Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/zcWWDrAGM82o4XTKggX7CGmlpiw.roa
File:                     zcWWDrAGM82o4XTKggX7CGmlpiw.roa (raw, json)
Hash identifier:          3JASaXeACC9Ks0ol/hexZOQJ4OrdF5vURvGV8mdc3/w=
Subject key identifier:   CD:C5:96:0E:B0:06:33:CD:A8:E1:74:CA:82:05:FB:08:69:A5:A6:2C
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       052D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/zcWWDrAGM82o4XTKggX7CGmlpiw.roa
Signing time:             Wed 18 Dec 2024 02:42:27 +0000
ROA not before:           Wed 18 Dec 2024 02:42:27 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        210.141.244.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1325 (0x52d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:42:27 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=CDC5960EB00633CDA8E174CA8205FB0869A5A62C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:17:2b:7d:40:e4:07:6f:76:bb:35:9a:6a:04:
                    b0:b4:8d:29:d8:30:5e:f0:14:29:00:75:ca:4e:22:
                    99:93:bd:ae:f2:24:84:1f:95:b2:bf:1c:13:f4:14:
                    50:be:a3:5d:61:54:5d:a5:cc:aa:59:ae:2d:70:41:
                    89:a0:7d:46:a7:01:f3:39:8e:3d:a0:b4:a2:b0:0d:
                    d9:c1:af:d7:d6:ba:49:3f:1b:20:06:8b:7a:7c:11:
                    24:ee:0e:b0:6c:cf:3b:00:3f:27:06:05:f0:e5:79:
                    bb:c3:06:09:59:94:28:5d:1b:8c:f0:3c:f5:2c:f0:
                    42:6d:08:f3:32:4c:40:ba:d2:17:bd:c0:41:42:16:
                    1e:4d:42:90:4e:9c:06:5a:e2:4e:85:7b:a7:87:53:
                    5a:01:45:20:6c:46:75:c6:d1:17:f0:56:09:28:d2:
                    79:e1:b7:7e:27:34:57:be:fe:b9:59:17:0e:2f:39:
                    68:6e:98:45:aa:23:81:0d:3f:45:ba:c0:67:fc:89:
                    3a:5d:c3:c5:5e:64:e1:15:16:cc:b8:02:19:90:36:
                    cc:e8:36:bb:ac:ca:79:ce:54:30:a9:fc:8d:26:be:
                    06:82:83:b3:cb:b7:fc:66:7f:cf:e2:b9:26:6a:c7:
                    43:49:d5:29:7f:86:24:a5:6c:53:8e:f8:11:77:87:
                    55:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C5:96:0E:B0:06:33:CD:A8:E1:74:CA:82:05:FB:08:69:A5:A6:2C
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/zcWWDrAGM82o4XTKggX7CGmlpiw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.141.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:d6:74:9d:5f:db:af:b9:f9:5e:c4:a6:6d:a8:1a:e9:91:c8:
         0c:0b:09:eb:93:11:df:7a:c1:98:36:88:59:89:30:50:04:7f:
         64:d7:50:a2:01:55:c0:27:1b:0d:ed:4a:66:17:e9:1f:30:f0:
         9a:5f:85:15:6c:73:90:01:b1:99:10:a5:ba:2b:f8:5f:ff:30:
         ca:a3:a0:56:69:b2:2d:53:f4:ec:d8:bd:39:f9:57:1f:a0:13:
         78:05:c7:51:08:d3:80:e1:25:65:1c:44:eb:10:3c:b6:62:ce:
         17:2e:b7:09:25:b5:30:72:fa:16:c5:8b:9b:b7:11:15:35:e5:
         46:d3:f7:5d:0e:76:a0:8c:67:60:fd:de:ba:61:0e:6e:8b:42:
         03:0b:0b:8f:e7:6e:a2:39:91:e5:ef:91:de:6a:4d:9c:74:95:
         65:d1:69:bc:e5:9a:7f:04:e9:d4:d1:a5:6e:60:2b:81:da:12:
         7a:0b:6b:6c:f0:7b:86:07:54:ab:9b:c2:36:ca:5a:69:66:dd:
         59:7c:01:c5:ee:f1:87:21:74:2c:04:88:c9:8f:61:0e:b6:89:
         c3:ed:a1:22:2a:30:b8:14:c2:6e:5c:f9:56:02:c0:ba:4a:84:
         84:30:9e:f5:42:0f:75:eb:04:8d:f1:7e:ae:84:c0:da:25:8a:
         cb:c0:cf:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:41 2025 by rpki-client