Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/v9dQqQ_a3On9K73j6Ojc6GnZ6q0.roa
File:                     v9dQqQ_a3On9K73j6Ojc6GnZ6q0.roa (raw, json)
Hash identifier:          DJqbfLiqyARvjVQ4nFIQbPz2b+2kHssk2OgGiZIxAYo=
Subject key identifier:   BF:D7:50:A9:0F:DA:DC:E9:FD:2B:BD:E3:E8:E8:DC:E8:69:D9:EA:AD
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       054A
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/v9dQqQ_a3On9K73j6Ojc6GnZ6q0.roa
Signing time:             Wed 18 Dec 2024 02:44:23 +0000
ROA not before:           Wed 18 Dec 2024 02:44:23 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        211.10.237.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1354 (0x54a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:44:23 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=BFD750A90FDADCE9FD2BBDE3E8E8DCE869D9EAAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bd:5f:06:98:48:ee:b8:7e:45:55:26:5e:a3:
                    92:57:5a:4f:35:15:20:30:ab:4d:a8:b8:3a:2b:20:
                    b1:5b:5d:78:83:7f:e5:f9:01:b6:3c:4a:17:82:c0:
                    39:c3:09:ee:96:1e:94:1c:d7:6d:84:90:3f:49:12:
                    03:5d:3d:39:b2:05:20:96:32:f5:01:47:17:7b:62:
                    34:20:bc:e1:61:c1:15:91:34:65:d1:61:69:e8:12:
                    a2:d6:2a:be:9a:33:c0:09:ee:af:db:83:82:5b:7b:
                    aa:ee:86:66:5b:0e:cf:39:b4:d5:93:78:eb:53:d7:
                    78:e4:18:47:3e:7e:f9:b3:eb:d0:e8:12:45:9d:ac:
                    a6:61:c0:2d:d5:ea:fd:ab:8f:ae:ed:c4:f2:4f:e2:
                    8f:7e:2c:ab:1a:b9:b0:85:f7:ad:c4:a1:4a:7c:6e:
                    1a:db:14:d6:f4:bc:59:52:c6:f6:16:63:93:78:b6:
                    1a:13:2a:76:8d:6b:8d:c2:95:06:b1:d8:f0:90:82:
                    40:a0:b4:27:d4:c1:e4:f6:91:16:ec:06:21:e1:ac:
                    3f:51:ea:1d:d8:85:f9:d2:41:62:9d:63:c8:bd:dc:
                    72:a0:38:80:86:c3:08:dd:22:8a:be:e5:df:d0:c6:
                    61:3f:b4:32:b7:9d:d9:af:45:51:7c:bc:70:31:0b:
                    52:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D7:50:A9:0F:DA:DC:E9:FD:2B:BD:E3:E8:E8:DC:E8:69:D9:EA:AD
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/v9dQqQ_a3On9K73j6Ojc6GnZ6q0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:5e:92:98:ca:d0:b4:51:31:26:73:21:f7:46:c3:d6:4e:a2:
         1d:f7:c0:c2:fa:c4:7b:ae:18:89:86:77:9e:09:ba:1f:cc:fe:
         1a:dd:b1:df:29:dd:12:96:cf:27:23:dc:d4:44:8f:c8:6f:91:
         84:c0:78:30:10:4a:09:06:43:ae:12:89:26:aa:a8:5e:a1:85:
         12:7a:e4:4b:76:b8:61:ad:06:4e:82:96:84:c9:60:85:47:a1:
         be:63:9a:0a:63:0a:e9:49:95:83:37:fb:58:10:a6:a8:7b:bd:
         b0:5c:47:d2:05:f5:d2:ab:4c:40:1d:2d:49:ec:74:0d:1d:2e:
         89:87:ef:f8:03:4a:9f:26:d7:ca:88:12:90:8e:d9:7e:3d:7d:
         78:d0:36:27:fe:70:50:4a:55:57:5d:ca:be:45:dc:68:93:d3:
         77:93:bf:ef:a1:b7:cf:27:26:2a:66:c8:b1:0b:a3:dc:97:6c:
         5b:f1:3f:de:15:76:81:5d:c1:d5:2a:37:6c:82:b8:95:2d:52:
         67:65:1d:48:10:8c:95:5b:da:57:2a:f9:de:eb:42:70:46:cc:
         27:99:23:a6:e5:28:75:27:ea:89:7d:11:ea:ea:d5:9b:79:51:
         c1:6a:37:5e:02:6a:eb:10:c8:8d:da:f4:27:99:0d:e6:2c:00:
         df:fa:3c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:22:42 2025 by rpki-client