Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/R73rWW5kNITLPNHK9-wi0ZihFYk.roa
File:                     R73rWW5kNITLPNHK9-wi0ZihFYk.roa (raw, json)
Hash identifier:          yskyRse6m5wKFPeywlos6PAbDcCvVvBvj5OXzoCCVoI=
Subject key identifier:   47:BD:EB:59:6E:64:34:84:CB:3C:D1:CA:F7:EC:22:D1:98:A1:15:89
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       04D9
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/R73rWW5kNITLPNHK9-wi0ZihFYk.roa
Signing time:             Wed 18 Dec 2024 02:37:02 +0000
ROA not before:           Wed 18 Dec 2024 02:37:02 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        218.225.88.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1241 (0x4d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:37:02 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=47BDEB596E643484CB3CD1CAF7EC22D198A11589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:88:b6:36:e1:8b:66:9f:d5:bb:15:13:31:6f:
                    3c:57:3d:c4:ba:1d:d2:3e:71:c5:ac:82:e4:f6:2d:
                    cf:76:ee:bb:fc:1c:07:51:00:e4:96:29:49:65:95:
                    7b:b9:f6:83:6d:97:b5:76:ca:77:38:e3:f7:f7:e2:
                    f7:1a:81:39:1a:4c:f0:0b:24:07:26:31:5c:ec:37:
                    68:6b:bf:74:e3:fb:34:09:c8:a1:9b:22:69:b2:89:
                    b7:5c:27:93:7a:24:41:9b:23:ad:b2:2e:6d:aa:2f:
                    90:a2:18:7d:15:fc:4c:be:5d:e7:9c:53:a8:1a:a4:
                    9a:68:20:1f:55:30:97:7f:8d:5a:fe:11:77:97:de:
                    f0:74:b8:ea:17:09:15:be:7a:76:26:8a:a5:f3:b8:
                    53:44:09:a8:ee:e7:cd:6e:58:5d:49:f7:ab:f6:2a:
                    20:85:60:01:8f:e2:90:e5:75:1c:36:33:db:e4:a6:
                    64:48:63:97:84:cd:28:77:06:61:71:a3:e2:b9:f7:
                    52:d0:7d:26:bb:91:cd:83:8a:ea:31:7b:06:7b:e4:
                    30:96:1d:a1:c1:f8:38:1c:70:89:ea:d2:6d:94:13:
                    16:71:c1:10:43:25:bf:8e:d6:70:91:34:4c:10:ef:
                    07:0f:7f:18:f5:41:66:1e:d1:86:a9:40:44:89:8f:
                    8f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:BD:EB:59:6E:64:34:84:CB:3C:D1:CA:F7:EC:22:D1:98:A1:15:89
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/R73rWW5kNITLPNHK9-wi0ZihFYk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.225.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:4f:71:df:af:40:57:68:0b:44:c3:fd:4e:07:aa:f2:49:2f:
         a0:bb:13:04:e2:7c:c4:d9:7f:46:90:69:e9:4b:c5:03:2b:b6:
         19:2c:26:30:9c:36:08:83:85:82:65:fa:03:94:c2:d0:4f:6b:
         a2:4c:d4:52:9d:ba:64:1e:8d:e5:a3:fa:bb:53:5e:e4:4f:0f:
         92:9d:0c:79:15:11:40:27:c3:81:0c:b2:c5:0f:a5:68:57:12:
         15:e4:48:57:1f:9f:7d:5d:18:ba:19:f5:2c:8b:f1:2d:e5:1a:
         45:c3:2f:d0:de:49:40:6d:20:25:57:d4:1e:ac:61:d2:96:28:
         fc:ee:61:09:bd:f0:86:be:40:89:0c:e2:44:b0:b7:d1:11:2a:
         02:b0:cc:eb:cd:87:47:c6:47:1e:c0:8c:55:a1:9a:a2:7a:b7:
         4d:b5:9c:4c:c4:f2:c6:26:e4:84:95:09:9f:03:db:0e:87:a1:
         7c:48:5e:b8:44:b3:19:55:a0:d4:db:e9:dd:05:76:60:6f:78:
         d1:63:ea:f0:80:0d:17:42:98:74:ed:c0:4c:1c:26:28:f0:fe:
         5d:ad:82:6e:3b:1f:e5:a6:9d:c5:7c:47:e0:67:5a:04:22:04:
         48:60:d0:46:ad:99:47:06:12:f8:ed:04:e5:14:f4:29:1d:de:
         75:12:4c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:30:32 2025 by rpki-client