Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/nwe01HjX4uS8VMZHenNkK6G-acQ.roa
File:                     nwe01HjX4uS8VMZHenNkK6G-acQ.roa (raw, json)
Hash identifier:          Kr/YrWes6CTztZrwsf+eVtpKcvC2PVsYEjY9OUJFeZU=
Subject key identifier:   9F:07:B4:D4:78:D7:E2:E4:BC:54:C6:47:7A:73:64:2B:A1:BE:69:C4
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       04A3
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/nwe01HjX4uS8VMZHenNkK6G-acQ.roa
Signing time:             Wed 18 Dec 2024 02:28:58 +0000
ROA not before:           Wed 18 Dec 2024 02:28:58 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        125.49.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1187 (0x4a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:28:58 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=9F07B4D478D7E2E4BC54C6477A73642BA1BE69C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:84:c1:1d:71:c6:44:9b:7e:9e:3f:40:0d:3c:
                    56:5d:dc:af:61:a7:eb:8a:ad:63:ec:59:73:fb:92:
                    43:7f:83:f9:35:87:de:99:b3:b3:58:f7:3b:3e:5c:
                    73:fe:b5:c5:82:2a:96:64:59:32:e8:72:6b:5e:28:
                    aa:10:87:b6:98:a7:74:8f:ff:f7:7b:60:16:9d:ab:
                    aa:de:76:d9:96:d1:7d:23:a2:8f:f9:09:0e:94:49:
                    e8:34:f0:2b:e7:36:52:c1:b1:40:e8:52:57:2b:b5:
                    64:b7:a5:a3:67:30:01:97:ba:ba:8c:62:2d:a5:a0:
                    92:44:3d:80:1e:25:3f:76:49:0e:18:4b:2e:6a:27:
                    05:06:57:ad:82:85:91:7b:89:f9:f9:84:da:98:db:
                    df:a2:cd:26:36:29:f9:55:9d:02:4b:68:1c:82:c5:
                    b4:be:49:03:e6:34:d0:6c:4b:30:97:f2:61:f1:09:
                    dd:ff:3d:75:be:a5:9e:91:50:59:5e:22:6a:78:2a:
                    66:9c:e4:69:15:38:96:26:81:50:89:2e:cc:9a:00:
                    7c:c5:e4:54:45:11:93:e8:62:71:b7:1d:94:3e:00:
                    4e:35:ce:2e:09:83:02:1b:35:da:27:0e:f0:72:2e:
                    2d:44:7e:45:c4:23:7a:33:60:44:90:45:61:c0:80:
                    cb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:07:B4:D4:78:D7:E2:E4:BC:54:C6:47:7A:73:64:2B:A1:BE:69:C4
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/nwe01HjX4uS8VMZHenNkK6G-acQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.49.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5a:2e:83:56:aa:b1:71:0b:b3:d7:2a:65:21:8c:ea:2a:cc:5b:
         26:bc:f7:41:08:d5:3a:34:63:bb:fc:5e:11:4d:ce:62:0a:fc:
         43:68:08:a6:91:ee:4c:13:d9:59:c1:26:5e:76:2e:b1:9b:e2:
         7c:ac:d7:14:71:ee:60:f5:82:f6:68:e4:14:74:35:08:97:22:
         66:22:52:1d:e2:04:78:e3:c7:7f:94:d0:e3:d8:03:4b:84:f8:
         b1:50:f4:e7:cb:4a:b0:37:3f:b3:67:5d:3e:f4:bb:dc:8c:f4:
         1b:32:b7:70:e7:55:d2:bc:74:74:25:df:38:fe:97:09:ce:4c:
         2f:91:b4:f1:31:cd:9b:6b:e3:79:cf:ea:e1:25:5a:b8:44:59:
         87:27:33:7b:ac:c4:f3:ef:d6:61:df:72:0d:55:2f:c0:1b:39:
         ca:72:ac:d5:ec:5b:3b:13:39:e6:63:af:de:60:97:e2:5d:7a:
         c4:b0:2c:8d:0a:61:25:6e:a1:bb:63:7e:d2:cb:44:6e:64:f8:
         56:64:a3:98:b6:20:09:cd:2c:ef:79:6a:aa:cc:66:8d:2f:8a:
         63:4f:3e:20:2b:ab:01:ac:31:ff:e6:33:f3:b8:c1:2c:46:b8:
         24:87:6d:8e:88:74:29:df:4c:bf:ea:1d:a4:67:bd:c4:be:19:
         37:8b:3a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:24 2025 by rpki-client