Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZKhT_vtzc8QVXCsTS6CrtZRh4WE.roa
File:                     ZKhT_vtzc8QVXCsTS6CrtZRh4WE.roa (raw, json)
Hash identifier:          VEStYhZJgVrwVJVqE+hsUVmMP5PB9+PfuRvquZ3yMeY=
Subject key identifier:   64:A8:53:FE:FB:73:73:C4:15:5C:2B:13:4B:A0:AB:B5:94:61:E1:61
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       04F3
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZKhT_vtzc8QVXCsTS6CrtZRh4WE.roa
Signing time:             Wed 18 Dec 2024 02:40:04 +0000
ROA not before:           Wed 18 Dec 2024 02:40:04 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        210.167.192.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1267 (0x4f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:40:04 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=64A853FEFB7373C4155C2B134BA0ABB59461E161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6d:26:48:40:88:8e:7b:85:e7:0c:3b:0f:99:
                    55:e5:40:4e:3d:21:6a:45:a1:ed:10:60:1d:cd:00:
                    6e:37:e3:5c:6c:02:6d:0a:52:41:1d:69:b4:53:8f:
                    16:d3:15:98:f2:8b:86:b3:b3:2f:8f:96:ee:d4:4e:
                    91:d0:73:32:6d:25:9a:75:e0:3f:da:aa:56:7a:f3:
                    5f:32:a8:be:93:9a:fe:6e:ca:c3:d5:75:4e:e1:2b:
                    52:b6:5c:e1:da:f1:62:dd:76:3c:8f:50:32:76:e4:
                    19:64:e2:86:98:06:02:05:f5:51:b0:05:01:d5:10:
                    46:82:aa:c6:52:ad:2a:a9:e1:d8:c9:a8:07:9d:0f:
                    eb:d8:fd:73:2c:57:47:5d:e0:af:0d:a5:d3:34:f2:
                    b6:5b:fe:c2:8a:e0:79:45:be:ec:b9:20:02:29:6e:
                    b2:0c:e7:f6:ad:e8:57:02:e0:75:9c:87:b9:15:64:
                    c8:12:bd:34:f9:ab:28:71:84:4f:95:16:0c:34:10:
                    74:f9:50:49:36:ee:c2:b9:a5:5d:3a:5a:29:7c:c7:
                    2c:5b:14:84:38:52:cf:61:20:e7:3b:c0:05:b9:5e:
                    db:ec:2a:68:bd:8f:1d:6d:19:3a:35:2c:c0:b1:67:
                    23:4f:1f:98:87:04:8c:a8:4f:cf:f7:e8:b2:36:87:
                    ec:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A8:53:FE:FB:73:73:C4:15:5C:2B:13:4B:A0:AB:B5:94:61:E1:61
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZKhT_vtzc8QVXCsTS6CrtZRh4WE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.167.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2d:04:39:d9:08:da:f6:30:d2:b1:4c:b5:25:d0:10:83:e8:28:
         c0:6f:d9:fd:1c:4e:47:e7:51:f6:57:57:7b:ae:4e:fd:82:cc:
         db:e9:2e:7c:00:8d:b0:9a:18:fd:d9:48:b1:4a:18:6b:9f:8f:
         5e:b8:48:ee:ec:90:0f:86:a1:a0:0d:e2:42:ab:1b:16:63:42:
         69:14:a3:74:6f:eb:cd:96:be:54:ed:ea:7d:99:98:e2:ca:8b:
         d8:19:ca:33:12:07:77:eb:b4:94:02:bf:51:bd:6b:25:75:2c:
         23:02:45:f2:42:fd:db:59:a9:a5:3b:d5:20:b9:c0:74:9c:cd:
         ce:21:61:92:23:d1:de:01:66:31:58:20:ce:00:ce:3a:38:04:
         df:8b:8e:82:15:1a:78:a3:77:22:18:c4:4a:a6:65:a8:d6:39:
         04:c1:ba:fb:f7:6d:c4:d6:d1:3a:cc:2c:7a:83:00:82:cb:ee:
         f6:58:2d:49:18:33:09:06:94:ac:4f:38:57:e9:36:16:1b:dc:
         27:16:07:a1:ee:1c:bc:d1:10:0c:6a:1f:e3:a1:42:be:b4:a4:
         88:92:ae:77:c7:57:d8:78:d2:40:13:06:59:df:ba:fb:f1:73:
         c0:99:51:c3:39:b0:88:89:78:73:bb:f5:47:a5:c8:9c:b7:ab:
         d8:97:df:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:37:34 2025 by rpki-client