Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/wDHWZFFW32cZlOUGYmLjTqUKXPE.roa
File:                     wDHWZFFW32cZlOUGYmLjTqUKXPE.roa (raw, json)
Hash identifier:          C8L8T9XYYnde4k4nKbsWGTpo+qNyxN0r01uTYyW6xbI=
Subject key identifier:   C0:31:D6:64:51:56:DF:67:19:94:E5:06:62:62:E3:4E:A5:0A:5C:F1
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0548
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/wDHWZFFW32cZlOUGYmLjTqUKXPE.roa
Signing time:             Wed 18 Dec 2024 02:44:23 +0000
ROA not before:           Wed 18 Dec 2024 02:44:23 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        211.1.100.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1352 (0x548)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:44:23 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=C031D6645156DF671994E5066262E34EA50A5CF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fc:26:59:8b:97:9d:d6:7d:3b:ac:f8:45:79:
                    dc:27:2e:c7:7c:3d:d4:c4:e4:ef:90:37:70:da:73:
                    6c:e4:38:5d:7f:0b:45:d4:0c:9d:4b:ff:a5:27:d6:
                    2c:39:dd:81:cd:93:ee:8e:00:8a:3a:bf:85:7f:d4:
                    f2:66:06:76:3d:91:15:b6:3d:d4:06:77:83:3e:3c:
                    81:63:5d:58:81:28:59:ad:67:6a:91:5d:4e:c6:91:
                    ca:43:94:e4:18:89:7a:71:28:99:59:8b:d5:22:f5:
                    09:9d:a4:2b:aa:b6:72:0a:93:32:75:bf:46:e4:16:
                    09:21:4e:5e:cb:45:d6:01:76:00:5a:99:cf:e8:57:
                    67:de:66:fd:27:57:0a:28:06:7d:ac:ec:a8:9f:eb:
                    4a:3e:9f:4e:b1:08:92:66:95:7e:cf:74:5a:c0:69:
                    2b:2d:39:4f:0f:af:c4:2a:4d:ab:68:1e:bc:5b:92:
                    56:80:39:18:a9:5f:f6:ed:7d:c2:c5:3f:61:7f:30:
                    27:7a:10:ce:98:84:dd:7e:16:6c:77:f9:82:bd:73:
                    10:4f:37:0d:67:6a:17:e8:3f:ac:23:f9:f0:f5:dd:
                    56:91:76:6e:39:02:5e:f6:53:00:48:3d:c9:7d:cb:
                    fe:f7:87:46:61:88:57:70:f6:76:98:a4:73:85:94:
                    1e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:31:D6:64:51:56:DF:67:19:94:E5:06:62:62:E3:4E:A5:0A:5C:F1
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/wDHWZFFW32cZlOUGYmLjTqUKXPE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.1.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:43:34:ad:e1:e3:d0:6d:18:cc:0e:d5:fa:52:81:4c:4d:60:
         42:ed:78:dd:7e:72:f9:9d:cc:1d:fa:09:5f:b6:a8:e5:ce:e8:
         bc:ff:b1:34:99:71:5e:d9:1e:fc:8a:bb:a8:5e:5b:d5:8f:12:
         40:a2:eb:a1:83:1a:4b:a0:24:a7:98:53:ff:23:16:55:1b:86:
         9f:c6:ab:1d:76:a6:e0:61:7a:76:13:3b:56:f9:b9:ed:e8:d4:
         68:8c:d6:05:de:b8:cd:9b:ae:5b:dc:7a:5f:70:02:f8:42:27:
         dc:dc:28:41:15:15:9d:b2:ad:a8:9c:c3:1c:90:c3:03:e7:ec:
         08:d9:ea:f8:0a:65:6a:81:3e:73:2c:03:c7:74:92:eb:d5:20:
         de:bd:88:75:a5:ff:42:25:23:b7:81:55:ea:16:cb:24:94:9b:
         77:9b:bd:58:13:48:58:00:ea:ba:1d:76:ac:8e:54:e1:df:d6:
         24:dc:09:b8:35:8a:0d:ff:ca:82:7d:25:d5:28:3a:15:9a:99:
         e8:59:40:29:f7:b3:41:f1:6f:2d:24:02:fc:2b:84:c2:b9:d2:
         22:ef:8c:24:3e:12:30:4c:a5:18:bb:30:55:7b:2c:ad:c9:01:
         2a:0b:d7:35:b8:fc:ab:a2:eb:57:e8:58:1b:fa:ef:85:00:54:
         7a:39:17:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:25 2025 by rpki-client