Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/MCAiKd1ZKsFfqI-4l24WHFEid1I.roa
File:                     MCAiKd1ZKsFfqI-4l24WHFEid1I.roa (raw, json)
Hash identifier:          gYGjFNbiFiV1qpYWGqt5jFuWkdkAQH6lbHtouTmgeak=
Subject key identifier:   30:20:22:29:DD:59:2A:C1:5F:A8:8F:B8:97:6E:16:1C:51:22:77:52
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       03E6
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/MCAiKd1ZKsFfqI-4l24WHFEid1I.roa
Signing time:             Wed 18 Dec 2024 02:16:33 +0000
ROA not before:           Wed 18 Dec 2024 02:16:33 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        27.88.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 998 (0x3e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:16:33 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=30202229DD592AC15FA88FB8976E161C51227752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:05:8f:cb:ef:2b:fc:74:50:71:cd:7d:b4:d6:
                    13:c8:47:8b:ac:c7:70:fa:8e:04:f4:e0:c4:6a:6d:
                    7d:d1:a8:37:7b:57:54:41:5a:d0:d6:3b:9e:3f:fb:
                    64:22:c8:b6:04:e0:43:ef:3f:72:d8:a3:86:48:0d:
                    78:c6:1a:cc:3e:d5:b0:f3:f4:73:98:e7:4b:07:4d:
                    c3:67:48:20:1f:5c:32:30:a7:4b:ff:13:bd:0b:0d:
                    41:7b:25:87:35:d6:c2:6f:8c:ec:a1:a8:76:4b:fa:
                    56:c0:84:b0:2a:94:f9:94:3d:4b:f1:ff:12:d4:82:
                    83:6a:e5:bb:ca:e0:18:96:d6:34:84:07:cd:03:e6:
                    61:d9:8b:22:46:f5:98:fe:12:29:fd:a4:c4:6f:af:
                    df:bc:a5:2b:8c:96:b8:84:e2:4c:77:b1:b4:2d:b2:
                    f2:45:f1:95:39:e8:c1:48:93:ec:e5:55:29:36:b7:
                    4c:09:f4:d3:26:75:4e:52:30:07:0d:1f:d2:b9:44:
                    44:1c:84:fe:98:37:94:64:21:58:59:5d:27:f7:c3:
                    df:0d:8e:27:e2:0a:fe:18:29:c9:83:d7:1f:06:0b:
                    41:9b:c7:48:8e:f4:88:0e:e4:32:05:ec:35:6a:0f:
                    d4:bf:06:61:c6:fc:15:c4:22:be:27:f5:82:21:a0:
                    88:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:20:22:29:DD:59:2A:C1:5F:A8:8F:B8:97:6E:16:1C:51:22:77:52
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/MCAiKd1ZKsFfqI-4l24WHFEid1I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.88.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6d:7b:36:e2:86:e8:c6:ce:f1:d4:b9:c4:07:01:8e:a6:e9:8e:
         fd:c8:40:7a:3b:ef:5f:31:b9:9d:8f:f6:29:b8:45:f2:17:c7:
         c5:e6:0c:a2:ee:8c:8d:b3:ff:0c:9c:7b:cb:7c:2b:bb:1b:d5:
         c3:80:73:73:c7:26:4e:84:cb:b1:af:c0:b6:6e:ed:46:35:83:
         1b:76:57:9f:23:fe:14:eb:71:ce:5a:ea:74:6c:18:c4:8e:71:
         f8:29:43:3c:8d:2d:88:30:ad:77:45:b2:0e:16:de:ce:1e:ac:
         4c:ce:fc:6a:c7:7e:8d:50:07:6e:81:54:99:ce:9b:3c:b1:35:
         ef:cb:c1:4b:27:48:72:ec:74:4d:c7:0e:05:33:fd:77:76:30:
         26:d5:16:a8:9f:e5:46:e9:5d:6f:d2:52:e4:4e:ba:f7:5a:36:
         74:5c:be:68:85:09:d0:d5:ea:67:b3:ee:8d:ae:ad:06:24:d5:
         36:39:be:b6:bd:4f:1c:b2:a3:d2:97:bf:73:2d:67:a2:e8:d0:
         c1:eb:ce:5c:42:f7:78:c2:44:03:8e:73:36:0e:fb:0c:82:d5:
         77:98:73:68:b1:e0:25:d2:a3:f0:56:d9:b6:a4:2d:af:50:a8:
         80:bc:4a:76:a2:37:18:df:7f:6c:64:b2:79:52:f9:c1:56:b1:
         c9:68:3d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:32:36 2025 by rpki-client