Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/RudK_EYsgbcdU_oV-YlB40lIUb0.roa
File:                     RudK_EYsgbcdU_oV-YlB40lIUb0.roa (raw, json)
Hash identifier:          kjO//vQ1HvF6xJQjEgGL8MbsOZYD2bGeFa0OaKo+FHo=
Subject key identifier:   46:E7:4A:FC:46:2C:81:B7:1D:53:FA:15:F9:89:41:E3:49:48:51:BD
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       03CA
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/RudK_EYsgbcdU_oV-YlB40lIUb0.roa
Signing time:             Wed 18 Dec 2024 02:13:06 +0000
ROA not before:           Wed 18 Dec 2024 02:13:06 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        210.239.128.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 970 (0x3ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:13:06 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=46E74AFC462C81B71D53FA15F98941E3494851BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:38:a4:85:c3:65:21:bf:7c:96:1a:eb:3d:16:
                    f5:29:bc:56:af:fa:ff:cc:40:c6:8a:1d:c3:37:18:
                    d5:d1:06:6e:d4:43:e1:ad:2b:0d:1d:e4:a3:47:70:
                    01:7c:f1:80:7a:68:51:e3:0a:7d:c2:88:30:a8:9c:
                    e8:dd:43:f0:25:e5:3c:25:1f:42:74:5e:ac:63:4c:
                    b3:5c:5f:40:c4:da:aa:2a:72:64:fd:b8:e7:bc:25:
                    aa:b0:9c:5a:b2:18:80:b0:6d:ff:a8:ff:b0:b6:10:
                    3a:b2:0c:d7:33:1b:4b:df:4e:10:fb:0e:fc:be:9c:
                    25:da:13:1c:bf:74:ab:e9:84:42:e9:79:a5:89:5c:
                    0b:24:26:e0:c4:3d:31:00:39:d0:12:31:48:43:bb:
                    20:c5:dc:d2:1b:92:21:24:9f:cc:d9:9c:d1:8a:50:
                    16:16:9d:5b:3c:ba:13:bf:34:b7:4f:f4:2e:01:1d:
                    9e:aa:ed:e2:b4:8b:43:ca:30:09:15:c3:16:de:c6:
                    69:89:71:c8:79:61:75:37:03:21:87:dd:a8:b6:a5:
                    d0:38:c9:fe:a8:e1:8b:ab:ef:8d:36:f5:46:e8:d7:
                    85:36:65:41:a1:2d:f5:83:8d:d3:2d:39:b3:c3:e2:
                    62:0f:59:5c:4d:3a:d9:ec:12:d0:45:e7:cf:f0:e7:
                    50:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E7:4A:FC:46:2C:81:B7:1D:53:FA:15:F9:89:41:E3:49:48:51:BD
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/RudK_EYsgbcdU_oV-YlB40lIUb0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.239.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a3:55:26:56:0e:58:30:76:c7:f1:3f:1b:ce:1a:f6:82:ef:b1:
         ff:9a:a9:76:31:14:41:f0:0f:8f:74:83:b6:67:96:28:88:cd:
         38:2f:0e:19:44:74:24:5f:0f:a0:c4:32:02:5a:63:5c:73:11:
         cf:ab:a3:11:01:e0:fc:65:fb:cd:a2:0d:d6:54:bc:32:6c:e7:
         b4:c4:37:37:0d:4b:a9:3b:cc:cd:56:8c:41:40:74:b2:50:07:
         d4:90:6f:d0:d0:9c:08:d7:bd:10:02:09:a6:4d:e3:66:ea:27:
         c3:32:c4:8e:8a:64:df:84:06:82:87:7f:84:ca:10:ea:02:0e:
         ae:ec:ba:f8:1e:14:43:ae:d9:f6:51:f8:ea:01:13:ce:36:7a:
         eb:8c:19:f3:81:76:50:a0:93:ed:2e:68:1a:3e:97:37:9f:b3:
         cb:68:04:9c:fb:3a:69:72:5a:59:f6:4a:25:1c:88:cf:2b:6d:
         83:9a:dd:fd:39:2a:db:66:0c:ff:7e:bd:e8:2b:53:b6:c0:3b:
         15:dd:e2:eb:b1:62:ae:91:74:46:0d:aa:f4:6f:90:e5:dd:66:
         e5:74:a5:99:6c:e5:12:78:08:c5:7b:b2:e8:d5:04:9b:65:e7:
         83:f9:a0:f3:71:cd:20:ef:80:e8:0d:17:7d:51:e7:31:42:c8:
         ce:c5:c3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:12:21 2025 by rpki-client