Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/UjjuV4leCkEMzQJJsVYrHert-oo.roa
File:                     UjjuV4leCkEMzQJJsVYrHert-oo.roa (raw, json)
Hash identifier:          yW6WAFIDENSHxyzs/Zhj9eTOIzikuecVlRtWpQo6kW8=
Subject key identifier:   52:38:EE:57:89:5E:0A:41:0C:CD:02:49:B1:56:2B:1D:EA:ED:FA:8A
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0452
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/UjjuV4leCkEMzQJJsVYrHert-oo.roa
Signing time:             Wed 18 Dec 2024 02:24:07 +0000
ROA not before:           Wed 18 Dec 2024 02:24:07 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        14.13.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1106 (0x452)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:24:07 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=5238EE57895E0A410CCD0249B1562B1DEAEDFA8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:f2:41:06:53:7b:cf:79:54:ff:8b:dc:9d:67:
                    86:9b:e2:0c:f7:ff:df:8b:63:70:50:8a:4f:29:ad:
                    2e:78:e8:f7:92:61:2a:2b:e9:be:3e:e9:f8:1a:d8:
                    99:f1:8c:f8:52:1e:08:ef:7f:0e:75:fa:6c:54:9a:
                    24:64:1c:76:05:0b:ef:f2:0f:3a:22:75:a3:a5:83:
                    bd:3c:83:08:99:53:e8:ca:86:a1:14:b3:64:85:09:
                    4b:d2:e0:bb:90:78:e9:1a:e6:9e:0e:66:c3:71:b0:
                    72:c9:7c:dd:61:d0:91:77:2a:9d:81:19:97:5b:79:
                    91:1f:cf:b3:47:51:ed:0c:be:45:54:89:7b:3e:d6:
                    a9:77:22:c7:0d:14:58:dc:36:57:7a:7a:67:00:79:
                    a6:97:e2:b9:10:65:95:e6:9b:4f:df:bb:cf:bf:09:
                    ee:47:7c:76:7f:42:98:7f:61:94:ab:7a:82:60:9b:
                    d0:36:21:46:05:7c:99:a8:34:c3:43:a7:54:e7:6e:
                    e6:bc:e8:64:da:f5:7a:ef:ab:cb:16:6f:3f:72:d3:
                    63:10:c9:72:aa:9b:d2:d2:ab:e3:d6:ea:2d:f9:58:
                    3d:5c:36:0a:2b:2c:b1:ab:b5:ac:c6:8a:6d:c1:27:
                    e0:ac:eb:49:9c:74:2d:5a:16:3f:e8:20:bc:7b:bb:
                    c1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:38:EE:57:89:5E:0A:41:0C:CD:02:49:B1:56:2B:1D:EA:ED:FA:8A
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/UjjuV4leCkEMzQJJsVYrHert-oo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.13.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         34:29:87:c3:4c:d2:35:07:db:ab:27:80:66:b2:95:be:e2:40:
         ab:75:00:46:48:46:cd:f7:b3:0a:1f:c7:cd:6e:44:6f:b4:cc:
         66:b1:23:e1:12:91:f7:f3:96:47:17:64:b2:44:57:79:bb:a3:
         2d:18:98:52:c8:ec:5f:d7:97:4d:67:9c:cd:2b:1a:52:56:a5:
         19:85:b8:30:5d:93:eb:12:0e:b3:8e:94:51:59:ce:e0:3b:8c:
         6c:71:48:e0:44:9e:11:27:84:d7:17:36:88:ca:c5:38:98:50:
         b8:f6:c8:61:1c:3e:f9:7c:fd:46:05:f9:c3:08:b8:ec:5d:d1:
         05:26:a0:ee:1c:7d:89:64:31:20:f1:49:f4:95:92:d9:17:7f:
         49:bd:2d:ed:82:06:34:04:2b:04:00:03:54:fe:c3:96:35:30:
         53:af:b3:09:c6:20:54:42:1c:79:26:71:fa:bd:37:18:7b:60:
         ce:66:e8:ae:21:c9:83:63:e7:4a:d5:49:66:c5:f9:50:b0:0a:
         69:33:f5:c3:29:23:cd:5d:c6:89:3a:c1:37:cb:39:8c:5e:7a:
         a1:47:d7:bc:58:8f:86:7b:8b:7c:25:7b:19:35:fa:ac:fc:00:
         dd:50:de:cd:25:68:26:52:eb:cb:e3:b1:8e:90:64:3a:45:98:
         10:f9:85:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:17 2025 by rpki-client