Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/QWZl2V_1W3L95rTVgcqcpgTcObA.roa
File:                     QWZl2V_1W3L95rTVgcqcpgTcObA.roa (raw, json)
Hash identifier:          umT41PQAgOJ5Huhm1773Y/KzWYMPK5Bhzg0ONn3nZCM=
Subject key identifier:   41:66:65:D9:5F:F5:5B:72:FD:E6:B4:D5:81:CA:9C:A6:04:DC:39:B0
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       03F4
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/QWZl2V_1W3L95rTVgcqcpgTcObA.roa
Signing time:             Wed 18 Dec 2024 02:16:40 +0000
ROA not before:           Wed 18 Dec 2024 02:16:40 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        111.104.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1012 (0x3f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:16:40 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=416665D95FF55B72FDE6B4D581CA9CA604DC39B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1f:4d:a7:83:9a:bd:89:fa:8d:f2:bc:52:51:
                    df:77:1a:5f:b2:cc:ef:49:d9:50:05:7e:90:ad:d8:
                    b2:0b:14:15:cb:81:76:45:63:f4:6f:1a:6b:94:92:
                    9d:89:c9:d0:b3:38:62:7d:33:d1:6d:28:0c:c4:ca:
                    3b:7c:76:2d:9e:4b:74:57:1a:99:7d:30:4b:b0:a1:
                    86:9e:0f:e4:5a:fd:c5:79:f6:dc:37:4f:18:c8:13:
                    cd:47:d5:8c:56:2c:18:96:38:6e:7b:c4:10:bf:3c:
                    97:cf:b5:23:e2:65:03:9f:dc:b6:d2:b6:98:04:4e:
                    b6:01:2b:0f:2c:67:54:b7:ce:ca:60:b0:39:42:0d:
                    8a:da:95:9a:69:81:a9:d4:ad:35:4e:c4:d8:04:a2:
                    20:0f:69:31:a9:8c:d4:30:e7:e7:4a:11:37:89:4a:
                    50:35:36:b2:76:b1:fe:62:e1:50:70:b6:3e:15:81:
                    0e:e6:37:48:9e:4d:fe:c4:49:70:9e:5a:62:ab:4f:
                    bc:dd:12:bb:de:66:df:6f:03:f0:7d:55:a5:bb:68:
                    58:1e:ea:81:ee:a3:eb:9c:df:36:6e:27:d1:3e:d5:
                    2b:ca:66:1e:69:e6:b3:b6:41:35:1a:1d:85:47:6c:
                    28:28:a1:59:6a:5c:10:d2:4f:91:3e:d7:8f:ac:5a:
                    5c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:66:65:D9:5F:F5:5B:72:FD:E6:B4:D5:81:CA:9C:A6:04:DC:39:B0
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/QWZl2V_1W3L95rTVgcqcpgTcObA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.104.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         56:23:de:60:2e:b8:4f:eb:49:bc:d6:fb:ba:49:69:11:54:c6:
         d1:ed:8c:db:32:28:ef:80:53:61:70:bc:4f:69:ba:63:04:fa:
         1b:c4:25:0d:8b:dd:31:67:bd:ea:51:b1:7f:f8:37:ac:cc:5d:
         48:2e:f9:6d:17:3e:e8:54:69:73:85:71:c7:34:14:dd:d0:aa:
         31:3a:9e:6e:4d:70:d6:cd:f4:db:b0:2a:4b:55:1e:1a:48:8a:
         d1:2e:e3:1f:d1:75:5b:e4:6b:2c:2c:ea:2e:a3:66:35:0c:40:
         5d:50:c7:6d:a3:70:f4:73:d1:f0:00:4e:a9:90:92:f4:e9:ce:
         94:06:5e:76:b9:cf:f2:5e:c5:90:42:ae:16:6e:60:d7:48:7e:
         55:7d:9d:d3:ec:a9:9e:44:d4:d3:5b:79:e7:c0:d3:a4:10:f8:
         45:f3:2d:db:d8:aa:48:b4:22:83:1f:1d:6b:50:5a:03:7a:d0:
         e7:34:42:53:0e:fb:e8:30:bd:ae:70:e0:53:e3:26:6a:ea:d1:
         5c:e8:96:c7:67:6b:27:fd:03:db:0e:f6:b0:b3:21:11:59:e0:
         34:05:24:ed:2d:b4:83:02:54:4c:de:ea:c6:24:be:a3:35:6e:
         a0:9c:b0:56:73:32:74:08:23:bf:39:70:e3:74:a7:4c:9f:5f:
         bc:40:70:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:39:56 2025 by rpki-client