Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/gwLx4liciPFUE7g1OVQjaPw84Cg.roa
File:                     gwLx4liciPFUE7g1OVQjaPw84Cg.roa (raw, json)
Hash identifier:          +rjW3eeHQ7zzd5GaY7BEy/E4vuQEdGmfSFUTxeHBIjA=
Subject key identifier:   83:02:F1:E2:58:9C:88:F1:54:13:B8:35:39:54:23:68:FC:3C:E0:28
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       053D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/gwLx4liciPFUE7g1OVQjaPw84Cg.roa
Signing time:             Wed 18 Dec 2024 02:44:18 +0000
ROA not before:           Wed 18 Dec 2024 02:44:18 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        210.253.158.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1341 (0x53d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:44:18 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=8302F1E2589C88F15413B83539542368FC3CE028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a7:52:24:a1:41:18:f3:2e:05:3f:e7:a8:e1:
                    92:dc:c8:b3:08:d4:64:54:64:30:a9:d3:ba:7b:a9:
                    b3:36:4c:27:c7:b1:48:32:61:33:4e:04:2f:04:96:
                    ab:4a:4e:4c:c3:86:2e:26:a1:88:b6:72:b3:f9:57:
                    b9:5f:ac:f7:cb:dd:94:77:14:21:3b:03:45:ce:72:
                    08:3a:d6:c0:fa:8b:85:95:23:cb:cb:6b:a8:40:e8:
                    cf:ce:99:12:7b:73:22:c4:9c:c3:48:a8:61:ea:58:
                    4f:9f:4b:88:9a:43:23:b8:e3:1b:c1:d1:54:25:f4:
                    2b:3a:31:39:e2:e3:1c:71:61:64:9e:22:b6:99:b6:
                    31:56:c3:6d:53:5b:c3:c3:54:11:0b:22:de:91:31:
                    e7:5c:7a:98:14:ec:a5:4c:b6:a3:f5:5a:64:08:41:
                    5d:29:79:43:8e:fa:f2:43:49:4b:f8:d0:92:02:89:
                    b7:26:9f:40:93:d2:2f:8b:07:d0:80:5e:34:fb:10:
                    59:52:de:0f:b4:86:40:31:f7:a1:9c:aa:a4:3e:19:
                    f1:05:67:40:1a:73:10:b7:75:10:51:1a:fb:fe:5a:
                    0d:c4:e1:cc:11:39:3b:2c:c5:ad:a1:b2:4b:33:91:
                    1c:4a:f9:45:3b:63:18:e1:14:1d:08:d5:de:8e:8e:
                    86:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:02:F1:E2:58:9C:88:F1:54:13:B8:35:39:54:23:68:FC:3C:E0:28
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/gwLx4liciPFUE7g1OVQjaPw84Cg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.253.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:e8:0e:bb:6b:93:37:2f:4f:91:3c:d7:86:60:4d:9b:f4:d0:
         12:8e:ba:30:96:92:88:b8:a3:7d:cc:3a:db:ae:d0:21:66:e3:
         dc:ec:f1:67:73:5c:9a:a0:b0:08:87:8f:83:c0:89:cb:68:09:
         b3:47:eb:ee:7a:79:d9:38:dc:56:a6:ba:1e:a1:cd:94:c9:4b:
         5d:e9:63:c6:b7:d4:22:ae:f4:43:71:ed:8d:64:10:18:64:e0:
         48:21:76:0c:86:b8:89:fe:4c:ee:37:e4:ab:01:7a:0c:68:6c:
         44:06:f6:28:fa:01:6c:cd:d6:5b:f9:2a:40:24:95:9f:40:1c:
         c1:78:59:f1:53:3f:28:89:69:59:bd:c1:38:06:7e:aa:1b:f1:
         a4:eb:59:47:a2:85:2e:61:35:04:14:cc:9a:74:18:42:87:3c:
         5d:31:13:da:b7:f4:7f:8f:07:d3:86:10:ad:b8:7e:3b:4e:bf:
         7c:44:91:8b:4b:0f:34:1a:91:47:f9:93:b8:15:43:c2:ea:9d:
         44:f4:00:fe:8a:a3:33:1d:70:28:ce:3d:e8:b7:e4:a4:99:64:
         6b:5a:36:9c:f5:39:29:ac:ad:16:11:1c:8a:50:fd:17:cb:53:
         75:ca:ef:fd:81:99:7b:6a:ed:2d:ab:5f:6b:01:c1:0a:1b:91:
         6a:13:c5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:42 2025 by rpki-client