Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/MNIqltkFqu4nxa9gH-B5uSpW78s.roa
File:                     MNIqltkFqu4nxa9gH-B5uSpW78s.roa (raw, json)
Hash identifier:          C3z7o9leFT3Q6K4cu+Uwpocb5hpRccb/5kPqMw57WpY=
Subject key identifier:   30:D2:2A:96:D9:05:AA:EE:27:C5:AF:60:1F:E0:79:B9:2A:56:EF:CB
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       04B4
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/MNIqltkFqu4nxa9gH-B5uSpW78s.roa
Signing time:             Wed 18 Dec 2024 02:29:04 +0000
ROA not before:           Wed 18 Dec 2024 02:29:04 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        106.186.86.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1204 (0x4b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:29:04 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=30D22A96D905AAEE27C5AF601FE079B92A56EFCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:62:2d:63:ce:fc:8b:e7:f8:b1:99:21:5f:cf:
                    9b:6d:73:bb:74:d8:81:94:d9:92:59:cf:3d:18:13:
                    6c:44:4f:96:29:62:9d:65:ff:d2:fd:dd:c4:eb:43:
                    75:b6:a7:55:69:ff:ff:82:d7:c0:23:1f:57:1b:00:
                    88:13:55:bb:fe:c0:0a:71:c6:31:77:72:28:19:d4:
                    65:c5:fc:f9:96:1d:96:cb:86:ef:66:eb:1e:67:03:
                    cf:04:80:d8:49:53:58:5b:83:54:24:f5:ad:ba:c4:
                    02:4e:54:a6:bb:97:ca:d6:24:b3:c3:63:d0:98:c1:
                    23:64:7f:b0:b3:1e:de:c9:dc:2e:fd:6e:1f:97:ff:
                    38:ee:62:e5:72:01:90:5f:1e:30:ca:0e:7f:45:02:
                    ae:04:e4:28:76:bb:e5:67:01:d9:98:b8:6f:b3:39:
                    58:a0:37:29:45:cd:5d:c2:cc:50:eb:32:e6:f6:de:
                    1f:62:f6:b3:67:54:e1:e1:5c:8e:59:52:d3:d6:de:
                    f9:d3:cd:1f:ac:8d:0c:d1:75:90:77:12:a8:ad:e9:
                    75:48:85:55:da:5e:4b:fe:6d:db:4a:6e:82:c7:cd:
                    54:83:e7:bd:6e:ce:c8:36:6f:2c:3c:40:60:da:df:
                    20:67:38:b3:5c:79:b4:bc:51:9f:b0:1c:a9:97:ef:
                    23:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D2:2A:96:D9:05:AA:EE:27:C5:AF:60:1F:E0:79:B9:2A:56:EF:CB
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/MNIqltkFqu4nxa9gH-B5uSpW78s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.186.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:44:17:77:e1:93:9e:4c:7a:32:87:05:5a:55:83:f6:da:4c:
         fd:49:09:df:d7:e7:57:49:04:35:34:12:83:39:5e:d0:96:f6:
         f4:5f:4c:9e:d5:90:7d:0e:80:16:72:9d:fa:6d:77:be:a9:6b:
         69:85:4c:51:ee:4b:38:48:79:57:29:9d:1c:12:f5:e7:e2:7b:
         4b:7a:0e:cc:b9:bd:ef:94:4c:f9:d1:77:6c:85:9a:9b:9c:ec:
         32:e2:75:09:4d:17:fa:a9:cc:a6:7d:aa:88:da:85:3b:fb:71:
         2a:db:0d:42:f6:c0:ab:b1:a6:b0:88:2a:3b:66:4b:f9:ac:81:
         9e:5f:13:0f:1d:12:fc:d5:90:09:1b:9d:0e:31:6b:34:35:09:
         56:3b:bc:0a:ae:ee:e9:6a:78:a4:a4:31:c3:c1:07:d5:81:8e:
         87:36:34:bf:5c:43:55:26:71:de:a0:d2:73:e2:70:97:86:c3:
         97:10:7a:29:4e:19:e6:7f:e8:66:1f:7c:9c:19:45:cc:05:70:
         7c:f7:2e:5c:cf:87:55:9a:7c:57:61:1b:8f:ce:6b:af:a6:33:
         93:25:42:b5:d9:63:75:26:6f:25:dd:37:32:16:b0:a4:d7:5b:
         08:32:01:3d:9c:71:c8:13:71:e2:c7:11:80:f1:ac:bf:cd:cf:
         fa:b9:95:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:20:22 2025 by rpki-client