Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/nFbi4di__8HDlLoUxnJ0ot7c4Vo.roa
File:                     nFbi4di__8HDlLoUxnJ0ot7c4Vo.roa (raw, json)
Hash identifier:          9EAhVntKtjf2Mu0N2PcQJVdjDdy/0COLVBwyLo6uvzs=
Subject key identifier:   9C:56:E2:E1:D8:BF:FF:C1:C3:94:BA:14:C6:72:74:A2:DE:DC:E1:5A
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0568
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/nFbi4di__8HDlLoUxnJ0ot7c4Vo.roa
Signing time:             Wed 18 Dec 2024 03:00:53 +0000
ROA not before:           Wed 18 Dec 2024 03:00:53 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        218.225.0.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1384 (0x568)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 03:00:53 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=9C56E2E1D8BFFFC1C394BA14C67274A2DEDCE15A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:65:05:b7:0c:0c:9c:0a:6f:a2:b3:fe:58:56:
                    ca:bd:9e:29:58:6c:91:aa:8d:49:7d:54:39:81:0f:
                    12:01:a2:87:0b:8c:8e:e2:c8:49:30:20:e0:cf:b8:
                    06:6a:ba:15:ef:f2:bc:d6:47:ae:d7:59:46:2b:ab:
                    aa:83:01:31:f5:31:47:35:79:07:8d:25:d8:58:56:
                    11:c3:c0:d1:09:3b:a7:03:71:86:88:b0:45:41:e8:
                    11:36:ec:5c:a2:50:78:96:d7:9c:1a:19:45:10:6e:
                    b6:2d:31:37:a0:43:7d:33:cc:85:44:b3:49:ff:8f:
                    44:f8:43:8f:f4:98:1d:73:62:2c:6c:cf:36:1d:12:
                    d2:f3:af:83:4d:4c:d2:d9:eb:b4:83:84:a9:f2:02:
                    76:02:43:f4:88:d7:c2:bb:49:68:06:ef:e4:83:ef:
                    93:82:e2:54:70:81:ef:ce:db:e9:72:24:c2:69:82:
                    b5:ac:9d:cc:f2:f8:0a:ea:f9:c7:34:7b:43:3d:c2:
                    8d:de:a2:a6:84:03:d9:7c:29:b3:ca:77:54:f8:ec:
                    02:95:51:ff:bc:2b:7c:1f:10:15:06:e0:2b:b5:67:
                    94:85:aa:cf:23:50:3f:af:8b:ef:51:8c:c3:74:eb:
                    e7:2a:ba:87:43:b4:86:81:40:9f:6b:6d:62:33:be:
                    af:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:56:E2:E1:D8:BF:FF:C1:C3:94:BA:14:C6:72:74:A2:DE:DC:E1:5A
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/nFbi4di__8HDlLoUxnJ0ot7c4Vo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.225.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b4:c0:44:5f:cf:c2:d8:35:47:e7:8c:fb:45:a3:7e:d6:be:a0:
         65:8b:52:f9:f6:76:d1:1b:3b:38:b3:7a:51:42:6b:3a:4b:19:
         93:15:95:aa:69:46:19:a2:fa:6e:cd:8e:5b:dd:43:ac:78:db:
         67:16:cf:94:9c:87:83:96:a1:13:bf:c1:96:5a:ce:0a:8d:4e:
         64:53:7f:6f:7b:15:3c:46:ef:a9:5b:d0:17:4a:7c:53:13:37:
         94:e9:db:6a:d9:19:f9:8c:29:90:cb:45:c5:33:be:cd:10:96:
         28:b7:4f:3b:cf:2e:c7:75:11:95:a8:81:07:f8:d9:5b:7d:b4:
         cf:9c:0d:eb:c1:bf:e5:2e:9f:32:0b:f8:62:8c:b8:35:5b:ed:
         23:35:90:39:39:5e:22:6b:38:ae:5e:52:8c:41:f1:c9:b4:d2:
         93:e3:fe:1f:a4:da:34:7d:5e:c3:90:0c:47:38:aa:09:f8:11:
         e8:9a:89:2d:a7:d1:e9:52:4c:49:14:02:e0:c5:b3:a7:41:dc:
         bc:e1:db:fd:0c:55:a4:01:63:9c:38:97:4a:6a:e6:8e:ff:c1:
         00:ab:bb:3b:33:40:e1:d1:68:3e:29:d0:87:a2:94:fb:bb:17:
         7f:d7:2c:a9:01:ab:49:d3:91:41:67:0e:49:31:0f:60:d6:aa:
         8c:4d:eb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:19 2025 by rpki-client