Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/j0d96RAKZQd2tdSUY3NSkSf9yK4.roa
File:                     j0d96RAKZQd2tdSUY3NSkSf9yK4.roa (raw, json)
Hash identifier:          fYw3/5TTqcdWkwkG+2nUR5nRIgpK3hWNOFpDVWe4dMY=
Subject key identifier:   8F:47:7D:E9:10:0A:65:07:76:B5:D4:94:63:73:52:91:27:FD:C8:AE
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       03C8
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/j0d96RAKZQd2tdSUY3NSkSf9yK4.roa
Signing time:             Wed 18 Dec 2024 02:13:06 +0000
ROA not before:           Wed 18 Dec 2024 02:13:06 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        124.208.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 968 (0x3c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:13:06 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=8F477DE9100A650776B5D4946373529127FDC8AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:76:ea:38:32:69:e5:b4:14:76:ef:84:29:5c:
                    ef:be:cb:e3:e1:33:ad:cc:a3:8d:04:69:29:e4:54:
                    11:5d:15:9f:7f:f2:45:05:78:60:d9:8f:b5:85:83:
                    58:ce:74:e1:43:53:ee:50:1e:b0:97:e0:12:15:a8:
                    d1:9f:d2:10:bc:79:b1:98:71:c1:82:6b:71:ad:0c:
                    4e:19:9e:8e:0d:03:78:61:2f:d1:5c:a5:0a:b8:d2:
                    69:84:8f:ae:ed:0d:1e:44:ec:09:66:45:c4:ae:f7:
                    22:17:fd:19:a1:a6:c8:1f:98:53:81:99:fb:f4:06:
                    0d:30:d0:97:19:e9:d8:1c:e5:1b:1b:83:82:f4:56:
                    3a:40:80:40:6a:b4:32:63:49:18:ac:d9:17:8b:94:
                    3e:43:12:75:02:91:09:45:84:68:b0:e5:8e:f3:01:
                    4d:80:d0:f8:3e:aa:d0:44:61:a4:e1:a5:04:b4:f7:
                    bb:e2:d1:cf:8e:1a:a1:d0:c1:83:e5:51:1d:85:a1:
                    59:ba:62:98:3a:f1:9e:82:ab:1a:c7:91:50:29:3a:
                    ed:93:36:be:e4:5e:51:59:5e:39:ab:80:3d:be:33:
                    df:8d:7f:20:a3:1d:c3:94:4c:27:de:80:1f:c1:a0:
                    41:07:2c:8c:45:47:89:03:c9:68:0b:6d:28:a7:99:
                    20:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:47:7D:E9:10:0A:65:07:76:B5:D4:94:63:73:52:91:27:FD:C8:AE
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/j0d96RAKZQd2tdSUY3NSkSf9yK4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.208.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3d:5b:64:a6:be:0b:87:ac:b1:0e:79:20:10:2a:60:48:98:71:
         c9:89:ef:66:ab:33:8f:36:42:37:a8:6c:46:e8:cf:8c:d8:30:
         5b:23:d6:e9:b5:17:0d:ab:85:e4:d5:bb:da:24:70:5a:26:cd:
         7f:d8:ef:a3:af:be:24:10:6a:36:fd:be:c5:6a:2a:49:74:08:
         8d:b7:00:ca:37:48:70:18:15:70:ce:98:a1:40:a4:4a:bf:13:
         f9:8f:4a:9e:52:c6:d5:d4:10:18:0c:0d:8f:5e:05:d7:5c:1e:
         5c:20:0e:f2:97:8b:dc:cc:63:e7:1d:52:b5:71:32:da:29:43:
         9e:43:dd:a5:45:f1:e8:a2:96:f4:cc:6a:d8:f1:11:2e:6a:45:
         52:48:84:74:f6:0b:e6:35:d5:b4:20:d5:b5:22:e2:71:4a:44:
         8a:01:85:0d:f6:ba:8f:a2:57:d5:a6:cc:af:3b:fb:25:cf:a7:
         b3:28:55:08:98:c8:e6:8b:6e:6c:08:f7:df:6f:c6:b1:c0:b3:
         82:1e:45:33:ab:d9:5e:73:3d:cb:7e:da:2e:95:68:e8:57:c9:
         30:4d:be:bd:fc:ac:2b:50:81:a2:b3:4d:ba:d8:35:30:92:0e:
         0e:5f:01:f0:09:6d:9a:f5:dc:4b:51:02:df:77:4d:b2:5e:10:
         f2:c2:13:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:22:37 2025 by rpki-client