Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Mu_z_6Zb9a-zNDuPsasAJBBhY90.roa
File:                     Mu_z_6Zb9a-zNDuPsasAJBBhY90.roa (raw, json)
Hash identifier:          tl5Ey5H7YtuBm/4MzoznXrLHFp7bcxvHvKp0oRx8y5A=
Subject key identifier:   32:EF:F3:FF:A6:5B:F5:AF:B3:34:3B:8F:B1:AB:00:24:10:61:63:DD
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       03AD
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Mu_z_6Zb9a-zNDuPsasAJBBhY90.roa
Signing time:             Wed 18 Dec 2024 02:12:56 +0000
ROA not before:           Wed 18 Dec 2024 02:12:56 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        61.117.0.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 941 (0x3ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:12:56 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=32EFF3FFA65BF5AFB3343B8FB1AB0024106163DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ea:62:a5:94:47:e1:b8:ac:d2:f0:d4:6c:3f:
                    3c:ef:67:4e:61:46:0a:b4:ac:86:0f:45:3c:9b:bb:
                    b0:b6:ef:51:6a:07:0d:16:26:75:d7:93:3f:ab:0d:
                    2a:ea:1b:a6:21:82:c4:bc:50:c0:ba:21:c6:1b:f8:
                    6a:f3:c1:4f:4f:ca:8b:fc:08:4c:4f:ec:12:10:f7:
                    b8:04:fb:01:8a:e7:d2:0d:16:f8:14:63:4b:b5:cd:
                    c5:ef:f0:86:23:32:7d:fe:90:40:de:8b:a1:01:e2:
                    95:5a:e3:bc:81:59:cc:b4:b8:cb:36:cb:48:ca:6d:
                    77:3e:b8:95:d8:05:49:1c:e4:98:ae:ef:65:35:fc:
                    bd:86:01:10:1e:53:25:9d:7c:08:f0:9f:fc:ef:12:
                    a0:be:01:49:24:e1:1f:10:36:e2:b5:fc:e4:3e:cc:
                    9e:64:4f:40:69:d8:c9:4f:89:14:7c:c2:e3:da:f2:
                    58:74:99:86:af:36:d1:9f:18:e3:68:b5:d5:be:8e:
                    1b:ed:ba:6f:73:5e:75:7f:b3:f7:a4:14:bd:8f:8a:
                    af:72:bc:49:c3:13:7f:1e:17:aa:c9:59:3e:d6:a8:
                    2c:94:32:13:66:6a:8c:9d:e4:e9:4f:09:73:3c:47:
                    c4:7e:68:10:13:a0:29:8e:5d:08:bc:83:bd:b6:f4:
                    1e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:EF:F3:FF:A6:5B:F5:AF:B3:34:3B:8F:B1:AB:00:24:10:61:63:DD
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Mu_z_6Zb9a-zNDuPsasAJBBhY90.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.117.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         86:38:5d:a4:7b:6d:6b:00:cb:98:23:5e:38:da:bc:b5:27:b7:
         f4:57:cd:c8:8a:b3:0f:07:60:cd:37:4b:43:bc:e4:b7:cd:62:
         fc:29:8f:a3:67:13:3a:20:17:04:54:bf:49:ac:d6:49:e4:cd:
         9d:c4:a7:ce:37:d2:18:25:b2:b8:a7:2e:c3:a0:c9:78:a1:14:
         ec:2c:55:56:55:15:7c:1e:a9:39:34:29:92:6e:92:f6:48:94:
         ae:a7:75:15:8c:d3:a8:6c:23:4b:1e:f7:f9:fc:2f:9b:f4:4b:
         c6:a3:68:cf:0f:17:91:50:11:8a:04:72:e6:27:a1:a8:e2:ca:
         54:72:a0:03:bf:be:9b:09:a6:97:2c:a9:4d:d5:b1:db:4b:5f:
         e6:24:70:1c:81:ad:00:c1:5b:7a:41:22:b9:f9:d7:e3:c4:6b:
         0a:0f:ba:9e:82:44:80:79:28:b0:a9:3c:5a:c0:3e:8d:9a:28:
         06:fa:07:64:e0:0a:32:6b:1e:41:3b:ed:ed:04:ee:7a:6f:67:
         34:a2:57:c5:94:66:5c:f8:cd:7a:a7:5e:6e:b6:79:d9:34:79:
         08:3f:01:d1:49:86:9a:f3:a0:ca:2d:de:3d:60:c2:0c:34:01:
         d9:03:ed:1c:ab:ac:b9:3b:70:6b:dd:23:d5:4f:91:75:cf:c4:
         cf:1d:90:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:37:19 2025 by rpki-client