Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Qdh-kGV1SoW7LJf7COOfVlQRLCw.roa
File:                     Qdh-kGV1SoW7LJf7COOfVlQRLCw.roa (raw, json)
Hash identifier:          I53xu5ymNKDxEGPo0Fjyya8yfYAfA55Lvs5cVIs7dxw=
Subject key identifier:   41:D8:7E:90:65:75:4A:85:BB:2C:97:FB:08:E3:9F:56:54:11:2C:2C
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       03B7
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Qdh-kGV1SoW7LJf7COOfVlQRLCw.roa
Signing time:             Wed 18 Dec 2024 02:12:59 +0000
ROA not before:           Wed 18 Dec 2024 02:12:59 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        14.9.80.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 951 (0x3b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:12:59 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=41D87E9065754A85BB2C97FB08E39F5654112C2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:9d:06:9d:98:42:dc:4c:98:e0:ef:2b:df:fc:
                    af:1b:5c:36:6c:10:4e:d8:c8:20:39:02:51:53:f8:
                    49:aa:93:fd:16:13:42:0a:8d:05:66:d8:36:e3:d4:
                    b9:70:a7:61:0a:31:31:69:db:9c:f1:ca:f4:52:c0:
                    92:86:44:0a:27:64:95:47:43:2a:f6:a1:ac:70:50:
                    de:ca:8f:71:f0:9c:d7:cd:e1:31:9d:42:7f:fe:fb:
                    de:2a:67:e9:2a:52:28:cd:70:93:0d:24:82:cf:ec:
                    8c:66:50:81:3e:25:0f:d6:10:63:ec:ce:e5:14:1e:
                    08:64:f5:59:fd:6a:a0:03:3f:0f:f8:2d:03:15:88:
                    32:93:a5:01:55:bb:cd:cf:9b:c4:b1:6b:a2:06:18:
                    d7:5b:c7:44:f2:3f:49:5e:e8:5b:ea:43:65:0b:62:
                    50:0c:6e:b5:b8:0b:41:95:49:04:5d:6e:b2:4c:b4:
                    31:a0:f3:01:04:3c:ee:f7:9b:c9:7f:75:86:09:10:
                    91:a1:2f:a2:f8:5a:69:73:ab:d4:9e:c4:7c:11:1f:
                    8a:78:49:a7:fe:85:49:4e:de:a6:0d:77:18:73:d1:
                    bf:5c:30:3d:bb:0b:ce:01:aa:03:40:39:65:74:61:
                    bf:8b:f5:ab:65:3c:e1:03:c6:2b:60:75:0b:0d:19:
                    2d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D8:7E:90:65:75:4A:85:BB:2C:97:FB:08:E3:9F:56:54:11:2C:2C
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Qdh-kGV1SoW7LJf7COOfVlQRLCw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.9.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         92:46:30:64:30:14:53:49:77:df:ca:e4:6a:5a:9b:ca:9d:5e:
         f8:46:31:9e:f9:bd:5f:34:ec:2f:b5:3c:a7:67:00:76:63:bf:
         e9:5d:1b:17:3a:86:c3:3d:48:19:ee:8b:05:ae:12:40:1d:e8:
         fa:8e:17:d4:e5:07:3c:45:74:45:ba:87:b0:6a:c5:db:62:15:
         23:8d:0f:2b:b8:3e:18:65:76:0e:d6:ad:94:96:94:99:38:ef:
         80:98:8d:30:f7:67:e5:d0:f1:94:8d:02:13:e5:6e:07:03:68:
         02:2f:ff:5f:2c:58:23:bd:cc:f7:38:5d:63:0b:5e:be:07:8a:
         c2:f6:25:6a:cd:67:cc:4f:18:cb:92:6d:b0:0c:4c:bc:55:23:
         e4:9a:86:1c:4f:b0:30:ce:53:1c:70:94:8e:95:a4:b6:57:05:
         8c:95:6c:01:97:24:46:82:4b:e9:95:e1:69:c6:c9:09:bd:f1:
         d5:93:ac:4b:8b:7e:e8:65:2e:e3:e6:b7:95:ec:0b:4a:87:81:
         73:bf:79:6f:ff:2e:50:ca:4b:de:8b:09:a3:5a:ec:58:af:ae:
         d7:2b:d5:33:39:e8:51:fd:ba:15:40:05:85:6a:a6:15:8d:38:
         e7:5e:be:93:57:00:b7:f4:be:18:b1:e6:ba:ac:92:33:36:2d:
         86:0b:8e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:21 2025 by rpki-client