Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/YomvfQyT_NyM4MA28gIgcOKdOIQ.roa
File:                     YomvfQyT_NyM4MA28gIgcOKdOIQ.roa (raw, json)
Hash identifier:          fNTISmw9QZ9xfYUsyP0+d6jAvhApNFoNnvd+XaoTlvY=
Subject key identifier:   62:89:AF:7D:0C:93:FC:DC:8C:E0:C0:36:F2:02:20:70:E2:9D:38:84
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       04FE
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/YomvfQyT_NyM4MA28gIgcOKdOIQ.roa
Signing time:             Wed 18 Dec 2024 02:40:10 +0000
ROA not before:           Wed 18 Dec 2024 02:40:10 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        211.10.217.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1278 (0x4fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:40:10 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=6289AF7D0C93FCDC8CE0C036F2022070E29D3884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:83:08:e3:c2:4f:3c:f6:ce:9d:26:73:29:2e:
                    e5:66:6c:07:73:2b:ac:b9:f4:2b:02:20:a3:9d:cc:
                    72:fc:82:20:0b:3a:c9:05:e6:13:f1:13:bc:6e:7f:
                    1f:b4:19:24:5d:b3:1c:a5:fd:39:a0:bb:78:60:05:
                    f8:a6:5b:10:5d:ef:4e:41:a9:dc:93:82:7f:89:16:
                    ec:ab:61:64:0e:fc:df:46:74:0c:6b:9c:2b:e7:e7:
                    25:f5:2a:c3:31:12:b2:8d:a0:41:29:a1:d8:d4:fd:
                    3d:eb:e5:5b:52:5d:ba:40:6c:ff:d9:f5:24:38:b7:
                    cd:9c:82:11:f5:96:bf:12:f1:95:0e:fb:c0:c6:da:
                    f9:54:33:a0:7d:f0:c4:d8:ae:33:4e:f6:56:4e:bc:
                    df:2a:89:66:88:b8:26:cb:22:57:23:80:bd:f1:ea:
                    d5:36:01:b1:83:2d:bf:09:39:fb:5e:69:c8:76:e1:
                    be:42:4a:e5:10:bd:27:0a:0a:40:fa:f0:60:69:0e:
                    18:6d:4b:56:ba:fe:ab:d4:26:79:a4:96:cc:de:5c:
                    17:21:6a:ba:f7:20:0b:84:99:1d:5d:f6:1b:ed:11:
                    ac:96:cd:66:df:87:05:b5:3a:a1:2c:e1:df:80:9c:
                    9a:57:67:01:5b:c4:e4:bf:32:43:3e:76:1b:0f:4e:
                    da:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:89:AF:7D:0C:93:FC:DC:8C:E0:C0:36:F2:02:20:70:E2:9D:38:84
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/YomvfQyT_NyM4MA28gIgcOKdOIQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:87:c0:e7:a5:64:f4:35:ce:61:f5:73:09:0e:c9:ec:c1:70:
         7d:f0:c1:a9:de:38:09:4d:54:2d:27:0f:90:70:ea:cb:66:1c:
         6f:85:2a:01:e1:33:be:ed:9a:b0:b9:d2:b8:c1:00:dd:9b:6a:
         37:5d:b0:4f:1c:48:82:da:36:46:73:7f:7e:66:8f:e9:13:75:
         05:c9:b3:35:17:66:ad:fa:02:d9:6d:b0:11:c5:f2:e9:f3:5d:
         5e:f4:5e:ce:83:e3:62:f4:b2:d4:38:8a:2d:34:a6:f6:1d:a2:
         9b:bd:e4:97:b4:62:b8:55:11:bf:5a:f4:49:4a:00:8b:10:c9:
         79:be:25:84:59:d3:d9:2c:2e:26:aa:ee:94:8b:d9:83:63:e4:
         0b:43:29:31:56:eb:1a:f1:cc:f5:9f:52:15:10:c6:80:27:ae:
         96:40:15:a9:b1:b6:c3:66:40:c1:82:f3:76:c5:ce:e0:55:b0:
         51:c3:98:39:b3:61:27:a8:15:15:55:64:8f:9b:08:63:98:2c:
         d1:63:30:f3:1b:2e:56:4c:44:f9:ba:8e:71:18:96:f6:9d:67:
         e1:ea:6d:81:c2:0a:c0:5c:93:57:33:58:79:15:4f:20:ee:9a:
         02:b0:9a:f8:0b:8b:c7:4a:8e:d5:d4:e3:9b:08:dc:b7:17:1b:
         2d:10:d6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:14 2025 by rpki-client