         ca:cc:df:3c:d7:4d:45:75:42:8d:6d:22:19:a7:39:74:ed:90:
         43:29:f7:de:60:48:27:10:98:11:71:35:94:ab:91:82:67:e1:
         a7:55:a0:2e:07:a2:89:fd:99:36:56:4e:8f:f7:74:1c:fc:a7:
         e8:4e:6f:c3
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBJkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw
MjI4NTRaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDI2MkY5MjQ2NURDQjkz
REJFMkJGMDI5MjNBRjY4NkY0OEZEQkZGQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDkTP6Y2YzrO8tCYp6jYdXNSSgOD2O0M5hRg3i2xO+QsqFHrWtF
OBiX+kE6z6USrBT8zqKBDbpkMCRE0STIYa/UIsmF7Tx5dNhttPJea6Lb0MINWPnd
cBK5x2kKBHUPw8gIrU2ilPitI/N1BnGZSZFCUEQ5TjnSaD7cXKl4iRZ9UJHChnB2
Ntzvs4b2nLU9epySkkE6q6LR3hq8adY65/85f8LzkWTi7MZAxz4xYPsRJkl/ROpR
BK4cGjnNJspt2iyoAAYqb5Hz5vSrTu4wbFgfGNjlOqx6uJoRir3HjjcHuRy3h8ls
KwW2Z5AUXLPw7yhlX/kOxVpB0+YK743H12h7AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUJi+SRl3Lk9vivwKSOvaG9I/b/6gwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL0ppLVNSbDNMazl2aXZ3S1NPdmFHOUlfYl82Zy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZquIAwDQYJKoZIhvcNAQELBQADggEBAD3kWpmgKtI71ToSafpC91yvFCrg
AcjQD1rIoTL3/1A/igZKVvVBalpYrhZbn3ehdLclWpLejUllC/u2ofQxYmVT9Dff
XVjfMj1XL7ZKIBwXfzht+4WLxwqfht4842qhqTtT2LuXT1Txs30ejLTRPhbg1obP
EQu0Ey5+kXV9XgGu+HxZnjyMEbGhWyU+HomLPKBMssP99aIj2zsm2JNxmXjYUbrb
71+MU5oNgEuef9LOYwqYTvynhWZA854Jgq2jIlu31cDCZMrM3zzXTUV1Qo1tIhmn
OXTtkEMp995gSCcQmBFxNZSrkYJn4adVoC4Hoon9mTZWTo/3dBz8p+hOb8M=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:28:00 2025 by rpki-client