Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/vqbJy9xPRNA0ARNVRtCBkP2hTsE.roa
File:                     vqbJy9xPRNA0ARNVRtCBkP2hTsE.roa (raw, json)
Hash identifier:          hXwNIUVfl7om08p028Gm4joSFc5yanl/+OptuG6CQdc=
Subject key identifier:   BE:A6:C9:CB:DC:4F:44:D0:34:01:13:55:46:D0:81:90:FD:A1:4E:C1
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0506
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/vqbJy9xPRNA0ARNVRtCBkP2hTsE.roa
Signing time:             Wed 18 Dec 2024 02:40:13 +0000
ROA not before:           Wed 18 Dec 2024 02:40:13 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        219.118.0.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1286 (0x506)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:40:13 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=BEA6C9CBDC4F44D03401135546D08190FDA14EC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:27:61:b3:d3:4b:76:6d:cd:d8:cf:d8:02:e4:
                    d7:6d:4e:49:97:36:25:da:65:36:c9:18:b4:a2:2d:
                    92:4a:c6:65:10:f1:73:27:dc:ad:26:3d:bf:79:aa:
                    0b:8c:78:46:88:ca:02:b4:1c:d0:91:f9:7d:27:2a:
                    8d:ab:ca:88:fc:21:8b:f3:ea:35:7b:3b:58:2f:23:
                    5b:45:d7:2f:bd:5f:66:5a:15:10:7f:bc:2c:d7:00:
                    6e:c7:d1:6a:05:4f:20:11:cc:8e:b5:c5:04:a3:10:
                    12:1e:86:b6:db:96:64:e4:5a:c1:b4:88:7d:d1:dd:
                    60:31:e0:6a:a2:b5:73:51:a7:da:30:c6:ab:65:48:
                    e1:07:73:99:16:df:56:ae:1b:f7:8e:ac:80:39:97:
                    fe:39:cf:8a:fc:49:a8:04:e2:a6:4b:db:18:39:1e:
                    f7:41:71:b6:cc:9a:e0:0c:5b:39:13:fe:f2:75:41:
                    b0:dd:fd:fa:86:c6:85:0a:50:84:06:21:6f:0c:e5:
                    4c:8d:a3:60:df:a7:77:3b:8d:de:d9:ed:53:b0:54:
                    1e:b9:76:f3:db:d2:9f:15:4a:66:05:7c:ff:b9:df:
                    aa:f0:53:e0:a4:38:96:5d:25:8e:9e:58:88:a9:5c:
                    19:6b:de:12:be:57:e8:7a:3c:bf:83:67:74:f1:92:
                    e8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A6:C9:CB:DC:4F:44:D0:34:01:13:55:46:D0:81:90:FD:A1:4E:C1
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/vqbJy9xPRNA0ARNVRtCBkP2hTsE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.118.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         06:33:ef:34:31:0b:e8:38:b1:0f:12:4c:b7:31:18:34:a0:73:
         e9:6b:1c:6c:23:6d:e6:db:71:da:d1:73:3d:dc:c0:e6:8c:9e:
         da:2a:3b:6d:ce:a4:70:7c:9b:29:7b:27:13:c8:d2:dc:1d:c5:
         3e:97:eb:79:c3:2b:ea:61:7f:6f:24:bd:c2:4a:3e:ee:93:0d:
         d2:1e:ad:44:f0:e1:88:70:90:70:b5:ef:41:44:20:27:b1:1b:
         e8:40:55:2c:a4:a6:0c:40:33:34:3e:09:7b:05:06:ae:64:01:
         07:a3:e2:40:9c:da:82:9f:71:a5:36:63:c9:93:32:a7:4a:f7:
         c7:3a:7f:e6:80:69:0c:a7:de:b3:9f:19:67:6d:ce:6f:61:ad:
         71:0e:70:c8:8b:e8:c8:da:cb:f7:c2:11:b5:e0:dc:32:4c:ec:
         8e:b1:5d:59:86:68:a3:ff:10:c2:c1:71:8d:5a:c5:47:c2:42:
         fe:f4:a1:87:b4:68:75:63:46:19:03:83:4f:9c:26:9d:6e:4a:
         61:70:24:92:1b:e6:eb:a2:3b:d7:43:cc:5d:c7:6e:cc:11:52:
         1f:20:9d:44:5b:f5:5b:13:c1:e7:34:c6:87:8a:77:f9:ee:80:
         11:cd:cb:ca:81:41:f4:e5:18:7b:de:8e:d7:eb:45:69:4f:fd:
         4d:f5:ad:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:51:51 2025 by rpki-client