Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/MSpofPs-iiuCVNY0C5QaP5KyIDg.roa
File:                     MSpofPs-iiuCVNY0C5QaP5KyIDg.roa (raw, json)
Hash identifier:          jEKifGDZjtcsbGk3dJBMO8kNUImfUkt0S8pfEs2f/Yc=
Subject key identifier:   31:2A:68:7C:FB:3E:8A:2B:82:54:D6:34:0B:94:1A:3F:92:B2:20:38
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0554
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/MSpofPs-iiuCVNY0C5QaP5KyIDg.roa
Signing time:             Wed 18 Dec 2024 02:44:28 +0000
ROA not before:           Wed 18 Dec 2024 02:44:28 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        210.250.13.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1364 (0x554)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:44:28 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=312A687CFB3E8A2B8254D6340B941A3F92B22038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:77:62:bc:ea:fd:a4:7a:39:c8:5d:b9:5b:fa:
                    8b:3e:7a:96:e3:a6:6d:ff:69:c0:78:9f:91:24:e0:
                    f0:16:a4:a0:04:14:a2:5b:95:88:46:d8:63:ca:d2:
                    51:35:d1:14:64:a9:1c:82:73:1f:55:70:e6:b0:d1:
                    a0:26:ba:90:62:36:94:55:c7:b2:29:70:ae:06:f6:
                    7c:5c:8b:77:d4:83:84:96:31:08:99:04:66:9c:a8:
                    7a:e1:e8:0e:9f:b6:b9:b4:80:5e:16:54:3f:09:92:
                    c0:5a:a6:7d:0a:b6:a3:21:6f:3e:a4:b6:d9:eb:25:
                    8b:62:8b:c0:44:a1:5c:07:92:24:f8:6c:f2:a1:c1:
                    29:37:45:b2:58:ed:b9:c7:6a:e9:16:b0:c3:a1:38:
                    70:db:13:d2:ed:32:0a:9b:d1:6a:73:47:11:b4:a8:
                    ab:bf:d9:7f:72:07:28:53:75:33:15:bb:74:75:ce:
                    63:5f:78:9c:a9:20:9e:63:89:99:74:e0:b5:a3:0e:
                    d8:86:2d:a2:c0:60:74:cc:25:5b:3a:0a:e5:72:90:
                    e4:4f:5f:94:25:57:81:ee:9f:e7:b2:a0:40:5d:16:
                    43:cd:3d:d6:9e:32:19:4c:a2:f2:eb:68:6b:13:62:
                    98:81:b7:6e:d5:8d:e2:b2:89:6a:2a:de:26:9f:36:
                    1b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2A:68:7C:FB:3E:8A:2B:82:54:D6:34:0B:94:1A:3F:92:B2:20:38
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/MSpofPs-iiuCVNY0C5QaP5KyIDg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.250.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:c3:27:71:09:2b:23:ef:d3:9d:9c:37:27:33:56:e2:b7:2e:
         10:76:67:12:4c:58:2d:37:a0:5f:98:9b:ca:17:94:f1:d6:f6:
         7b:92:27:0c:0f:71:5b:6b:85:77:49:31:bf:5d:81:58:0d:56:
         23:1d:b6:26:92:43:25:5c:a5:ac:c3:84:0f:91:75:c7:17:af:
         d2:f3:61:5b:04:f5:31:43:d6:b3:82:7e:ca:96:4d:d6:9d:15:
         01:c3:51:19:44:ec:9a:29:cf:99:d6:ad:6c:50:b1:fb:d9:75:
         31:4b:ae:23:78:22:3d:fd:6a:09:d0:9d:33:e7:48:d3:c3:81:
         81:a3:4d:17:37:77:4f:c1:94:f5:8e:57:56:58:70:9f:4b:4c:
         b8:30:bf:a0:7c:d0:9d:a8:b8:ae:11:c0:ef:4b:b9:a8:f7:82:
         5d:72:da:fb:63:87:36:64:91:42:0d:b1:82:30:ad:b0:a2:59:
         25:dd:ba:97:df:f5:c2:87:f2:1f:44:a8:2f:ce:f3:dd:a4:c2:
         f9:87:a5:c5:d1:90:0f:3e:04:ce:40:d4:a5:d5:fd:ba:f1:24:
         50:9b:06:da:8a:25:6a:08:e1:9d:10:07:42:5f:41:23:76:a8:
         dd:cf:5b:e5:20:95:de:7f:6b:75:66:96:1b:5c:d4:c8:be:48:
         bb:59:85:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:43 2025 by rpki-client