Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/y8tC8gwygkoYYMR9ie4sbto9TY8.roa
File:                     y8tC8gwygkoYYMR9ie4sbto9TY8.roa (raw, json)
Hash identifier:          WxBJU6CqpDkDd7Q4sThZDvgX/wjGIJkRsZ3+eUaajsk=
Subject key identifier:   CB:CB:42:F2:0C:32:82:4A:18:60:C4:7D:89:EE:2C:6E:DA:3D:4D:8F
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       03F7
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/y8tC8gwygkoYYMR9ie4sbto9TY8.roa
Signing time:             Wed 18 Dec 2024 02:18:48 +0000
ROA not before:           Wed 18 Dec 2024 02:18:48 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        113.144.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1015 (0x3f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:18:48 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=CBCB42F20C32824A1860C47D89EE2C6EDA3D4D8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:82:0a:8d:66:e6:b6:3c:fe:52:2d:b5:09:26:
                    0f:5c:64:ab:48:7c:a4:7b:d5:8d:ca:56:49:2f:c8:
                    b9:d7:6b:aa:24:e7:36:63:8c:67:1b:17:51:53:35:
                    4a:61:4f:95:3f:40:d0:e0:36:75:1b:62:ab:40:d6:
                    11:c6:08:9b:f6:6f:72:52:83:02:0f:bd:f3:ab:1e:
                    f1:91:74:2a:67:31:bf:e7:4b:22:95:f5:d5:3e:97:
                    f8:42:b7:64:dc:9c:48:c2:ec:c6:c7:08:7a:e4:0f:
                    72:fa:0f:80:e6:49:13:f4:6c:62:9b:46:64:a9:49:
                    cd:f5:9f:ae:a9:3a:73:be:7d:e8:cb:57:42:62:2a:
                    aa:a0:a5:ff:2c:4c:81:c1:bd:cc:01:ef:ce:d1:b4:
                    77:32:bf:a3:79:8e:e6:be:97:58:f7:7a:9e:45:6c:
                    20:dd:1d:0b:90:fb:36:d2:8b:c2:fd:98:0f:c0:5d:
                    d3:e6:42:91:0c:74:39:4a:b0:d8:45:62:8d:5a:97:
                    e2:38:44:28:55:7b:10:89:8f:5d:5e:b5:58:6a:86:
                    76:83:77:61:9c:a2:3c:ed:9c:e5:00:f2:4f:22:b2:
                    73:0c:4c:c3:88:8f:75:69:e3:1c:4b:60:56:0b:f3:
                    53:06:7f:73:c9:1a:1b:7d:a2:2a:3a:46:df:49:04:
                    38:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CB:42:F2:0C:32:82:4A:18:60:C4:7D:89:EE:2C:6E:DA:3D:4D:8F
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/y8tC8gwygkoYYMR9ie4sbto9TY8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.144.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2e:0a:e9:72:3b:04:10:d9:c4:c7:84:e2:5e:0c:13:38:3b:23:
         11:f9:1d:d1:9d:dd:4e:e4:5c:1c:b4:3c:93:95:6a:1e:32:c2:
         01:94:63:f8:23:5e:76:5c:e1:88:f7:56:b5:a0:43:ed:66:ba:
         a0:6b:46:b6:31:98:93:8e:64:2b:ff:6d:b2:4e:8f:3a:8f:4b:
         c2:4c:d2:58:bc:99:34:26:1c:88:61:7b:e6:72:ff:7c:b6:d4:
         aa:7d:c4:ab:ce:2f:15:ac:4b:e7:6c:2f:a3:94:15:03:c9:19:
         95:88:9d:22:98:b7:ec:09:a0:ec:00:10:eb:37:9d:ab:ec:cd:
         c7:ff:a5:c8:99:5d:fa:62:2b:98:f9:a3:f0:fd:50:f2:d4:f5:
         54:8c:0c:e4:9f:4a:38:af:08:b6:3a:f5:15:17:fb:95:88:71:
         8a:64:2b:be:98:2a:9a:fc:9b:3f:c9:e2:e9:b1:76:c6:e2:5d:
         d0:c7:62:40:61:eb:ec:f4:6c:35:eb:58:26:5a:45:c3:e6:ba:
         04:e4:c5:d9:90:c0:6f:bd:dc:ea:f6:a0:a5:a1:aa:72:ef:4c:
         d0:5e:06:41:cd:cc:83:95:53:8d:b2:e4:d9:65:cc:20:13:c8:
         aa:e9:6b:e0:e8:9f:dc:65:9a:0b:f9:54:fc:00:64:bc:b1:b7:
         64:64:c7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:47:53 2025 by rpki-client