Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/PABbDoQXXOjrf14xIbF0wJzjcRo.roa
File:                     PABbDoQXXOjrf14xIbF0wJzjcRo.roa (raw, json)
Hash identifier:          gH8QIGMNq0N0SE30b4Pc7GCWxa6KbPj43beWAWsRFOk=
Subject key identifier:   3C:00:5B:0E:84:17:5C:E8:EB:7F:5E:31:21:B1:74:C0:9C:E3:71:1A
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       045C
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/PABbDoQXXOjrf14xIbF0wJzjcRo.roa
Signing time:             Wed 18 Dec 2024 02:24:11 +0000
ROA not before:           Wed 18 Dec 2024 02:24:11 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        121.111.224.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1116 (0x45c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:24:11 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=3C005B0E84175CE8EB7F5E3121B174C09CE3711A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:00:1e:f2:7b:6d:d5:52:bc:7e:57:04:b3:22:
                    62:b5:bb:1a:d0:3b:87:28:ee:e4:85:96:62:b5:9f:
                    b0:7f:03:66:53:0c:bd:2f:5d:83:4d:9f:a5:43:6e:
                    da:a6:41:e1:04:bc:67:d3:7e:60:c2:d2:a1:f9:10:
                    bf:c1:62:ca:c0:7f:ab:e1:c1:63:99:26:88:09:6d:
                    d8:89:7f:c7:f5:73:89:a0:91:7c:4c:3a:1a:85:89:
                    90:2c:61:59:99:a3:4b:a1:35:92:81:e0:6f:e5:9e:
                    0d:a0:d4:73:9a:4c:21:c2:8a:cc:2d:eb:05:b9:ad:
                    e8:78:6c:8f:c3:e2:8b:07:71:42:85:f7:75:da:cf:
                    fd:55:ff:ba:f6:83:cb:d0:3c:7c:99:96:96:8f:e7:
                    21:1d:9e:61:0b:05:1c:82:23:e6:0b:47:2f:be:ea:
                    60:7a:f1:7f:62:aa:e8:20:86:63:ee:c1:12:bf:7f:
                    0a:d6:82:45:78:81:bf:c7:4c:c3:96:12:a8:85:b0:
                    c3:4e:30:d9:6b:bf:e7:45:1e:b5:82:e9:0e:e1:6f:
                    f6:e5:e4:f5:ac:51:9c:c4:03:35:fe:26:75:73:85:
                    fd:b1:d5:5d:12:d1:b6:ec:ed:be:f4:c4:ab:67:64:
                    60:f1:6b:b5:c2:cc:e8:65:ae:7e:73:c8:24:1d:4f:
                    e1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:00:5B:0E:84:17:5C:E8:EB:7F:5E:31:21:B1:74:C0:9C:E3:71:1A
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/PABbDoQXXOjrf14xIbF0wJzjcRo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.111.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0b:6f:36:4f:38:8d:31:8b:6f:50:4c:58:86:f1:46:dd:d3:69:
         40:9a:bf:8d:ee:97:12:ab:d9:ca:43:77:04:46:3b:b2:e3:3c:
         d1:66:e1:e2:49:9a:33:6e:2c:03:7e:51:9f:9c:b1:6e:74:5f:
         bc:ad:6b:15:dc:a7:4c:a6:8d:76:01:87:97:f3:c1:39:ca:e0:
         57:1e:84:07:b8:4e:85:f3:2b:0d:ab:c2:1c:b7:7e:b6:06:f8:
         18:fa:0b:90:48:92:5c:b1:5b:bc:5a:44:23:88:87:9e:db:32:
         37:9a:51:86:84:a7:62:37:2e:e7:77:e2:6d:c4:f8:59:06:57:
         b2:6b:e2:12:9d:6d:f7:c7:63:5c:9e:10:69:4c:60:53:0a:55:
         08:45:35:a3:11:23:23:7f:2f:69:08:f7:94:db:c0:4f:61:13:
         44:c4:f6:3d:bb:31:bc:88:90:cf:1a:f8:1c:46:4a:56:de:a1:
         20:0f:27:c2:ad:fe:d6:4b:8f:b5:1d:30:86:8a:e7:7e:55:97:
         70:c6:de:2c:cf:7a:92:f7:34:88:09:d8:95:8d:5a:a6:cf:27:
         ad:0a:fd:6f:00:ef:d4:05:60:61:5a:0a:9a:28:85:ae:af:8e:
         7a:c6:7e:54:52:e5:55:dc:eb:bd:35:cb:ca:e9:65:0d:32:71:
         81:25:ea:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:29 2025 by rpki-client