Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/NutDWn4Gt19ZHb2Ejfup3-7PmZc.roa
File:                     NutDWn4Gt19ZHb2Ejfup3-7PmZc.roa (raw, json)
Hash identifier:          nTxttOi3iiEtidio0VGsCvHnDf0sPK40VCC9Gp3HgAs=
Subject key identifier:   36:EB:43:5A:7E:06:B7:5F:59:1D:BD:84:8D:FB:A9:DF:EE:CF:99:97
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0435
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/NutDWn4Gt19ZHb2Ejfup3-7PmZc.roa
Signing time:             Wed 18 Dec 2024 02:22:19 +0000
ROA not before:           Wed 18 Dec 2024 02:22:19 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        210.172.64.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1077 (0x435)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:22:19 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=36EB435A7E06B75F591DBD848DFBA9DFEECF9997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:05:41:e9:b3:29:f7:c9:1d:ac:1f:c1:18:15:
                    c8:e9:84:40:de:69:35:31:ae:b2:c4:fe:4d:44:45:
                    ce:c4:cb:64:16:a5:dd:28:a8:fb:42:0d:a3:49:d0:
                    c8:8c:36:b3:0a:95:ce:c4:fe:a9:4e:ea:8d:0c:21:
                    6a:e5:b5:6c:4f:cb:1f:fc:0f:41:81:25:22:90:9e:
                    02:65:0c:52:4f:b7:f1:3c:52:82:07:69:e0:a7:07:
                    77:9d:ad:db:2a:16:e3:b2:5f:1b:7c:ea:65:0b:69:
                    bf:9c:b9:f9:e1:da:ee:ab:7d:b3:ab:ee:ea:87:c5:
                    b8:bc:db:6d:51:5c:ab:8a:82:48:82:8e:da:24:c4:
                    89:c7:ed:78:5b:af:ec:d4:85:26:e4:b6:84:e1:be:
                    32:6f:22:66:25:ba:ec:68:0d:c8:c4:66:3e:da:96:
                    4c:c2:63:1a:c2:d6:40:e1:b0:75:4c:ea:6d:c3:f9:
                    2f:2b:d4:ce:1d:d0:c5:b7:7c:81:0f:9d:c8:59:6e:
                    07:39:90:a7:0b:78:1c:da:78:fe:02:6e:7b:94:ca:
                    61:e2:89:c5:1e:a1:a9:26:24:8e:47:9a:79:35:4b:
                    f7:f2:71:8d:bd:16:f2:f9:cc:42:ca:4a:9b:4f:64:
                    cc:f4:cd:3b:10:30:90:1e:62:46:74:0e:a5:47:96:
                    b6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:EB:43:5A:7E:06:B7:5F:59:1D:BD:84:8D:FB:A9:DF:EE:CF:99:97
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/NutDWn4Gt19ZHb2Ejfup3-7PmZc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.172.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         40:6d:a3:18:07:4e:7e:81:5b:bc:49:80:20:00:b7:64:8a:fe:
         e7:1e:07:d4:85:1f:44:61:43:24:42:f6:13:16:b8:eb:7b:b3:
         47:58:ce:84:70:e4:20:e0:42:24:ac:2c:a0:3d:4b:6c:4d:01:
         b4:5f:32:25:93:2f:0b:d3:2e:27:dd:aa:c8:10:c5:c5:e3:b4:
         86:58:ce:f5:59:cb:71:55:e3:4b:13:0e:1e:f0:ac:90:84:e1:
         aa:c2:63:e2:7e:43:5b:2f:66:86:dd:b5:70:76:64:9e:b2:bd:
         c2:87:73:ee:61:77:15:32:50:2a:bc:3f:3e:10:69:13:55:61:
         8f:cd:42:d0:2e:a1:9e:b7:9f:d5:01:74:d2:11:4d:38:62:ac:
         c1:99:05:5a:f4:66:bf:e3:13:0b:d4:83:14:92:6b:a1:50:c9:
         ed:f9:ae:c0:ca:42:ad:fb:45:c0:83:11:0c:fc:98:e4:bc:8f:
         ee:9f:b2:47:81:bb:da:57:3e:ee:91:c2:8c:99:c2:5e:b0:4c:
         17:85:26:eb:dc:50:b6:f0:f0:9f:26:3e:34:91:db:14:74:d2:
         14:87:89:6a:f1:eb:49:6d:f8:38:6b:f2:85:c1:85:23:a6:05:
         6a:f9:d6:4d:dc:2c:56:9e:10:21:14:ae:07:e3:28:bf:cc:d5:
         eb:d1:d2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 20:47:11 2025 by rpki-client