Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/qusNANWMCorJyljp15jLkIauHpQ.roa
File:                     qusNANWMCorJyljp15jLkIauHpQ.roa (raw, json)
Hash identifier:          e63q7zbBb0O8TbgkwOk4mRjzkhvcMBywDMQn4Ri/TMw=
Subject key identifier:   AA:EB:0D:00:D5:8C:0A:8A:C9:CA:58:E9:D7:98:CB:90:86:AE:1E:94
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0423
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/qusNANWMCorJyljp15jLkIauHpQ.roa
Signing time:             Wed 18 Dec 2024 02:22:10 +0000
ROA not before:           Wed 18 Dec 2024 02:22:10 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        118.159.224.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1059 (0x423)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:22:10 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=AAEB0D00D58C0A8AC9CA58E9D798CB9086AE1E94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:12:2f:5f:aa:bb:0c:b2:5b:08:f8:30:cd:44:
                    a0:33:72:eb:13:57:9e:72:d0:4a:37:9a:d0:73:3f:
                    63:d7:c5:1c:e7:ea:86:14:16:d6:2d:f4:16:1b:5e:
                    93:68:94:e8:ff:5d:ad:72:36:9d:f4:bb:9f:09:31:
                    27:0e:0e:5d:ff:59:cd:ec:7e:8d:69:b5:78:9c:b5:
                    3d:e7:eb:44:f0:75:f6:87:38:e0:ef:11:93:6c:d0:
                    95:0b:1c:f1:00:af:39:6d:a0:a2:db:47:4f:5e:1b:
                    0d:d1:61:56:7c:a9:f7:18:28:39:c1:14:f1:f7:8c:
                    cc:16:ee:f1:29:57:dd:aa:a5:f3:4c:13:21:24:26:
                    e5:1d:02:f6:d5:90:1d:a4:18:7f:5b:11:ed:fe:f8:
                    a1:7c:ef:94:b5:9e:f5:1b:b8:d4:a7:4a:79:18:ef:
                    34:1d:da:b6:ab:cf:87:63:7a:8b:f7:6a:bf:19:67:
                    fb:83:98:44:1f:6d:02:5b:44:80:97:af:cc:13:75:
                    52:08:1e:df:e9:34:9d:74:28:5c:26:e3:5c:e3:2a:
                    33:25:b6:eb:6b:98:e8:27:80:0a:86:b9:36:96:9a:
                    16:4f:6b:be:9a:fa:e5:dd:ad:d9:21:4c:9c:4c:22:
                    d9:3a:5f:87:7d:a4:d3:4f:38:47:5a:47:ff:54:22:
                    79:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:EB:0D:00:D5:8C:0A:8A:C9:CA:58:E9:D7:98:CB:90:86:AE:1E:94
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/qusNANWMCorJyljp15jLkIauHpQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.159.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         37:27:65:b0:39:35:ea:ed:e7:17:75:fd:11:c0:5e:e0:27:ce:
         d1:75:21:2a:dd:64:90:bc:51:d3:fa:27:e9:ba:88:b7:4d:d0:
         29:c1:ad:b2:b9:10:57:6a:4f:1f:be:9e:b7:43:ab:0d:85:1a:
         6f:76:bc:88:fa:90:fb:d0:ef:65:c9:37:e7:3e:a7:89:7b:45:
         cc:c6:64:43:81:9c:dc:5b:68:89:51:d6:1e:ab:7c:b0:6b:99:
         73:3a:79:2d:3b:db:58:63:3b:d6:32:8c:56:3b:13:98:3b:0c:
         c1:17:33:c2:b5:e2:6f:cb:5a:5e:03:e7:bc:d7:98:1f:75:9a:
         1b:6c:97:4a:da:a9:b4:e9:53:42:2c:53:ed:bd:51:82:ab:66:
         75:ac:8e:1c:92:51:8c:20:58:9f:46:41:06:8b:37:41:84:33:
         13:94:01:50:1c:0b:0f:fb:9a:3f:ce:99:ea:b5:be:59:00:70:
         1a:9a:57:6d:65:2f:f5:d9:b3:37:5d:a2:24:5a:89:bf:08:bb:
         77:73:d3:36:5b:1c:f2:2c:24:48:ae:5f:6a:5f:37:51:16:6f:
         32:89:4a:37:c2:50:6a:54:7a:bd:9d:11:4d:0d:ed:c2:2e:8e:
         ef:b9:08:9a:82:39:d6:24:b7:c1:2f:37:0a:55:dd:d7:29:d0:
         9c:d7:7c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:45:52 2025 by rpki-client