Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Tr6_C_eQOdPdpozDLTtkkK5nOc4.roa
File:                     Tr6_C_eQOdPdpozDLTtkkK5nOc4.roa (raw, json)
Hash identifier:          VgyLRlMTZgHFVmoORu+Wll6Oui5WF6DUkMKHowfsOPE=
Subject key identifier:   4E:BE:BF:0B:F7:90:39:D3:DD:A6:8C:C3:2D:3B:64:90:AE:67:39:CE
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       051A
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Tr6_C_eQOdPdpozDLTtkkK5nOc4.roa
Signing time:             Wed 18 Dec 2024 02:42:19 +0000
ROA not before:           Wed 18 Dec 2024 02:42:19 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        211.10.160.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1306 (0x51a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:42:19 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=4EBEBF0BF79039D3DDA68CC32D3B6490AE6739CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c3:9f:43:d8:6b:ce:05:e0:fe:e0:f5:ad:11:
                    24:45:29:b7:c6:4d:85:8b:bb:03:d0:6b:76:34:cb:
                    7d:a4:0b:5b:4a:68:b5:9b:5e:0f:ae:fc:70:f1:13:
                    35:6f:d0:41:8e:ca:54:36:77:70:9b:50:11:5a:89:
                    18:aa:6c:6d:65:75:0b:8f:41:46:b5:d8:29:5b:88:
                    d7:6b:48:3d:41:36:d9:db:49:33:92:03:5b:e3:63:
                    0f:cd:b7:a7:eb:e4:de:f8:d7:7e:64:8e:c2:ff:17:
                    75:2b:84:33:ac:af:66:74:f6:fe:a4:05:d0:ee:47:
                    b2:73:37:3b:08:2f:7d:50:1d:8b:10:3f:98:a1:43:
                    04:10:f5:78:b2:89:4c:50:35:44:b3:d0:fc:31:73:
                    f8:9c:ed:72:dc:34:db:70:f0:9d:d4:61:6a:e6:47:
                    c1:3e:a7:7a:fa:57:69:e8:85:69:ba:fa:7c:4a:60:
                    b5:a6:e4:b3:44:b1:5e:2a:4a:ef:93:3d:da:17:1b:
                    30:d1:29:cb:3d:e4:d4:99:88:b2:a4:e5:80:2d:0c:
                    b6:b6:4b:b7:f9:fd:65:1d:68:be:b3:f0:4c:06:74:
                    3e:8b:9c:d1:eb:71:bd:98:1d:c6:60:47:9b:cb:4e:
                    b8:0a:b1:16:64:e5:dc:2e:c7:13:3b:da:97:4c:6b:
                    08:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:BE:BF:0B:F7:90:39:D3:DD:A6:8C:C3:2D:3B:64:90:AE:67:39:CE
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Tr6_C_eQOdPdpozDLTtkkK5nOc4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:a1:64:eb:cb:58:7b:ca:0b:2f:27:68:57:40:c0:ef:56:bd:
         bf:d3:f1:cd:04:c0:f6:10:51:14:f7:6f:66:d4:3a:be:66:99:
         d8:29:86:e5:9e:ac:5a:a7:5b:26:96:6c:00:fc:37:d5:17:79:
         9a:02:4c:f2:cf:a2:ae:c3:98:08:c7:f1:11:ea:21:6b:44:0c:
         bd:33:ee:5c:47:bd:da:b4:96:37:7e:74:44:fe:e7:91:d0:1b:
         a0:ed:fe:e0:39:07:92:c0:b9:7f:5f:9b:22:e7:48:6e:46:b9:
         06:ae:27:a5:93:d9:77:06:96:02:c5:ff:e3:e6:6a:a0:2a:f8:
         95:93:ac:94:c8:49:5f:e3:51:62:25:e3:d8:58:a2:43:6e:71:
         03:a9:5a:3d:e3:67:0d:3a:10:c1:d9:0a:75:e6:11:dc:8c:8c:
         12:d5:42:86:07:49:a9:88:d4:44:fe:f4:38:ea:03:fc:22:ec:
         db:86:56:1b:7d:43:1e:37:78:71:40:61:78:e5:79:c3:0b:a5:
         46:89:dd:64:ef:51:ef:de:da:0c:8d:cc:36:a1:6a:13:b5:42:
         21:f5:50:34:0a:de:46:a9:21:44:2d:e6:90:e2:59:5b:3e:e8:
         10:27:54:ec:45:65:6e:8f:02:23:9b:41:50:e0:c4:d2:ec:f9:
         f6:55:df:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:14 2025 by rpki-client