Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/KfeLGPLYBXnCr-XUse0nllCPwDE.roa
File:                     KfeLGPLYBXnCr-XUse0nllCPwDE.roa (raw, json)
Hash identifier:          MFMZuI8193QioeV1BwuWLjKFarplQMQbmDJ4+VX+cpM=
Subject key identifier:   29:F7:8B:18:F2:D8:05:79:C2:AF:E5:D4:B1:ED:27:96:50:8F:C0:31
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       04AF
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/KfeLGPLYBXnCr-XUse0nllCPwDE.roa
Signing time:             Wed 18 Dec 2024 02:29:02 +0000
ROA not before:           Wed 18 Dec 2024 02:29:02 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        182.250.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1199 (0x4af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:29:02 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=29F78B18F2D80579C2AFE5D4B1ED2796508FC031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4c:1f:cf:ab:e2:b6:4a:51:b9:e0:f5:82:f0:
                    3e:5a:08:53:d3:62:4e:b7:e7:c6:50:63:d3:ce:6a:
                    fe:4d:53:83:13:da:40:f5:34:a6:98:44:78:33:a7:
                    e1:35:68:a8:82:b0:e8:c5:82:17:39:e7:c2:6b:8e:
                    78:d0:85:cf:3b:0e:c9:36:df:07:b7:61:2f:4f:87:
                    f6:3f:ea:0e:a3:16:d4:70:b4:da:9b:85:a1:6e:fa:
                    76:25:46:af:b0:e5:23:82:e8:6b:2a:d4:2a:bc:64:
                    d4:cc:b4:0a:7d:8a:1a:cc:1b:92:0b:18:eb:86:03:
                    f2:e5:d7:58:6d:4f:1c:b0:04:14:1b:3c:b5:0b:28:
                    0b:fa:95:bf:ce:da:32:e0:e5:0b:5f:97:6b:24:33:
                    d1:5c:65:02:8f:de:fd:3e:27:a9:b7:3c:5e:1a:22:
                    83:85:17:6a:c1:c9:0b:f9:16:a0:7c:a2:60:c8:d7:
                    8d:1a:25:2f:54:b7:ac:08:4a:06:42:5a:e3:50:ea:
                    c3:dc:c1:7e:70:97:0d:a5:d4:3d:4f:5f:a9:f8:0b:
                    07:bd:56:e8:78:88:56:55:49:7b:5a:be:20:82:d9:
                    13:23:e3:69:87:f8:85:5a:ff:d6:5f:61:41:21:f1:
                    11:dc:83:a8:ac:f4:1a:dc:05:31:67:63:d4:96:df:
                    3a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F7:8B:18:F2:D8:05:79:C2:AF:E5:D4:B1:ED:27:96:50:8F:C0:31
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/KfeLGPLYBXnCr-XUse0nllCPwDE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.250.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b1:22:2d:be:b1:f2:5f:34:e3:57:d5:c2:83:43:c0:df:b4:e4:
         32:bb:e3:32:b3:96:a5:89:6e:df:12:31:f8:fa:7e:0f:9e:5a:
         c5:a4:ac:16:0e:1a:75:f9:9f:70:ae:47:5c:d6:8c:30:eb:45:
         90:83:65:f1:2d:70:d7:7b:2d:f2:e1:f6:be:75:1b:f4:0f:c4:
         c6:e1:95:9c:01:6f:9f:cf:73:be:a6:a9:73:4d:eb:50:50:27:
         ef:ce:6e:3c:84:29:52:95:88:81:7f:3e:06:36:96:e8:82:31:
         d5:3a:9f:8e:e2:62:27:21:39:1e:46:e1:2a:3e:e0:8a:dc:fc:
         7e:fb:32:eb:31:0e:03:4c:6a:94:30:b7:42:0b:c1:af:13:ba:
         e6:f7:f4:3b:ea:2d:70:b7:46:fb:46:81:b2:2d:16:c4:66:88:
         31:df:8f:cb:31:79:f2:ea:69:b0:70:8b:48:43:26:59:c9:b0:
         8e:2a:9e:35:0a:a6:97:32:ad:7e:3b:f2:a2:99:47:a4:da:49:
         17:f1:6c:b0:ed:a6:6c:f1:38:c8:f9:5c:dd:52:88:2d:fc:9f:
         c7:91:c4:70:ea:a6:72:e3:be:f7:d0:cd:66:a4:f0:13:3d:1a:
         0e:0d:ee:78:eb:06:33:ef:63:fb:8d:0a:d5:41:e2:0d:c0:4e:
         5f:4a:84:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:30:39 2025 by rpki-client