Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/xp0iXaYLNwppmaBK3Oi297YV70U.roa
File:                     xp0iXaYLNwppmaBK3Oi297YV70U.roa (raw, json)
Hash identifier:          tiYuSeb6kg2fXO+BSgOZTvL4L1gp5yXoHu6DhCul9UE=
Subject key identifier:   C6:9D:22:5D:A6:0B:37:0A:69:99:A0:4A:DC:E8:B6:F7:B6:15:EF:45
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0373
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xp0iXaYLNwppmaBK3Oi297YV70U.roa
Signing time:             Sat 31 Aug 2024 01:29:41 +0000
ROA not before:           Sat 31 Aug 2024 01:29:41 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        210.174.64.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 883 (0x373)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Aug 31 01:29:41 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=C69D225DA60B370A6999A04ADCE8B6F7B615EF45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e8:54:66:8e:31:88:3e:9c:38:c0:d1:94:25:
                    90:b6:0e:aa:af:0e:0e:80:cf:48:5f:6d:90:43:4c:
                    9e:ba:d2:0e:9d:18:65:e7:c3:31:70:ea:cf:a7:7b:
                    5a:6a:bb:51:2b:5f:6f:0e:af:15:49:0d:3b:72:d6:
                    43:e9:d5:b2:8a:63:64:1b:95:54:b3:84:c5:17:0b:
                    f5:80:46:98:54:8e:a6:2b:8d:fc:ea:9a:ee:23:f0:
                    ff:4c:1a:02:42:ec:ae:26:c4:fd:c7:99:4c:bc:d2:
                    4a:a0:2e:14:fe:17:98:97:53:3a:c9:87:18:8e:67:
                    5f:4d:28:6f:46:cf:7a:b5:c6:3f:f0:41:2b:8b:29:
                    ee:3f:09:3d:4d:4f:c6:21:d9:52:59:46:11:88:00:
                    55:4b:8e:22:3f:94:dd:75:35:18:c9:c0:65:20:33:
                    07:75:fe:1a:63:3b:90:2b:e8:45:a7:87:6c:9a:b8:
                    1c:a3:50:b8:12:e5:1a:f5:9d:5f:ff:93:7b:c9:7a:
                    f1:84:8b:5d:3d:49:ce:d3:5d:f2:fd:37:51:69:8c:
                    8f:63:b1:32:39:99:06:3a:73:ab:5d:88:1c:4e:14:
                    65:2a:31:24:37:ce:86:c0:81:e7:7e:d2:9b:ad:40:
                    9c:8a:2f:87:5c:79:35:a1:7f:85:82:b3:e4:67:06:
                    2d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9D:22:5D:A6:0B:37:0A:69:99:A0:4A:DC:E8:B6:F7:B6:15:EF:45
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xp0iXaYLNwppmaBK3Oi297YV70U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.174.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         45:fd:fd:1e:7a:cd:f2:04:6c:a4:2d:3f:86:2d:10:ad:97:90:
         ea:87:08:af:2a:0a:9a:5d:8e:fd:87:06:ac:3d:c8:9f:fb:63:
         51:36:87:b5:ce:c8:d5:f5:99:7a:45:8b:88:a7:42:34:b5:93:
         93:de:2c:94:1a:2d:a4:b7:3f:d6:34:f7:c2:f0:5b:75:b7:18:
         1b:fb:da:f2:fb:db:22:76:94:15:ff:c7:0e:41:b9:d4:1f:28:
         c1:2e:e4:fe:6e:95:05:1b:00:cc:9b:99:1a:86:32:2d:fa:10:
         16:d6:cd:d0:39:33:49:c1:83:1f:2c:4b:95:9b:16:6b:3a:5a:
         f3:45:b2:b8:c2:68:53:b3:9c:e7:62:9b:19:8f:8e:b0:44:35:
         52:dd:7c:89:6c:b1:e9:56:3a:60:65:3e:85:d4:c9:d1:d0:29:
         53:bc:11:34:7a:d8:62:7a:6c:67:d8:a6:1f:31:b7:91:80:d3:
         75:a1:bb:94:0f:d6:29:72:1c:ea:1b:8b:86:36:47:9d:bd:16:
         45:d2:a5:fd:cf:b8:87:af:62:27:c2:bc:8a:12:45:0a:42:85:
         36:d9:88:44:b0:d1:06:35:b7:7a:5d:ce:d7:b7:c8:56:84:9b:
         5a:42:4b:70:c2:fe:81:21:ab:2c:ba:2c:35:f8:44:b8:60:d9:
         2c:e0:c5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:13 2025 by rpki-client