Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/ew8GRKgY51v5MghuG3N1Zzt6FRk.roa
File:                     ew8GRKgY51v5MghuG3N1Zzt6FRk.roa (raw, json)
Hash identifier:          KSfkfO7NPbOFUYUpArWa5rHUJChK0oDxq0nD0eGZhfc=
Subject key identifier:   7B:0F:06:44:A8:18:E7:5B:F9:32:08:6E:1B:73:75:67:3B:7A:15:19
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0405
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ew8GRKgY51v5MghuG3N1Zzt6FRk.roa
Signing time:             Wed 18 Dec 2024 02:18:53 +0000
ROA not before:           Wed 18 Dec 2024 02:18:53 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        113.159.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1029 (0x405)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:18:53 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=7B0F0644A818E75BF932086E1B7375673B7A1519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:31:84:2c:65:15:d4:ee:f5:09:11:a2:21:8b:
                    19:52:4f:26:50:22:0f:14:ae:77:8f:fc:b3:70:f7:
                    41:c9:7e:07:d0:7e:9e:f1:6f:30:2c:d3:ac:2a:b0:
                    bb:85:03:a9:c8:24:94:42:08:79:ce:b2:fc:42:92:
                    7b:79:68:16:6b:14:33:56:46:da:ef:ea:e9:68:84:
                    03:d7:12:12:41:e5:fa:b0:dc:8e:63:86:9b:11:08:
                    64:6a:37:3c:9d:47:6c:20:d7:4d:b4:5d:60:38:79:
                    cd:9d:02:b7:38:c7:70:be:cd:e5:73:5a:6e:58:fa:
                    40:23:a0:a4:23:b5:6a:71:da:fb:af:60:4d:3d:76:
                    51:97:41:2b:82:e3:14:bf:14:26:52:a3:37:1a:d3:
                    35:76:8e:1d:8a:cb:ed:0d:96:61:0b:82:c3:22:55:
                    2e:e0:e6:c3:38:3a:ac:02:c5:7f:f6:56:0e:f1:5a:
                    89:4a:2c:0d:36:cc:9a:e9:b7:a8:07:40:75:7f:3b:
                    fb:48:df:36:5f:a3:31:6a:03:05:88:c4:c7:3e:3f:
                    fe:0d:c3:2a:10:cb:4d:f3:d1:57:bd:6f:93:c8:bc:
                    13:8d:69:f5:2d:65:44:3e:b3:2e:14:4f:e0:bb:5d:
                    a8:92:59:e1:18:8c:60:07:f1:33:84:67:3a:99:9d:
                    08:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:0F:06:44:A8:18:E7:5B:F9:32:08:6E:1B:73:75:67:3B:7A:15:19
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ew8GRKgY51v5MghuG3N1Zzt6FRk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.159.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         47:a7:cc:90:d8:e1:73:54:f7:39:0e:d5:18:d9:21:5a:03:e8:
         8f:ca:b6:c1:25:47:fc:72:9d:d4:bf:9e:81:28:5f:5c:43:c5:
         70:55:7c:92:01:0c:f3:85:a8:47:7a:6f:84:cd:12:c7:5d:a9:
         a2:45:f3:85:92:3a:b5:62:05:ef:a6:79:6e:59:1a:a8:f9:2f:
         14:78:b5:72:7b:4d:18:2f:62:3f:56:06:ad:9f:ff:b3:f4:b8:
         10:7f:7c:63:a1:9b:f9:78:bb:0e:df:ef:70:3c:34:ad:e9:bb:
         1c:bc:10:93:e3:7d:56:fd:25:e9:dd:17:5d:5d:73:2d:3e:d1:
         fd:ea:1c:71:66:5f:f4:91:b2:b6:c1:47:5a:fd:63:73:a5:02:
         e9:3b:0b:c1:6f:c7:1b:4c:86:0e:ce:23:a4:08:00:73:b5:87:
         0d:a5:74:bf:c8:91:1c:46:fa:71:b3:80:d4:56:36:85:d5:1d:
         4f:4a:74:80:52:34:4d:33:68:be:08:46:0f:6f:74:7a:9b:f1:
         e3:a8:01:9d:1b:1f:40:62:21:26:52:65:67:8c:fd:91:e3:69:
         88:01:65:a2:96:c3:9b:6d:98:4a:1e:54:87:09:91:e0:f3:a9:
         f4:30:6e:c9:23:5a:41:7f:52:b9:54:59:46:de:2f:75:04:93:
         5f:e1:21:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:51 2025 by rpki-client