Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/rrGCSYz75tBrSCQcY6MWzrSqJ3Q.roa
File:                     rrGCSYz75tBrSCQcY6MWzrSqJ3Q.roa (raw, json)
Hash identifier:          vktAwSIs++I4c/G2mq5FsQqUm4Qy/dGMGHcLfP4UXqY=
Subject key identifier:   AE:B1:82:49:8C:FB:E6:D0:6B:48:24:1C:63:A3:16:CE:B4:AA:27:74
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0484
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/rrGCSYz75tBrSCQcY6MWzrSqJ3Q.roa
Signing time:             Wed 18 Dec 2024 02:26:29 +0000
ROA not before:           Wed 18 Dec 2024 02:26:29 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        106.176.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1156 (0x484)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:26:29 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=AEB182498CFBE6D06B48241C63A316CEB4AA2774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:48:ef:6f:dd:32:a9:c9:db:cd:f6:c9:64:9f:
                    10:8c:97:62:21:38:94:49:7c:fe:f2:f2:86:06:bb:
                    d3:1c:14:f0:e1:9f:34:eb:e8:2a:e0:4d:95:c2:91:
                    2b:8b:c9:65:56:2b:38:dc:d8:5d:95:28:89:c6:d1:
                    00:b0:04:d2:f3:bb:d4:ce:22:cc:9c:7d:c6:7e:39:
                    9c:9c:32:b0:29:40:46:88:05:d4:a0:6d:1a:bc:62:
                    98:7f:e8:ac:ec:c0:5f:3a:0c:a3:cd:9e:84:25:2e:
                    5a:fc:ee:d4:2c:af:e4:9a:f3:62:64:7e:07:03:e8:
                    eb:ec:ef:1f:9b:5e:09:00:a2:71:41:f0:90:a9:d4:
                    06:c4:73:c3:36:3c:b2:d6:93:3a:67:ee:d1:b0:24:
                    67:10:b8:ce:10:3a:55:0c:a4:3b:40:d9:e2:e4:91:
                    ac:52:7f:3e:ed:f2:86:a8:f9:f8:9d:d7:0d:d2:4e:
                    30:cc:7c:56:f0:3b:f2:09:96:82:d6:10:ca:89:86:
                    2b:e5:5b:fd:dc:9a:8c:51:e6:dd:08:84:fe:fb:ca:
                    18:9a:02:50:7b:3a:21:a6:d5:01:ee:1d:9b:32:be:
                    35:af:89:0f:d9:c0:8a:7f:07:df:86:ad:7c:d3:86:
                    ae:be:12:f2:1f:6a:ac:69:70:ee:83:5b:72:44:d2:
                    e4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B1:82:49:8C:FB:E6:D0:6B:48:24:1C:63:A3:16:CE:B4:AA:27:74
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/rrGCSYz75tBrSCQcY6MWzrSqJ3Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.176.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         92:88:2d:29:8a:66:af:e9:22:36:34:da:0a:72:bf:17:4f:46:
         31:e7:ca:00:85:b4:d9:24:84:02:1b:52:6c:71:f4:b9:7c:2e:
         00:b8:0f:e4:6e:f8:f3:f9:d7:32:fc:e2:c5:ac:69:71:59:20:
         9f:3f:20:88:44:fe:55:14:73:71:56:67:b1:67:e7:c8:c1:d4:
         32:e8:48:a8:fd:1e:8b:78:81:02:31:43:88:31:15:24:4e:93:
         0d:27:d0:a0:b2:1a:ef:13:56:31:22:f9:10:5f:f4:37:18:72:
         53:2a:05:d6:e3:d9:ea:22:3b:8a:e9:31:3f:d2:19:b5:00:2e:
         8e:39:33:50:43:7b:3b:e0:7b:0c:f9:c9:ba:17:3c:a8:1d:3e:
         f7:ef:77:a4:9d:a6:ae:4c:a5:99:5b:9f:e3:ba:21:e7:0a:39:
         b2:2d:0c:30:62:a0:92:59:f3:bd:e2:d0:8e:e3:0a:b0:1f:7e:
         d5:fa:b7:08:6d:6b:9f:5d:50:de:55:c7:8b:e0:99:75:07:2b:
         b0:65:21:4a:cb:9f:f5:7b:dd:38:f6:65:e1:db:85:9d:8e:85:
         68:6c:b4:a5:59:93:37:28:db:45:8a:da:2d:3b:5f:95:82:83:
         e5:06:5f:23:9a:be:ed:a0:e3:eb:77:ed:a0:21:5a:38:ab:9a:
         ee:db:7e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:22:25 2025 by rpki-client