Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/qcYaq1eSi6plHVa17UIP4maomv8.roa
File:                     qcYaq1eSi6plHVa17UIP4maomv8.roa (raw, json)
Hash identifier:          vw3pDw8nuiBSe5/z7HKjhPvVQQFxz+q7DiCExiSLOV8=
Subject key identifier:   A9:C6:1A:AB:57:92:8B:AA:65:1D:56:B5:ED:42:0F:E2:66:A8:9A:FF
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0403
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/qcYaq1eSi6plHVa17UIP4maomv8.roa
Signing time:             Wed 18 Dec 2024 02:18:52 +0000
ROA not before:           Wed 18 Dec 2024 02:18:52 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        121.111.0.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1027 (0x403)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:18:52 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=A9C61AAB57928BAA651D56B5ED420FE266A89AFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:55:13:83:93:12:ca:8e:8b:b4:99:1a:bb:e0:
                    b5:31:9e:b1:d6:b0:bc:af:c8:fd:eb:ea:eb:3b:83:
                    5c:e8:73:ac:cb:af:fb:11:ae:f1:41:b0:d3:05:b2:
                    6a:45:1e:bb:8c:80:58:23:a1:4a:34:9d:f9:c6:e2:
                    dc:f8:56:89:ed:2b:26:39:5c:d1:5a:00:e4:a3:ed:
                    7e:6a:77:e6:5b:e0:1f:c7:11:5d:cb:31:a5:72:f3:
                    f6:93:51:3f:60:6f:ed:66:9b:bb:f0:b4:e5:32:ad:
                    78:84:8e:07:a6:54:d8:2d:cc:79:9a:b7:74:1b:72:
                    24:90:63:02:20:37:32:8e:bb:20:41:7f:1f:0c:98:
                    cb:bf:44:f9:1c:25:17:34:1c:5d:9c:df:d9:f9:77:
                    5b:7c:42:3a:38:48:51:8b:5c:c4:00:40:01:02:35:
                    20:61:df:c4:31:b9:8d:d9:3d:99:32:b2:6e:d2:50:
                    83:ff:3b:a6:e4:f7:e2:59:be:87:c4:ff:ec:64:01:
                    3d:5c:a2:bc:7f:e2:cc:cf:22:6f:d6:1e:ab:4b:34:
                    3c:30:22:ff:80:e0:8b:fe:b5:ee:27:01:99:22:05:
                    b4:16:49:82:82:4b:35:b4:04:f8:26:4e:ef:82:25:
                    05:30:89:1d:07:ae:60:06:25:5f:83:79:96:88:06:
                    89:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C6:1A:AB:57:92:8B:AA:65:1D:56:B5:ED:42:0F:E2:66:A8:9A:FF
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/qcYaq1eSi6plHVa17UIP4maomv8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.111.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6c:96:c1:61:c9:dc:0c:e7:e3:20:d6:5b:ac:04:48:fc:be:57:
         40:38:11:85:54:7a:cc:fe:01:7e:76:99:35:28:ce:78:e6:d1:
         c1:73:7f:50:da:fe:b4:99:69:5f:5a:23:f8:d7:5b:87:5d:7d:
         43:66:85:9a:b1:74:bd:08:27:35:43:63:99:4e:71:e6:ca:fc:
         8a:73:22:ff:3e:d6:ce:0c:33:96:64:c2:de:d7:b5:e1:e7:71:
         ab:dc:56:f0:c3:56:70:e3:80:b6:a1:70:c6:4d:3a:e2:b4:b2:
         a8:fe:aa:75:ea:67:88:06:1c:c1:b5:21:9c:f9:73:2d:f0:17:
         cb:61:40:1b:6d:70:6c:d4:70:f0:d7:6d:b5:84:f1:89:2a:3c:
         c8:a5:6c:59:43:f4:3a:8e:34:09:72:74:eb:12:33:25:7f:67:
         65:bc:63:2b:32:7a:51:c0:9e:52:d5:c2:58:6f:f2:d2:f8:ab:
         c2:c3:4b:13:9b:df:34:6c:5e:6b:6b:85:bb:98:7b:d8:0d:66:
         f4:70:2d:80:15:5d:54:f6:a8:18:23:bc:b9:ff:d6:d0:82:4d:
         ae:cf:ea:3d:5b:8b:45:45:71:51:f4:84:7d:68:e5:88:18:bc:
         54:99:ff:c8:24:60:52:39:08:87:72:5c:e6:07:07:83:ac:9d:
         f4:62:7d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:13:06 2025 by rpki-client