Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/pIMLBXLwXJoyGaWol5FbqPgULNI.roa
File:                     pIMLBXLwXJoyGaWol5FbqPgULNI.roa (raw, json)
Hash identifier:          5Qcc5HWbUYrZl72vZxaYhxBtP+hVW0dBo1UQ/zh7lVQ=
Subject key identifier:   A4:83:0B:05:72:F0:5C:9A:32:19:A5:A8:97:91:5B:A8:F8:14:2C:D2
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0447
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/pIMLBXLwXJoyGaWol5FbqPgULNI.roa
Signing time:             Wed 18 Dec 2024 02:22:25 +0000
ROA not before:           Wed 18 Dec 2024 02:22:25 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        125.52.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1095 (0x447)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:22:25 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=A4830B0572F05C9A3219A5A897915BA8F8142CD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:42:3a:3f:f8:76:ed:92:74:47:78:c5:cd:fa:
                    0f:06:72:c1:ee:f4:25:0b:65:11:e4:82:61:81:d2:
                    6a:a2:b1:d4:00:96:06:b3:5a:97:f7:fa:e3:a8:3f:
                    66:8b:93:24:07:70:40:51:28:dc:67:b9:c5:7c:6d:
                    ec:d9:2d:9d:9b:6a:d1:4d:c5:27:53:1e:b4:2b:de:
                    60:22:61:7e:ce:e1:dc:a8:96:1f:c0:a1:d4:28:0b:
                    b6:d2:4d:93:b2:41:35:13:4f:21:49:08:7f:96:f5:
                    5e:28:d6:53:11:d1:69:3d:6d:98:d3:12:a2:79:2b:
                    03:b4:d6:26:ba:45:0c:cf:2c:44:4c:67:69:99:26:
                    b9:76:bc:50:f6:e7:ff:19:45:83:66:a1:25:11:13:
                    08:bb:fe:f5:c9:cb:c5:52:c7:3b:c9:a5:ef:35:e4:
                    58:b8:d4:76:60:44:8e:c4:72:fc:cf:8e:8f:00:86:
                    bf:2a:43:9b:91:2d:cf:da:4f:ba:cc:8a:e5:06:d6:
                    66:ba:e1:29:35:0e:e8:d2:d4:26:4b:9b:fc:16:de:
                    88:de:05:70:cd:a2:c3:5f:2e:79:10:f0:51:f9:df:
                    ff:97:ca:41:d8:ae:7e:bd:db:8f:21:28:a0:bc:36:
                    e7:db:44:58:9d:63:7d:82:ed:06:28:ba:73:f6:90:
                    5a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:83:0B:05:72:F0:5C:9A:32:19:A5:A8:97:91:5B:A8:F8:14:2C:D2
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/pIMLBXLwXJoyGaWol5FbqPgULNI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.52.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9e:0e:22:db:0f:a2:e9:62:11:78:5b:4f:ec:27:19:12:d8:ac:
         14:74:66:31:e8:6c:f1:af:1e:09:13:0b:83:95:7f:9c:5f:95:
         51:31:b6:a5:3b:70:1f:5d:0f:6b:e1:da:84:cf:02:d3:07:67:
         9b:4d:ff:57:d0:c4:fb:bb:cc:af:c2:d7:8d:32:7b:1f:f7:53:
         50:16:dd:9b:0f:0d:ba:ff:f7:8f:ce:e2:32:27:14:4e:f5:12:
         e0:7e:46:09:94:02:b7:94:6f:fc:35:1d:93:6a:48:51:ba:ec:
         a1:e3:ed:a5:3c:ec:b3:9e:66:f5:cd:01:f9:e5:e8:9b:0d:2f:
         c0:df:d1:a5:35:3d:c8:b8:fb:2c:20:e7:2a:66:fc:bf:66:80:
         9e:67:96:cf:d3:f5:af:45:e4:3e:0e:41:14:99:a9:62:50:17:
         29:ed:4b:e3:23:c1:64:fb:3b:79:ac:cb:9a:5b:ee:94:dd:cc:
         5e:d5:da:03:52:6e:ce:ba:8e:1f:76:41:99:f8:4f:43:33:80:
         9b:6c:06:e7:c6:63:a3:0e:ce:51:ab:c5:3e:5d:82:1e:91:19:
         d7:d7:3c:11:24:46:4a:fd:30:67:9a:83:4f:af:21:66:92:b3:
         fa:48:31:85:73:6d:4f:a9:8e:d7:fd:69:ae:86:60:e9:bc:77:
         73:ff:7f:10
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICBEcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw
MjIyMjVaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEE0ODMwQjA1NzJGMDVD
OUEzMjE5QTVBODk3OTE1QkE4RjgxNDJDRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/Qjo/+HbtknRHeMXN+g8GcsHu9CULZRHkgmGB0mqisdQAlgaz
Wpf3+uOoP2aLkyQHcEBRKNxnucV8bezZLZ2batFNxSdTHrQr3mAiYX7O4dyolh/A
odQoC7bSTZOyQTUTTyFJCH+W9V4o1lMR0Wk9bZjTEqJ5KwO01ia6RQzPLERMZ2mZ
Jrl2vFD25/8ZRYNmoSUREwi7/vXJy8VSxzvJpe815Fi41HZgRI7EcvzPjo8Ahr8q
Q5uRLc/aT7rMiuUG1ma64Sk1DujS1CZLm/wW3ojeBXDNosNfLnkQ8FH53/+XykHY
rn69248hKKC8NufbRFidY32C7QYounP2kFpbAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUpIMLBXLwXJoyGaWol5FbqPgULNIwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL3BJTUxCWEx3WEpveUdhV29sNUZicVBnVUxOSS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwB9NDANBgkqhkiG9w0BAQsFAAOCAQEAng4i2w+i6WIReFtP7CcZEtisFHRm
Mehs8a8eCRMLg5V/nF+VUTG2pTtwH10Pa+HahM8C0wdnm03/V9DE+7vMr8LXjTJ7
H/dTUBbdmw8Nuv/3j87iMicUTvUS4H5GCZQCt5Rv/DUdk2pIUbrsoePtpTzss55m
9c0B+eXomw0vwN/RpTU9yLj7LCDnKmb8v2aAnmeWz9P1r0XkPg5BFJmpYlAXKe1L
4yPBZPs7eazLmlvulN3MXtXaA1JuzrqOH3ZBmfhPQzOAm2wG58Zjow7OUavFPl2C
HpEZ19c8ESRGSv0wZ5qDT68hZpKz+kgxhXNtT6mO1/1proZg6bx3c/9/EA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:37:26 2025 by rpki-client