Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/hbuUSZFYd3Dg1UCLZenGnUNROGs.roa
File:                     hbuUSZFYd3Dg1UCLZenGnUNROGs.roa (raw, json)
Hash identifier:          W4HCmy1lzLselgn0EgPyB+QILZ+JgeyQPwUMEQ7kZLo=
Subject key identifier:   85:BB:94:49:91:58:77:70:E0:D5:40:8B:65:E9:C6:9D:43:51:38:6B
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       043D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/hbuUSZFYd3Dg1UCLZenGnUNROGs.roa
Signing time:             Wed 18 Dec 2024 02:22:21 +0000
ROA not before:           Wed 18 Dec 2024 02:22:21 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        119.106.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1085 (0x43d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:22:21 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=85BB944991587770E0D5408B65E9C69D4351386B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:01:0b:f5:5f:cd:53:02:8a:00:ad:09:49:12:
                    0e:93:f3:bc:c2:da:85:5f:28:15:83:2a:a3:60:83:
                    6b:a7:67:5b:29:8e:c7:54:3f:ad:c7:8f:91:6a:08:
                    13:35:f5:22:92:2c:90:55:16:43:a1:79:b6:51:bc:
                    0d:3d:2f:53:f5:ef:59:9c:6f:aa:13:18:30:24:5c:
                    db:ed:b8:ba:30:93:24:42:bd:af:b3:51:13:9c:d5:
                    fa:5d:f6:07:98:01:a9:05:b8:a2:f5:e7:a0:37:b2:
                    d4:c6:3d:9b:05:24:4b:dc:50:80:53:82:1a:59:27:
                    35:d0:c5:6e:27:36:e7:18:84:37:9e:fc:ab:56:00:
                    53:fa:ba:5e:65:6d:15:c3:37:03:d4:3c:03:17:18:
                    1b:a9:db:39:6f:b2:40:62:d4:11:06:f9:be:e6:6d:
                    e2:d3:32:92:ac:a3:d1:d7:c4:ac:ff:32:6c:0e:e2:
                    c7:df:9c:fb:20:c1:26:0f:72:8c:bb:f0:5a:1c:e3:
                    14:44:12:46:53:90:f4:81:09:95:aa:29:d3:b0:f7:
                    8d:32:51:a1:7f:80:47:32:b7:4c:92:db:20:d7:5f:
                    26:5b:b2:19:c3:1d:26:dc:c0:8f:f2:9e:fa:84:d7:
                    61:82:9a:fb:6f:56:84:14:56:68:97:09:62:f2:ec:
                    cb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:BB:94:49:91:58:77:70:E0:D5:40:8B:65:E9:C6:9D:43:51:38:6B
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/hbuUSZFYd3Dg1UCLZenGnUNROGs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.106.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         09:16:3e:d8:a0:d8:ea:c6:fc:f0:52:90:46:6b:1f:a4:70:40:
         f9:8a:2f:fe:24:58:36:25:c0:cd:f4:26:40:eb:27:a4:f5:4a:
         ae:60:39:48:e8:ea:c1:c0:b2:5a:9d:50:c5:ec:6c:d7:7b:d6:
         e3:dc:dd:8d:8f:82:c1:f1:95:b8:6a:8f:2d:84:9b:e0:a6:40:
         31:20:fb:dc:f9:88:c1:d7:8e:d1:9b:16:f1:20:40:45:06:f4:
         d2:69:23:65:38:d6:89:9a:2a:73:e4:aa:ff:e4:5c:36:26:77:
         9a:68:d9:33:dc:6e:a3:3f:d3:c2:3f:aa:d2:3d:bd:36:8b:22:
         df:b6:44:47:2f:15:d5:3f:2a:20:9e:e1:48:d3:c7:d3:0f:2a:
         fc:c7:1f:26:1b:fa:21:93:83:04:c6:e5:fc:98:93:21:02:41:
         19:d0:6d:e9:ab:a5:66:86:e6:01:ce:1a:82:d5:06:22:56:d3:
         09:38:a8:c2:6c:cc:ae:88:c0:14:f2:8b:0f:c9:db:30:7c:1e:
         6b:cb:8e:e5:16:6b:c1:e6:ab:8e:43:68:e1:7a:60:09:c0:d1:
         87:23:b0:9d:25:47:ed:b7:46:e3:3f:45:66:62:1f:c0:0a:cb:
         62:31:41:51:69:bd:5d:b3:5f:bf:c7:62:cb:a5:ea:f3:d4:c3:
         22:19:27:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:28 2025 by rpki-client