Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/m7Lm0UbHQSeaXTfrijXRu0mSxZw.roa
File:                     m7Lm0UbHQSeaXTfrijXRu0mSxZw.roa (raw, json)
Hash identifier:          lWM/zzM3XNE6WIxjKEy/tV8ME+8oGSQKsMBdZZB4K4c=
Subject key identifier:   9B:B2:E6:D1:46:C7:41:27:9A:5D:37:EB:8A:35:D1:BB:49:92:C5:9C
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0436
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/m7Lm0UbHQSeaXTfrijXRu0mSxZw.roa
Signing time:             Wed 18 Dec 2024 02:22:19 +0000
ROA not before:           Wed 18 Dec 2024 02:22:19 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        61.200.128.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1078 (0x436)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:22:19 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=9BB2E6D146C741279A5D37EB8A35D1BB4992C59C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:26:05:d1:7c:ff:ac:1e:9e:4a:db:fe:3e:96:
                    b8:9c:4a:35:1f:98:16:8e:69:ba:84:de:1f:1c:51:
                    2a:e2:aa:36:3b:7d:c0:0c:48:26:ec:93:9f:d4:65:
                    2b:6b:ae:12:fa:3f:0e:fa:26:9b:97:f9:87:7d:60:
                    c6:2a:ad:15:30:ec:cc:c8:f9:0d:f9:35:5a:51:72:
                    f6:10:d6:92:d9:34:14:f5:2e:50:b2:b3:80:79:d6:
                    3a:96:b7:e2:13:f9:c3:a0:af:5e:85:2a:26:e2:d3:
                    54:5f:aa:44:05:7b:52:ec:16:e4:45:91:b0:7b:81:
                    ae:8e:55:3e:15:18:5c:24:d2:21:a3:fc:32:8b:14:
                    d3:6b:65:1c:e2:84:ed:37:4e:97:bb:70:07:a2:e8:
                    dc:0d:0b:21:95:0f:4c:ae:9e:c5:5e:29:f7:4b:3b:
                    a8:a9:e1:9a:a0:1e:05:21:18:e0:7e:6c:21:b7:0b:
                    65:33:fd:58:d4:c4:77:c1:94:b9:9a:9a:4a:be:46:
                    54:83:64:c8:97:fb:60:c7:0f:a3:d4:77:80:56:f6:
                    59:93:11:87:3a:e1:4e:63:ee:ab:32:74:2e:29:e5:
                    a2:ec:ff:58:07:80:be:bb:12:41:db:90:7a:92:d5:
                    f5:8f:a1:1f:50:8a:b2:34:28:01:6b:0c:e8:76:ae:
                    77:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B2:E6:D1:46:C7:41:27:9A:5D:37:EB:8A:35:D1:BB:49:92:C5:9C
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/m7Lm0UbHQSeaXTfrijXRu0mSxZw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.200.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4b:a1:09:89:e6:0a:f2:2b:a2:d4:b4:d4:ea:04:6e:a3:bf:b3:
         dc:3f:04:2a:c0:1d:dc:a7:35:9e:b5:d9:17:95:7d:73:74:43:
         75:bb:e6:bd:69:d4:84:f0:53:b1:41:83:87:fd:16:05:1e:f7:
         a7:7e:e8:63:1d:fd:80:a2:1e:f3:f5:de:a5:b0:80:bd:91:cc:
         80:56:35:55:68:33:27:c5:47:64:0f:63:c0:20:fa:5c:c6:f4:
         18:c5:fe:b0:3c:7a:6e:d0:5b:04:75:7d:aa:51:2f:e2:33:4d:
         c3:ee:bc:58:46:f9:11:d9:9b:16:03:78:7c:43:c4:58:1f:0d:
         17:62:7f:4e:f2:0d:ee:98:ad:95:d6:90:d5:f5:15:f2:99:c6:
         f9:3a:02:5e:8b:4d:8f:e4:d2:3a:ec:a2:49:69:ac:45:5c:2b:
         f8:4c:52:46:e0:2f:0e:8c:8c:39:19:88:48:3b:ca:e7:ed:9e:
         44:4f:d7:52:8d:7d:d5:fa:3f:59:2a:de:c3:19:35:f7:4e:3e:
         76:60:49:23:aa:9a:63:3f:ab:d9:46:2e:37:59:76:c1:07:6d:
         36:8d:57:ee:78:f0:2f:60:f6:65:ee:cf:3c:1b:e9:ff:b2:ab:
         38:71:85:14:d9:8d:8d:d6:fc:f1:66:36:43:ea:fe:68:cf:37:
         4c:c5:79:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:37:30 2025 by rpki-client