Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/VMaXK_Q5ibSWFaaZnFDKeX4QRX0.roa
File:                     VMaXK_Q5ibSWFaaZnFDKeX4QRX0.roa (raw, json)
Hash identifier:          j9r9Q+E0VbU/7fY+jZJrFzb72yrAKDmyzznC8eHc8QQ=
Subject key identifier:   54:C6:97:2B:F4:39:89:B4:96:15:A6:99:9C:50:CA:79:7E:10:45:7D
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0517
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/VMaXK_Q5ibSWFaaZnFDKeX4QRX0.roa
Signing time:             Wed 18 Dec 2024 02:42:18 +0000
ROA not before:           Wed 18 Dec 2024 02:42:18 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        210.250.128.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1303 (0x517)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:42:18 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=54C6972BF43989B49615A6999C50CA797E10457D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:69:18:91:3e:3e:32:19:35:48:ab:8b:27:4c:
                    41:38:d0:d7:f8:1d:07:23:3a:1c:a1:68:57:f1:00:
                    09:4b:04:2b:b5:38:a6:14:df:09:52:9f:71:d5:d1:
                    8b:72:53:0f:6f:6b:08:cc:5c:db:a2:aa:52:75:62:
                    95:77:45:78:08:26:d6:d6:6d:c8:93:9f:4a:5e:12:
                    84:00:43:c1:35:02:24:fe:34:a6:e0:4b:e3:c8:b6:
                    fe:d9:02:b6:c6:9c:c8:05:d1:e7:31:12:5a:a1:1e:
                    5d:05:47:bc:e2:96:02:27:2f:24:f3:36:58:0f:d3:
                    da:42:4d:e6:02:0b:94:b3:d0:97:d4:9f:cd:5d:3f:
                    4b:64:97:c4:15:c4:6d:8f:89:da:76:16:d7:43:2c:
                    64:5e:0a:c5:d5:77:5f:1c:a9:2a:da:83:9d:9f:f5:
                    d9:92:58:e6:83:56:a5:fb:9e:b8:26:c9:b8:dd:73:
                    95:da:b6:ec:5b:87:3f:b5:3b:6e:57:bd:a9:a5:5b:
                    d9:ae:0b:f3:52:3b:7d:b9:3c:ef:6e:e7:c6:fc:fc:
                    e7:99:20:66:e4:71:f7:07:e9:c1:39:0c:0e:6e:2f:
                    37:bd:e1:5c:32:f8:3b:48:5e:29:7b:11:ca:79:e7:
                    d2:48:f8:19:d4:83:75:d0:ab:78:6e:88:7a:27:89:
                    b0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C6:97:2B:F4:39:89:B4:96:15:A6:99:9C:50:CA:79:7E:10:45:7D
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/VMaXK_Q5ibSWFaaZnFDKeX4QRX0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.250.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0f:6d:03:d4:17:5e:06:21:30:e8:e7:42:1c:8b:b2:e9:b4:7f:
         51:e5:ac:35:6c:b8:20:a4:7f:ca:02:f6:84:bb:cb:a3:c4:bd:
         ce:68:7c:e5:82:b9:39:45:dd:c8:fe:52:f5:07:90:18:a3:f2:
         0d:cb:b9:1e:e2:2d:9f:e0:6e:c6:b3:2f:d9:d2:99:5f:fd:de:
         0f:a0:0d:e9:ab:49:de:9a:af:87:ad:8d:24:33:83:69:0a:4b:
         19:96:3f:27:27:d2:dd:09:25:fb:8e:2d:bf:d8:86:32:02:af:
         b1:d6:9b:bc:f0:86:bb:d1:c8:0d:6f:9a:f9:51:a1:cb:dd:00:
         d5:92:1c:a9:e2:59:0b:74:a5:b2:b3:62:fa:f8:de:35:25:b8:
         77:8a:3e:d5:94:06:0b:07:a3:0e:67:04:4a:d4:3d:ee:e0:a1:
         d1:3c:ba:92:b9:97:d0:df:33:05:bb:1d:cf:5a:05:f9:c1:16:
         aa:23:e1:8a:83:00:7d:b8:7a:a1:d0:74:a8:c2:ec:83:37:70:
         34:64:ab:54:3d:e5:24:ad:0b:aa:1a:6a:86:4e:38:90:73:7c:
         c7:82:00:8f:9c:af:30:8b:bf:f0:5a:af:69:7c:05:9b:de:8c:
         72:25:50:eb:cb:96:20:41:d4:39:7a:0b:e1:71:f6:4e:0a:8c:
         88:50:57:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:10:27 2025 by rpki-client