Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Ub8_M5utB8iw1h2YDD0HsuqHrVQ.roa
File:                     Ub8_M5utB8iw1h2YDD0HsuqHrVQ.roa (raw, json)
Hash identifier:          Kgg0vRh6iPM3lXbtwggLi00rme4JHeaSYIXpU1vHHs0=
Subject key identifier:   51:BF:3F:33:9B:AD:07:C8:B0:D6:1D:98:0C:3D:07:B2:EA:87:AD:54
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       049C
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Ub8_M5utB8iw1h2YDD0HsuqHrVQ.roa
Signing time:             Wed 18 Dec 2024 02:28:55 +0000
ROA not before:           Wed 18 Dec 2024 02:28:55 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        106.179.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1180 (0x49c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:28:55 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=51BF3F339BAD07C8B0D61D980C3D07B2EA87AD54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d0:f3:33:2e:b6:74:05:94:ec:24:48:a2:17:
                    49:f6:ac:75:6c:1d:f6:94:bd:1d:61:88:1f:ac:78:
                    2e:86:df:86:16:3d:47:7b:db:a9:b3:9f:13:b5:0f:
                    4f:bc:e4:f4:09:35:dc:9a:73:21:81:ca:89:2a:bd:
                    5b:6f:7d:8d:12:19:dd:30:3c:b3:ac:25:41:ce:f1:
                    29:84:da:5f:c9:2c:eb:ae:2a:42:53:c3:59:29:ed:
                    76:7c:29:e5:26:1b:42:70:f9:00:01:5e:62:44:e8:
                    ff:0d:ae:a0:3a:86:8a:08:34:1e:d4:d1:73:1f:71:
                    6d:79:2d:62:7d:1a:94:89:97:78:1e:55:54:65:09:
                    c5:2a:a0:33:3b:4a:ee:94:cf:99:b6:1f:5e:ad:79:
                    85:c0:52:46:43:40:31:c0:95:84:f1:ce:9d:68:55:
                    4a:30:cf:21:24:29:57:cc:d9:0f:78:d2:43:09:a5:
                    30:92:31:88:7d:f6:ad:19:4c:c1:e0:aa:8f:d1:b4:
                    a6:b4:3e:5b:31:40:2c:12:42:2b:a4:c1:10:e1:7f:
                    cb:ff:bd:3b:8e:fe:91:f9:ea:f1:3e:9d:98:7a:85:
                    ca:27:46:fb:02:85:19:c3:46:31:49:4a:cb:cb:2f:
                    14:aa:06:9c:7b:3b:99:d8:d3:b5:0b:bf:d8:58:60:
                    a3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BF:3F:33:9B:AD:07:C8:B0:D6:1D:98:0C:3D:07:B2:EA:87:AD:54
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Ub8_M5utB8iw1h2YDD0HsuqHrVQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.179.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         66:e6:99:36:9d:03:c8:49:fd:d8:39:88:56:1b:44:a8:0b:ca:
         3c:5e:b1:97:cc:10:b3:44:4a:9f:9a:e4:c9:9b:30:9a:27:1c:
         6a:71:be:dc:dd:62:d2:76:a9:87:94:4d:6e:03:86:cb:f2:84:
         64:b2:2c:8b:d8:af:a5:f0:47:e8:39:38:d4:eb:a3:c2:94:7b:
         77:c0:47:7f:4e:da:93:65:fe:9c:63:56:44:af:5b:2a:ca:18:
         c0:8d:27:21:9c:ad:05:28:b8:80:1c:17:30:53:ee:34:bf:b0:
         71:b1:ca:66:e4:77:82:34:aa:2e:1e:c7:07:eb:2c:90:e9:1f:
         6f:ba:4d:52:a9:fe:10:41:6e:0a:3a:44:e5:45:70:b2:1b:01:
         b4:14:58:1d:97:49:d9:a1:21:a5:fa:07:78:59:e3:db:48:95:
         64:30:e6:a3:0c:fb:f6:03:02:bf:0e:2c:89:fd:92:44:e0:e3:
         2a:c5:3c:c7:40:cd:eb:e0:05:47:fb:f6:34:c2:74:c8:79:de:
         0f:a7:ff:41:ad:0f:a7:3a:cd:d9:1c:cd:18:50:5a:75:ce:8e:
         eb:58:6f:af:ee:b2:b6:56:e6:d1:c1:3b:1d:57:99:4e:d7:fe:
         ea:f2:ea:41:9a:83:53:92:b1:40:5f:e0:8b:92:5e:bd:7d:0e:
         7b:ed:52:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:37:58 2025 by rpki-client