Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/t0Db7cKUePEMGdHs5Wui-Jl5dF0.roa
File:                     t0Db7cKUePEMGdHs5Wui-Jl5dF0.roa (raw, json)
Hash identifier:          Ut7e/TtveQ5K8nkHaSgR7US2bpS9OTHWDGV0a9rb92Q=
Subject key identifier:   B7:40:DB:ED:C2:94:78:F1:0C:19:D1:EC:E5:6B:A2:F8:99:79:74:5D
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0443
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/t0Db7cKUePEMGdHs5Wui-Jl5dF0.roa
Signing time:             Wed 18 Dec 2024 02:22:23 +0000
ROA not before:           Wed 18 Dec 2024 02:22:23 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        106.170.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1091 (0x443)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:22:23 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=B740DBEDC29478F10C19D1ECE56BA2F89979745D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c7:2a:9f:f8:08:55:1b:53:3d:95:bc:fe:4c:
                    9d:da:f5:c5:b4:7f:35:df:26:23:7d:b1:27:cb:6a:
                    15:d4:6a:75:09:1c:0f:b8:f3:e9:c1:05:c1:0a:05:
                    c5:ba:70:14:a5:f0:8d:c3:b7:97:e4:42:2a:7b:59:
                    c7:a7:3e:91:45:84:0e:a5:85:99:6d:07:ea:ac:18:
                    58:26:2a:a5:4c:f8:57:ee:dc:cb:b1:f2:cb:6f:f4:
                    d1:c7:d2:97:63:74:3f:3c:9f:aa:ce:32:d5:5d:f1:
                    d1:ae:bf:0d:f5:bd:69:11:a1:96:0c:5c:0b:7b:04:
                    ee:68:e5:81:27:9b:52:72:11:df:b8:da:09:12:08:
                    0e:95:80:b2:ed:b7:fd:5e:97:65:cb:02:95:d5:6d:
                    15:8f:cf:dc:90:9f:e2:40:f3:42:80:20:3c:f2:7f:
                    4e:a0:c6:26:3e:61:af:72:ad:e3:63:ec:6e:02:c4:
                    9a:0e:40:9c:1a:43:a3:f9:f8:e1:97:ea:99:1b:90:
                    a4:23:fe:4c:be:65:e6:f5:2a:c7:13:b7:22:26:d0:
                    99:20:de:56:f2:cb:f9:d9:dd:ed:a6:b6:f6:a9:1c:
                    8b:a5:f9:2f:ee:69:75:ec:66:c4:13:d2:64:83:ee:
                    49:75:4f:c2:e3:e7:e3:1f:d1:7f:3b:34:97:c6:29:
                    05:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:40:DB:ED:C2:94:78:F1:0C:19:D1:EC:E5:6B:A2:F8:99:79:74:5D
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/t0Db7cKUePEMGdHs5Wui-Jl5dF0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.170.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         37:4f:a6:a6:1b:ce:06:e2:05:df:b4:28:b9:d2:39:8e:c9:da:
         6d:d9:f1:3c:c9:a2:e1:fb:3b:89:20:62:d0:fa:e8:d7:9a:88:
         f5:48:eb:21:39:66:9d:71:41:2e:15:80:b1:89:2d:f4:a1:38:
         d7:36:1c:c4:cd:ef:ad:ca:68:88:5f:8e:ac:50:f9:7d:f6:12:
         17:ce:a4:41:d9:91:ac:2e:e7:8f:7e:d1:c2:95:15:52:31:cc:
         26:ea:c8:23:d2:72:96:6b:d1:c9:99:fd:93:10:c1:3d:b1:56:
         5a:46:a9:fa:1f:c0:fd:ac:77:2c:ac:04:7a:41:7f:23:f3:e4:
         f7:2a:3e:89:f1:5e:28:ae:7a:6e:3d:16:49:c1:24:77:8b:46:
         40:7f:c6:f7:ca:bb:72:24:ce:8b:a5:6d:7a:41:d2:2c:92:ff:
         44:ae:d6:c2:9f:8d:3b:85:b0:5f:9e:83:51:e8:e6:9e:dd:21:
         f5:98:31:23:54:09:c6:b4:0b:84:25:82:2e:be:eb:44:ab:a5:
         10:fa:89:47:3d:53:bd:33:4c:b8:7d:38:a5:c4:16:c7:d6:54:
         e2:36:63:33:4b:34:a4:36:9d:7b:d5:4c:82:83:86:f5:81:2d:
         cb:c6:be:51:45:55:20:d2:b7:d7:51:8a:93:8f:af:68:95:f2:
         98:f3:03:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 19:00:36 2025 by rpki-client