Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/rwOGHdrzsuU1uy1zLOE4xHodiyw.roa
File:                     rwOGHdrzsuU1uy1zLOE4xHodiyw.roa (raw, json)
Hash identifier:          bcSDfgpwbomZ1gR3XhIr0DUvto8UsbO7e2RfwbgzNx4=
Subject key identifier:   AF:03:86:1D:DA:F3:B2:E5:35:BB:2D:73:2C:E1:38:C4:7A:1D:8B:2C
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       04D4
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/rwOGHdrzsuU1uy1zLOE4xHodiyw.roa
Signing time:             Wed 18 Dec 2024 02:36:59 +0000
ROA not before:           Wed 18 Dec 2024 02:36:59 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        211.7.191.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1236 (0x4d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:36:59 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=AF03861DDAF3B2E535BB2D732CE138C47A1D8B2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:66:03:6e:25:84:bc:16:d1:b4:fb:14:ff:07:
                    df:0e:f7:58:30:04:a2:dc:42:52:5c:fa:7c:96:d1:
                    01:e4:2e:3a:8a:6b:b2:3a:bc:00:6d:47:fe:a8:19:
                    fd:72:bc:8b:38:1b:d3:61:9f:af:46:65:be:00:1e:
                    35:75:d1:38:73:18:12:92:c2:e5:c3:d6:97:b7:e1:
                    bd:03:7a:3b:f4:44:60:d7:ae:99:65:66:e8:61:fa:
                    1f:48:b4:da:da:f6:42:fd:04:c9:7b:8d:3c:b6:e3:
                    91:eb:29:85:29:21:94:63:24:c0:0b:e8:b9:a9:fb:
                    41:43:11:9e:a8:73:90:46:3b:f5:bf:8f:99:0b:e1:
                    f2:28:2b:64:46:50:a6:a9:a9:ce:37:0d:f2:77:13:
                    14:be:14:ac:8b:03:15:d1:21:ae:b9:a7:76:99:4f:
                    d8:5a:84:f0:2f:28:c8:17:1f:96:c3:fc:cb:6c:17:
                    33:05:a0:7e:d0:ee:65:05:68:89:4e:c2:92:4e:86:
                    20:07:45:6a:81:ce:df:78:0d:cb:2a:8c:00:c6:27:
                    38:e5:96:71:b9:9c:24:d2:c3:82:9a:91:70:02:ef:
                    db:51:ce:27:89:e8:ac:13:89:76:f6:e8:8d:21:3e:
                    aa:32:c1:42:89:3e:d8:59:19:9c:3c:8e:f2:91:d0:
                    72:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:03:86:1D:DA:F3:B2:E5:35:BB:2D:73:2C:E1:38:C4:7A:1D:8B:2C
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/rwOGHdrzsuU1uy1zLOE4xHodiyw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.7.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:7d:ca:f2:e5:bc:08:42:84:0d:19:ec:66:0d:9c:f0:50:10:
         04:c6:7f:f7:b8:59:0d:9d:03:3f:93:ca:f2:b6:eb:bb:0c:56:
         31:c6:0e:4d:0b:81:3f:24:4e:31:25:a9:bc:65:d0:59:1c:da:
         f0:18:96:88:f7:43:c0:22:ef:f2:5a:75:ba:c4:88:32:c5:64:
         24:0e:49:c5:fd:53:0a:bf:91:e4:f1:89:ed:c2:12:e8:bf:ed:
         21:40:a7:fc:7b:03:6f:1c:ad:54:0c:22:6f:4e:93:50:ab:d3:
         ee:58:eb:0b:33:af:10:33:25:ec:fa:22:3e:35:93:c3:0a:1b:
         3e:f7:a2:2d:f5:89:7a:88:31:8e:f7:21:f1:f3:b0:79:35:1a:
         64:67:96:73:bd:1c:b8:a6:37:d8:a6:27:3f:1a:c2:6e:e6:76:
         f7:ba:2d:d0:c2:1f:e1:b4:e1:ab:5e:b1:6a:f1:a2:e6:a0:84:
         55:fa:28:a6:8a:82:88:62:41:33:a3:2d:96:49:99:fa:67:e0:
         70:3d:b8:f7:c4:59:91:e0:1d:15:9e:d6:d3:a2:29:28:b7:6d:
         8b:f6:ae:04:57:3d:06:96:d9:6e:d2:7d:89:fd:f9:5d:ed:65:
         01:29:0d:25:5d:1e:ba:56:33:5a:5a:eb:11:9c:7c:79:fa:0f:
         3c:b0:ca:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:03:23 2025 by rpki-client