Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/U8so7ZF2x0L-0odINDJ1DlIkbz8.roa
File:                     U8so7ZF2x0L-0odINDJ1DlIkbz8.roa (raw, json)
Hash identifier:          8RAs3dXT9eHzG2dtU4/eNkFF94aqtMY0gVSdl8iAsEM=
Subject key identifier:   53:CB:28:ED:91:76:C7:42:FE:D2:87:48:34:32:75:0E:52:24:6F:3F
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       04D5
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/U8so7ZF2x0L-0odINDJ1DlIkbz8.roa
Signing time:             Wed 18 Dec 2024 02:37:00 +0000
ROA not before:           Wed 18 Dec 2024 02:37:00 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        210.254.78.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1237 (0x4d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:37:00 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=53CB28ED9176C742FED287483432750E52246F3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:15:db:b9:59:4b:56:f8:50:e2:3d:05:f5:80:
                    8f:54:b5:81:38:9d:d8:f6:55:ad:f6:d2:94:03:d6:
                    54:6d:85:3e:fb:7c:44:07:53:b1:fd:c2:65:b5:e7:
                    63:95:c5:ff:0f:4b:b5:3b:4a:92:db:79:11:d1:ee:
                    ff:82:ac:00:f6:9d:44:02:4f:88:f8:79:95:64:32:
                    ff:fa:18:d3:4b:69:ce:91:ea:d4:dd:90:70:c5:95:
                    12:1d:3d:60:23:c7:9e:90:5d:40:af:5c:6a:6c:78:
                    87:62:60:83:fc:b3:8d:48:b8:36:d3:8e:bc:5d:d4:
                    8d:bf:0f:1f:96:b3:d8:4e:0e:25:0b:9c:a7:bb:d7:
                    14:2d:ee:1d:de:97:f7:57:79:0f:4a:56:22:86:f7:
                    1c:3e:cd:fd:e1:7e:19:f4:a3:d3:9d:28:cd:8d:f5:
                    0b:ea:bc:00:f9:d3:cd:bb:44:90:b2:fa:25:d9:df:
                    7c:2f:de:7f:54:03:05:13:cd:64:50:33:06:fd:25:
                    eb:86:43:5c:e7:1b:47:a4:3f:b8:1e:74:27:0f:73:
                    a8:5a:74:64:20:86:41:14:53:71:c5:05:94:55:26:
                    fb:0c:b7:e1:bf:34:a6:13:50:f0:32:69:e7:62:a7:
                    b8:bf:2f:4f:26:62:a5:6e:91:c3:13:95:ce:45:d7:
                    10:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CB:28:ED:91:76:C7:42:FE:D2:87:48:34:32:75:0E:52:24:6F:3F
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/U8so7ZF2x0L-0odINDJ1DlIkbz8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.254.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:55:88:8a:d6:53:70:35:1b:0b:8f:91:95:2b:a0:6f:36:e6:
         4c:7c:11:a0:3f:4a:14:64:d7:47:3e:cb:9a:57:be:80:84:aa:
         9e:90:0b:d3:69:7b:c7:a7:b5:39:09:d1:de:ec:53:ba:f4:6a:
         1d:34:7b:06:51:d0:79:1b:7a:24:ae:3f:d6:43:c4:42:fd:39:
         4c:20:0c:a8:f7:52:be:c6:09:dd:dd:ac:02:3b:cb:fb:2c:1d:
         54:ab:4c:d1:2f:d3:c5:82:36:53:f2:31:4b:c2:24:5f:21:73:
         47:f8:83:00:ed:37:2a:ea:e3:8d:2f:e0:87:44:34:75:f4:88:
         df:1d:c6:3e:fe:df:32:37:29:f6:b8:56:c4:cb:0b:0d:64:c0:
         44:1b:be:c0:b2:07:4f:22:21:f8:73:65:83:b5:ec:c3:4f:d0:
         0c:3c:45:9b:2b:f4:a7:ff:21:a1:f1:8a:95:7b:f5:6f:3c:55:
         b2:92:a5:ec:87:4d:80:65:9f:28:6a:28:a7:77:90:b0:62:3b:
         88:d3:8d:22:f1:0f:71:cf:c9:23:01:7b:64:ff:bf:6e:d9:9c:
         3b:97:9e:77:99:79:9c:06:96:04:96:06:f2:55:f6:95:95:00:
         6e:3f:6e:40:d0:05:27:77:4e:93:63:18:c2:81:94:c5:3f:50:
         cb:16:bd:01
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBNUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw
MjM3MDBaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDUzQ0IyOEVEOTE3NkM3
NDJGRUQyODc0ODM0MzI3NTBFNTIyNDZGM0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCsFdu5WUtW+FDiPQX1gI9UtYE4ndj2Va320pQD1lRthT77fEQH
U7H9wmW152OVxf8PS7U7SpLbeRHR7v+CrAD2nUQCT4j4eZVkMv/6GNNLac6R6tTd
kHDFlRIdPWAjx56QXUCvXGpseIdiYIP8s41IuDbTjrxd1I2/Dx+Ws9hODiULnKe7
1xQt7h3el/dXeQ9KViKG9xw+zf3hfhn0o9OdKM2N9QvqvAD50827RJCy+iXZ33wv
3n9UAwUTzWRQMwb9JeuGQ1znG0ekP7gedCcPc6hadGQghkEUU3HFBZRVJvsMt+G/
NKYTUPAyaedip7i/L08mYqVukcMTlc5F1xABAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUU8so7ZF2x0L+0odINDJ1DlIkbz8wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL1U4c283WkYyeDBMLTBvZElOREoxRGxJa2J6OC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADS/k4wDQYJKoZIhvcNAQELBQADggEBABJViIrWU3A1GwuPkZUroG825kx8
EaA/ShRk10c+y5pXvoCEqp6QC9Npe8entTkJ0d7sU7r0ah00ewZR0HkbeiSuP9ZD
xEL9OUwgDKj3Ur7GCd3drAI7y/ssHVSrTNEv08WCNlPyMUvCJF8hc0f4gwDtNyrq
440v4IdENHX0iN8dxj7+3zI3Kfa4VsTLCw1kwEQbvsCyB08iIfhzZYO17MNP0Aw8
RZsr9Kf/IaHxipV79W88VbKSpeyHTYBlnyhqKKd3kLBiO4jTjSLxD3HPySMBe2T/
v27ZnDuXnneZeZwGlgSWBvJV9pWVAG4/bkDQBSd3TpNjGMKBlMU/UMsWvQE=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:46:51 2025 by rpki-client