Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/vSeb9ci4Em5UaCVEhHHrtA7REzc.roa
File:                     vSeb9ci4Em5UaCVEhHHrtA7REzc.roa (raw, json)
Hash identifier:          NsHUGfJJ90OExiUXxUWk4ihY684F250lWbJBg9NkCOo=
Subject key identifier:   BD:27:9B:F5:C8:B8:12:6E:54:68:25:44:84:71:EB:B4:0E:D1:13:37
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       03B2
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/vSeb9ci4Em5UaCVEhHHrtA7REzc.roa
Signing time:             Wed 18 Dec 2024 02:12:58 +0000
ROA not before:           Wed 18 Dec 2024 02:12:58 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        106.162.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 946 (0x3b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:12:58 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=BD279BF5C8B8126E546825448471EBB40ED11337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a3:7b:92:d6:59:9c:f1:38:d0:9f:70:23:24:
                    10:5c:31:34:42:af:76:90:75:17:93:a0:20:90:3f:
                    dc:b9:ab:0f:fb:d2:ff:e6:c9:70:62:23:b8:0b:68:
                    8e:ff:41:41:c0:53:82:0c:7d:27:b5:0e:22:1f:9d:
                    97:3e:0a:fd:f6:a4:38:03:db:b9:ad:87:70:25:0d:
                    7b:d4:63:96:a6:83:1b:7a:02:39:e8:d7:69:1f:93:
                    4d:3c:e7:67:d2:31:06:03:06:f2:dc:95:34:f5:c6:
                    28:49:8d:10:67:b0:e4:e4:99:86:6b:76:53:07:2d:
                    fc:f4:6a:e4:93:7c:2d:65:1d:2c:80:14:f5:76:89:
                    da:eb:f9:85:69:ff:84:46:d6:ca:10:0a:93:44:9a:
                    db:10:84:d7:93:96:80:ed:3b:75:db:df:d1:e7:fc:
                    11:e3:94:f2:d9:87:b1:36:ef:07:a7:e9:1c:4f:13:
                    a4:9e:d2:a9:f0:76:30:31:6d:13:74:79:81:cd:ce:
                    04:fc:5c:55:35:c3:c1:a5:24:57:c0:14:7a:e6:6a:
                    ec:1b:44:be:d9:7b:d7:f5:64:c5:eb:87:94:01:3e:
                    c0:47:3f:af:ce:d2:22:19:4f:7d:04:b5:1a:52:2e:
                    09:c6:0d:ac:c6:cd:74:66:32:36:94:be:06:b5:da:
                    70:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:27:9B:F5:C8:B8:12:6E:54:68:25:44:84:71:EB:B4:0E:D1:13:37
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/vSeb9ci4Em5UaCVEhHHrtA7REzc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.162.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0a:11:e0:40:45:6e:e2:23:11:73:18:37:f6:9a:4f:91:d5:88:
         ca:15:6f:49:ca:cd:fc:9a:37:9c:ad:81:e1:f5:e6:ea:fe:00:
         1a:69:1b:ad:44:38:69:7d:58:01:7a:02:ea:ac:14:c5:a6:92:
         50:9d:55:3a:8a:e0:47:f5:75:2c:1b:04:3d:16:39:27:53:ee:
         bc:48:5b:01:fb:79:7c:83:34:5a:f0:67:74:76:70:a6:6c:f1:
         f8:4d:b6:7b:95:55:17:02:c8:21:c0:fe:3a:12:25:f6:52:95:
         0b:a3:d6:55:52:80:4a:6f:89:7c:fe:92:26:64:56:df:f6:d5:
         e2:3f:9e:53:c7:44:0d:eb:a6:1d:0a:68:fb:0e:7e:79:c9:f7:
         ef:c3:0e:44:ff:4f:39:f4:97:b5:5e:d8:cc:49:83:d1:29:fd:
         a1:40:e7:c1:3b:a7:b6:e1:ba:dd:f9:1e:29:99:6f:63:33:0d:
         05:bd:17:a2:53:af:c0:90:1f:c5:01:02:d7:cd:8e:2e:a1:23:
         7d:5a:17:c0:cd:48:1f:13:e1:a0:d8:48:09:22:eb:0a:15:cb:
         58:94:fc:6a:4a:c4:f9:fe:5f:80:7b:92:89:00:d9:3b:fb:21:
         f7:76:ce:31:cb:06:2c:8d:12:17:ff:34:57:93:f2:1a:45:06:
         17:41:6d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:45 2025 by rpki-client