Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/tw6MKc4TPrCvfso310J5uciVRaY.roa
File:                     tw6MKc4TPrCvfso310J5uciVRaY.roa (raw, json)
Hash identifier:          8GWtv0ESsRUHVtA3XoqpmYIcqt3DHrv/mShZpAwCzsQ=
Subject key identifier:   B7:0E:8C:29:CE:13:3E:B0:AF:7E:CA:37:D7:42:79:B9:C8:95:45:A6
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0497
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/tw6MKc4TPrCvfso310J5uciVRaY.roa
Signing time:             Wed 18 Dec 2024 02:28:53 +0000
ROA not before:           Wed 18 Dec 2024 02:28:53 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        59.133.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1175 (0x497)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:28:53 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=B70E8C29CE133EB0AF7ECA37D74279B9C89545A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d8:4b:05:f5:05:a6:43:d3:e7:ba:9d:db:2a:
                    5d:b9:ee:3f:24:9e:2b:dd:b1:a7:15:f7:31:cf:96:
                    38:c5:50:e2:1b:e2:d2:a3:d9:1f:2e:27:9a:d5:4e:
                    46:d3:b7:44:d7:4e:ba:79:5f:82:68:ac:40:f6:cf:
                    01:a6:81:ae:17:6d:c8:68:fa:53:1d:e6:fc:d3:3f:
                    08:65:ed:2e:7c:d2:c6:e6:db:7c:67:da:17:6a:60:
                    83:e0:e6:6f:26:fd:be:92:c8:f1:3b:f0:77:43:69:
                    7d:cf:b0:77:0a:82:d8:35:e9:75:96:39:45:b2:fe:
                    5a:c2:87:db:b2:64:57:b6:70:ea:c8:2d:d3:ed:8e:
                    60:f8:93:55:b0:97:d0:83:20:61:f8:3e:a8:75:c8:
                    5a:85:ad:0d:d8:e7:b6:09:1c:a5:34:9b:e0:b9:41:
                    a7:73:10:ce:0e:14:e3:98:01:61:aa:2f:ef:bc:b8:
                    ca:af:e3:c9:93:be:37:a7:65:28:83:8f:56:cb:50:
                    7c:25:c4:e9:66:c6:45:11:bc:3e:c1:f9:b4:19:b8:
                    1a:2b:46:45:39:d6:0b:26:79:fd:dc:78:be:d8:c3:
                    d4:72:b3:91:bf:62:0d:f3:a8:e0:10:b0:c5:d8:2d:
                    e1:34:b4:57:84:26:5a:4d:a6:5f:ea:7c:f5:cd:55:
                    a0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:0E:8C:29:CE:13:3E:B0:AF:7E:CA:37:D7:42:79:B9:C8:95:45:A6
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/tw6MKc4TPrCvfso310J5uciVRaY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.133.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         57:0d:46:5e:55:06:3d:43:bf:87:61:c1:d8:69:8f:e6:25:36:
         a4:a1:3e:3e:5f:da:3b:5b:f1:34:e6:c7:ff:3f:c2:51:78:37:
         50:f1:6a:c8:1e:6d:20:64:68:ea:bb:02:f0:84:b6:ca:ab:92:
         c9:e3:52:c9:0d:00:05:a8:ed:de:9a:ee:5a:37:1d:4c:6c:e0:
         df:92:eb:91:c0:07:5e:2b:bd:34:fc:69:fc:e1:2f:7c:be:67:
         7e:20:c3:f1:37:59:e8:d4:e4:33:d8:8d:63:b1:5c:4b:1b:67:
         79:62:ed:a1:a2:5d:18:ef:cc:15:4e:97:42:c7:05:56:90:8e:
         40:49:a9:2d:f8:87:71:df:6f:57:d7:26:f8:df:98:b8:68:76:
         16:2c:a6:e9:07:50:fe:07:75:74:41:c3:cf:9a:71:63:92:0c:
         bf:7a:bf:19:36:f9:47:5d:fc:45:e0:74:ba:cb:83:eb:f0:44:
         02:6f:46:27:de:7a:40:d3:fc:c7:26:61:57:c5:fd:8f:e2:49:
         5a:65:ed:8b:87:07:7e:7e:8c:7d:98:d7:34:69:db:55:76:73:
         06:e1:cc:e2:70:ff:f8:bc:bc:82:6d:ff:cf:3d:75:a8:52:19:
         f6:ba:93:d4:e3:62:30:cf:4c:14:ff:b5:e5:57:03:1d:7e:4b:
         cc:28:86:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:37:52 2025 by rpki-client