Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/_1ntZuxBVrEJNg1jEjdf8UQZrNQ.roa
File:                     _1ntZuxBVrEJNg1jEjdf8UQZrNQ.roa (raw, json)
Hash identifier:          w0gV+zbprOkwiTXoLYXQdf2wWUFIgTwoIahIr/2CNT8=
Subject key identifier:   FF:59:ED:66:EC:41:56:B1:09:36:0D:63:12:37:5F:F1:44:19:AC:D4
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0482
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/_1ntZuxBVrEJNg1jEjdf8UQZrNQ.roa
Signing time:             Wed 18 Dec 2024 02:26:28 +0000
ROA not before:           Wed 18 Dec 2024 02:26:28 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        182.248.128.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1154 (0x482)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:26:28 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=FF59ED66EC4156B109360D6312375FF14419ACD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9d:e3:0b:97:f8:f2:a3:9b:4c:93:27:b4:c3:
                    b3:9f:85:54:93:25:4f:ed:51:34:ba:17:de:e8:74:
                    fa:d2:57:08:97:ba:66:9d:c8:ce:92:1d:06:ca:db:
                    d2:a3:3b:42:70:a6:8e:01:ad:05:2c:d6:95:54:87:
                    af:7a:e8:90:d5:71:89:3c:92:73:2a:3b:9a:59:95:
                    f1:6b:e1:dd:7a:4b:f3:7a:d4:82:41:ae:3e:45:aa:
                    06:92:13:d9:73:72:ea:68:20:2d:55:27:91:b8:32:
                    59:98:9f:f3:3a:a1:b1:00:07:ec:5a:8f:63:c1:88:
                    76:1a:f9:a2:be:6e:c3:b1:aa:d3:2c:f8:c2:d1:2a:
                    25:2f:b3:0a:79:05:03:08:54:1c:db:0e:59:fe:85:
                    02:31:d3:ff:62:a7:bc:94:a6:97:d5:3a:37:5f:0a:
                    98:38:c4:7f:90:11:55:6e:c3:4c:4a:c3:15:56:a3:
                    dd:e9:44:cf:ac:d8:bf:fa:bf:35:3e:9a:2f:2f:c7:
                    f1:83:13:23:6f:6c:bd:06:82:a9:aa:5e:af:ae:12:
                    e2:0b:0b:9c:11:be:7b:f4:3a:41:05:72:71:44:a7:
                    6d:5e:f5:71:e8:5e:c7:02:45:8e:9d:61:4c:6d:78:
                    5b:6c:ff:e6:52:22:78:38:43:4c:a6:68:fe:58:41:
                    2d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:59:ED:66:EC:41:56:B1:09:36:0D:63:12:37:5F:F1:44:19:AC:D4
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/_1ntZuxBVrEJNg1jEjdf8UQZrNQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.248.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2a:9c:0d:66:28:a3:85:58:bf:7e:09:8e:4e:7c:dd:8f:19:bb:
         40:02:04:76:ca:c6:81:0a:5a:f1:e7:7a:1a:97:c3:ab:6e:82:
         ff:b9:9a:f6:fe:c3:2a:dc:fd:26:be:42:81:58:95:8b:60:36:
         03:53:52:72:ef:e1:40:88:82:5d:96:92:a0:e3:7b:fc:59:b0:
         06:44:3b:a7:42:5d:0d:08:0e:1b:cd:0c:c0:3e:a1:de:13:46:
         90:81:72:a8:29:14:db:2c:c1:67:2b:28:40:ba:bd:15:74:1f:
         09:25:d7:47:61:3d:c9:26:1a:ee:35:b0:37:a3:39:97:3b:0d:
         58:52:26:9b:f1:77:53:73:54:13:2e:9b:e5:11:bb:0d:94:1a:
         98:24:39:11:ba:4d:f4:78:11:a1:8b:9a:0e:2f:1c:cd:1d:1d:
         00:a8:1b:96:c7:1c:b0:81:65:f4:02:18:d4:91:9b:b6:88:a3:
         81:fc:46:e9:19:bc:b0:19:92:83:e9:68:a3:88:99:60:12:4f:
         0d:78:ce:ba:c2:a3:f1:e3:b2:be:b5:e9:93:e5:83:70:31:97:
         25:b0:26:83:21:10:98:56:ce:f6:de:08:a6:00:9d:a4:50:12:
         00:14:b4:bd:dc:a6:ce:80:7a:15:8d:72:57:f2:59:31:3f:12:
         95:41:6c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:48:09 2025 by rpki-client