Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/d7vvc8UpN0ZWMuM3dgTluOifDH4.roa
File:                     d7vvc8UpN0ZWMuM3dgTluOifDH4.roa (raw, json)
Hash identifier:          FIrYO85CgJjvuntvGsOzpmVqiwUnTh0J0fdbFebCU4s=
Subject key identifier:   77:BB:EF:73:C5:29:37:46:56:32:E3:37:76:04:E5:B8:E8:9F:0C:7E
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       044D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/d7vvc8UpN0ZWMuM3dgTluOifDH4.roa
Signing time:             Wed 18 Dec 2024 02:24:04 +0000
ROA not before:           Wed 18 Dec 2024 02:24:04 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        222.226.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1101 (0x44d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:24:04 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=77BBEF73C52937465632E3377604E5B8E89F0C7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fa:93:c5:aa:35:a6:25:54:21:d7:0d:ce:43:
                    ec:0d:46:04:4f:62:a9:64:e3:fa:87:15:11:93:26:
                    7c:f7:4e:47:0d:8c:f0:f0:1e:4e:0a:33:b5:25:0d:
                    15:ab:57:cc:87:04:54:ef:bd:28:88:a5:68:ff:e8:
                    5d:8f:1e:c1:64:90:bd:a9:9d:51:8f:f6:fe:8e:74:
                    e0:d8:14:7a:93:3f:08:8a:d7:98:9c:9d:57:38:63:
                    9b:cd:d0:3c:a5:08:57:a2:c5:da:1a:60:3a:ed:f6:
                    29:51:25:b1:18:ae:8c:09:9c:21:90:11:c0:ec:e9:
                    92:e7:c5:09:b9:e1:f8:80:39:ca:c4:bf:ff:52:1d:
                    6f:30:93:95:43:d4:6a:cc:2f:00:20:2e:75:63:c3:
                    4e:06:61:7b:69:51:68:fe:ff:48:25:45:ac:02:5d:
                    72:fe:0c:86:3a:39:cc:d3:93:81:4c:ae:cf:a9:2e:
                    62:8f:d5:6d:5c:1c:06:93:85:6f:4a:03:c3:87:a2:
                    3d:5a:61:db:97:37:48:92:4a:71:d3:a5:99:40:bc:
                    52:2e:00:08:18:1f:16:c5:4b:b5:89:5f:68:a9:82:
                    77:4d:9e:59:06:4c:d1:fe:7c:25:d7:c2:df:4e:56:
                    ed:a5:a0:12:24:9c:3f:71:4e:e3:95:c5:e0:a7:39:
                    f2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:BB:EF:73:C5:29:37:46:56:32:E3:37:76:04:E5:B8:E8:9F:0C:7E
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/d7vvc8UpN0ZWMuM3dgTluOifDH4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.226.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2a:9c:1a:28:04:49:92:3b:74:70:fb:89:34:1e:cf:fd:1a:b9:
         de:46:fe:fd:30:61:45:47:02:72:6e:e2:10:b5:d1:39:c3:4e:
         fd:c9:37:f5:67:08:c5:0d:c1:8b:c3:04:00:22:3b:1a:63:f9:
         3e:bd:c7:0e:97:2c:6e:c7:87:86:b8:05:8a:7b:45:89:46:c6:
         be:df:7c:f4:3d:da:46:58:c6:bd:cb:03:bd:15:f8:59:ff:52:
         97:40:db:21:63:4f:03:92:8a:0d:dc:b2:cd:d8:10:71:81:4e:
         b1:6e:8f:88:f7:a7:94:90:b1:a2:a7:4e:0d:89:f5:16:63:65:
         4e:11:f6:cf:73:36:f6:ed:72:7a:d1:14:55:74:4f:50:5a:08:
         d3:a5:79:08:94:d7:9f:5d:1b:49:0b:bc:a1:95:f0:46:70:6d:
         9e:2e:d2:6a:71:39:17:2c:95:21:b0:f5:ea:30:02:f5:e7:23:
         8e:88:43:9c:62:b3:1c:9e:67:9b:e2:17:b0:e6:21:1b:c2:6a:
         bd:c1:98:6c:c7:db:89:86:0e:88:1f:52:d3:a5:c2:70:15:22:
         97:ba:ac:3c:5a:9c:20:5a:82:02:2c:69:ca:74:a3:e9:cb:50:
         29:8b:e5:8f:1c:1a:61:0b:99:1b:98:76:1d:0e:f5:3c:1d:ce:
         85:ee:71:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:08:41 2025 by rpki-client