Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/dbLHUj-itC4g6V8rf3RNXfHHZxM.roa
File:                     dbLHUj-itC4g6V8rf3RNXfHHZxM.roa (raw, json)
Hash identifier:          pjodTswTFBFm5hGGUCkcMIUT0FibXSe7uwmZb26DJWc=
Subject key identifier:   75:B2:C7:52:3F:A2:B4:2E:20:E9:5F:2B:7F:74:4D:5D:F1:C7:67:13
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       03ED
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/dbLHUj-itC4g6V8rf3RNXfHHZxM.roa
Signing time:             Wed 18 Dec 2024 02:16:36 +0000
ROA not before:           Wed 18 Dec 2024 02:16:36 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        106.184.0.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1005 (0x3ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:16:36 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=75B2C7523FA2B42E20E95F2B7F744D5DF1C76713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:bf:aa:70:12:94:fd:e3:94:29:2b:49:26:51:
                    3a:4a:5b:20:bf:92:ad:67:df:b4:c9:1e:a4:74:9e:
                    01:f1:87:5f:4a:2f:7f:87:99:61:19:3b:d5:88:08:
                    49:11:2c:56:5f:c4:9a:7b:d9:13:ca:aa:ff:47:e4:
                    80:ba:85:b8:cc:59:73:29:f6:e1:00:3e:57:36:22:
                    d4:58:4f:a8:23:b4:e8:d9:20:20:d5:b5:98:31:0a:
                    7f:2e:87:70:71:61:b1:ac:64:5e:23:7e:07:e3:32:
                    e3:5f:a4:88:aa:42:02:7e:a6:ae:05:a1:f1:04:82:
                    92:10:b4:58:50:78:8e:89:ad:e7:c5:9b:5c:a0:45:
                    1c:fe:fc:97:29:3e:a4:dd:df:06:9b:cb:7d:1a:05:
                    a3:cf:18:83:c8:51:c9:a6:1a:fc:d2:56:66:52:95:
                    19:d1:1d:ec:c4:cc:fe:cd:86:8a:b3:b7:03:20:98:
                    36:44:28:d6:4e:8f:f4:0b:b0:c9:9e:69:3d:b2:98:
                    18:38:01:86:35:bb:39:11:4e:e5:bd:27:cb:9b:a3:
                    c1:fa:3a:2c:58:bc:02:e7:86:31:ba:7c:64:69:c6:
                    4f:e5:82:41:ec:c9:d2:69:e5:03:eb:54:7d:da:69:
                    03:a2:59:c4:b1:98:b0:1c:4f:fc:19:fb:9f:ea:26:
                    1b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B2:C7:52:3F:A2:B4:2E:20:E9:5F:2B:7F:74:4D:5D:F1:C7:67:13
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/dbLHUj-itC4g6V8rf3RNXfHHZxM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.184.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         02:e0:42:ec:36:a6:51:17:4d:93:ec:a0:02:8e:69:98:85:4d:
         e5:95:70:25:88:a5:fe:bb:e0:8d:40:f9:56:e3:ae:ba:6d:52:
         c7:d2:78:d2:67:e8:8f:e3:8a:e2:d9:97:92:a0:3e:b3:11:f3:
         63:b9:ac:9e:8c:a3:c2:dc:a0:60:7b:19:36:33:7d:e3:17:80:
         07:85:08:50:86:4f:3a:84:a8:58:ce:c1:85:d7:06:e8:1d:d4:
         3d:7c:f5:46:d6:27:b5:47:f3:e8:ba:2f:2a:23:3a:32:ac:10:
         f0:b7:7e:01:a2:a8:d2:19:1b:78:8a:54:ba:4e:d7:62:f3:5c:
         70:04:6a:32:71:14:36:d8:05:a4:4b:e3:58:03:a6:fc:d8:04:
         b2:3f:85:a3:63:1e:e2:f5:92:58:97:82:d9:6a:5d:ab:d3:6f:
         6d:bd:73:53:bb:cd:ac:46:96:b4:81:86:52:6f:9a:f7:ca:89:
         ce:5a:e1:b3:6f:3b:f6:f8:4d:d7:b0:ec:3f:2d:4c:6c:83:b6:
         c6:9a:77:66:c4:c3:ff:e3:5a:68:5a:e0:e4:7a:79:db:a6:c6:
         67:88:db:85:35:65:71:33:66:ee:13:8a:79:c0:a5:b6:05:d3:
         cf:f1:c1:86:02:b6:bc:2e:b3:9b:66:d1:a9:67:ce:e4:3c:c5:
         fe:67:ff:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:19 2025 by rpki-client