Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/_i9BatR-wN44QPXjPXhavkE9OGc.roa
File:                     _i9BatR-wN44QPXjPXhavkE9OGc.roa (raw, json)
Hash identifier:          IvbjarZsjgVYj139LzdoAoTPHKstrOXpugUBEHg4GCA=
Subject key identifier:   FE:2F:41:6A:D4:7E:C0:DE:38:40:F5:E3:3D:78:5A:BE:41:3D:38:67
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       04F1
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/_i9BatR-wN44QPXjPXhavkE9OGc.roa
Signing time:             Wed 18 Dec 2024 02:40:03 +0000
ROA not before:           Wed 18 Dec 2024 02:40:03 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        211.15.128.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1265 (0x4f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:40:03 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=FE2F416AD47EC0DE3840F5E33D785ABE413D3867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ed:fe:ee:51:49:35:1e:00:89:cc:01:63:ce:
                    f1:69:6e:f9:24:47:0a:c9:1d:83:67:07:c7:c7:6d:
                    f1:18:9d:1c:aa:36:03:fd:cc:76:ee:7d:f8:ae:25:
                    35:df:73:9d:b4:b7:d7:97:3c:84:5a:98:2f:e0:d5:
                    5b:a9:bb:3d:f0:a4:a7:e1:ab:68:01:dc:ad:b7:5c:
                    c5:98:3f:9f:f3:8a:8e:78:6e:4d:c5:7e:e7:ec:1f:
                    ad:10:d9:bc:a1:00:19:fc:ed:fb:e3:cd:2f:89:bd:
                    46:44:b8:93:6c:1a:53:bb:b6:70:e0:f4:f8:7a:a4:
                    05:7a:4f:e4:a8:e3:0e:ac:03:80:c1:21:c0:f8:b6:
                    b9:ec:c9:18:42:aa:73:8d:fc:bb:a6:cb:47:ca:c3:
                    27:b4:f2:39:71:e5:97:c4:b3:f6:79:21:10:06:b6:
                    5b:f2:4b:05:28:8d:34:4c:83:00:38:bd:2b:53:33:
                    34:aa:5a:6d:f7:bc:d7:15:7e:15:8b:e6:7c:1b:23:
                    00:c6:eb:c4:f1:7a:46:50:6f:e0:b4:ec:16:b1:c2:
                    a0:df:c1:db:1f:86:ae:d6:f0:3a:f8:df:07:29:bf:
                    6b:42:87:20:d6:c5:6b:32:38:64:95:dc:ca:f1:eb:
                    a4:d1:18:05:93:c2:d2:bd:40:07:1b:e3:8f:33:02:
                    79:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2F:41:6A:D4:7E:C0:DE:38:40:F5:E3:3D:78:5A:BE:41:3D:38:67
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/_i9BatR-wN44QPXjPXhavkE9OGc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.15.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         48:41:9c:e7:9d:e8:89:21:43:b3:50:d9:1e:a8:bd:cc:be:e0:
         5b:ea:e0:04:b2:92:e8:62:c5:0d:5c:00:94:a6:06:1f:34:8d:
         9b:ae:97:33:35:2a:51:ee:7c:53:1d:5f:63:19:5d:c8:15:ea:
         33:4d:4c:98:4e:dd:87:1d:de:ad:de:32:3d:36:d3:e4:28:9a:
         6a:ea:e3:c6:5b:44:ee:c9:a1:75:1b:e7:65:e2:b4:c3:63:5b:
         fd:35:70:35:b6:27:4a:8b:4d:c9:1e:78:2b:48:c4:06:0b:15:
         24:c8:25:a8:d1:ac:00:72:44:9e:d1:d4:8b:ec:38:e0:84:ba:
         89:35:76:a1:a9:85:3a:c7:0c:ed:23:bf:cb:77:6b:f0:b2:7c:
         01:84:3a:7e:e7:0f:86:76:c2:4f:7f:0b:32:0c:88:dc:a4:0d:
         08:e8:36:b1:a3:2f:f2:f8:5b:fd:c5:cb:c5:a7:40:3a:6c:9c:
         71:91:78:59:9e:75:3d:8d:d0:ea:22:40:c6:ba:bd:18:8c:ea:
         81:3b:e1:da:cc:bb:b8:05:16:85:0a:28:36:8b:7a:8b:7f:5b:
         fc:d0:8f:36:22:9c:81:d1:36:bb:e1:b7:33:e0:46:a0:23:14:
         63:25:b8:3e:d6:9d:4e:35:8a:59:97:c1:ff:c1:f4:47:db:03:
         b6:ee:e6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:29 2025 by rpki-client