Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/s9AcP1PX9VZND-W70xLuL_tBweY.roa
File:                     s9AcP1PX9VZND-W70xLuL_tBweY.roa (raw, json)
Hash identifier:          M3Ik0n/66bhjupLGUiXxLfaSp9GAQrIQP4YfjmquojQ=
Subject key identifier:   B3:D0:1C:3F:53:D7:F5:56:4D:0F:E5:BB:D3:12:EE:2F:FB:41:C1:E6
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0438
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/s9AcP1PX9VZND-W70xLuL_tBweY.roa
Signing time:             Wed 18 Dec 2024 02:22:19 +0000
ROA not before:           Wed 18 Dec 2024 02:22:19 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        114.20.0.0/15 maxlen: 15
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1080 (0x438)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:22:19 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=B3D01C3F53D7F5564D0FE5BBD312EE2FFB41C1E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:49:de:b9:8a:48:d8:79:69:00:f5:82:9e:da:
                    68:c9:9d:ae:58:19:77:44:b5:4c:b3:1c:b4:7f:6c:
                    d9:b7:a7:a3:ab:8f:4f:32:8d:a5:ef:af:08:33:ca:
                    bb:de:a6:77:6f:f8:df:76:3f:e2:1f:94:3f:b6:57:
                    61:fb:7f:25:e6:0c:52:93:1f:9f:06:01:29:6b:bc:
                    f1:33:c5:b6:5c:cd:92:26:11:6f:1c:6d:39:e9:f1:
                    17:8c:bd:f2:56:9e:9b:55:bc:c8:c3:c8:5e:d1:4c:
                    82:f7:01:a1:38:8b:40:7a:9c:ab:76:2e:f8:65:a4:
                    e9:db:9c:08:d1:01:c8:8f:8b:95:ca:18:08:41:9d:
                    a7:f8:3a:b7:f4:ed:c3:5a:c0:59:13:29:a1:dc:f6:
                    f1:f2:de:8a:f3:c5:3d:e0:e7:19:b1:36:94:57:38:
                    47:e4:ed:54:10:a3:50:22:e9:5e:63:bc:8a:42:f5:
                    0e:81:ca:25:37:06:64:fe:79:b8:07:d7:80:77:60:
                    22:2e:16:3b:50:99:e8:b0:25:a5:e1:03:79:e8:5a:
                    cb:8f:e0:e2:21:e7:46:eb:3b:d5:07:80:61:72:c4:
                    ce:69:90:14:1c:74:bb:c8:01:bd:9b:15:f1:d6:9b:
                    26:3c:e4:03:12:0f:48:d6:5c:7f:e4:32:ef:f4:ad:
                    e7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D0:1C:3F:53:D7:F5:56:4D:0F:E5:BB:D3:12:EE:2F:FB:41:C1:E6
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/s9AcP1PX9VZND-W70xLuL_tBweY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.20.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         62:1c:1c:4b:52:a4:a9:65:85:5d:8d:d2:94:92:ca:fa:8b:81:
         7e:08:3f:44:08:e2:0a:b3:c8:49:54:7d:d2:f7:8e:17:ff:bc:
         f3:21:e8:13:42:fc:82:a1:78:82:82:2f:25:a1:62:ba:f1:34:
         bf:8f:58:35:e2:11:11:62:37:f1:ac:32:46:a0:b6:a2:ed:ee:
         6e:04:84:fd:d0:eb:40:26:86:34:f0:e3:4a:7d:07:15:97:9c:
         eb:7b:40:07:7a:75:bb:30:16:76:56:8c:ed:72:c6:63:79:3b:
         eb:c1:64:d9:97:7a:f7:36:f2:dc:c8:65:44:16:f9:c6:97:2a:
         21:88:e2:fe:aa:23:d9:59:f0:c2:4e:2b:c3:08:a9:10:0c:c5:
         98:7c:ed:13:7d:7f:87:7d:e3:41:38:87:3d:95:37:86:87:ff:
         d4:31:99:49:c5:b7:46:f0:fc:08:56:8d:ce:81:61:50:77:e2:
         05:48:3b:fd:85:54:14:37:4d:1a:8c:c8:ff:3e:6c:96:5b:ee:
         38:12:5e:90:63:1a:bd:79:63:20:37:3d:6f:f1:bd:36:4e:18:
         cb:0a:4e:0c:8b:a9:79:48:1a:09:fb:0b:4d:63:53:31:e8:79:
         3c:60:ef:bd:46:a1:92:31:34:0a:11:cb:09:33:e1:8d:88:06:
         53:8d:d6:c5
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICBDgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw
MjIyMTlaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEIzRDAxQzNGNTNEN0Y1
NTY0RDBGRTVCQkQzMTJFRTJGRkI0MUMxRTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChSd65ikjYeWkA9YKe2mjJna5YGXdEtUyzHLR/bNm3p6Orj08y
jaXvrwgzyrvepndv+N92P+IflD+2V2H7fyXmDFKTH58GASlrvPEzxbZczZImEW8c
bTnp8ReMvfJWnptVvMjDyF7RTIL3AaE4i0B6nKt2LvhlpOnbnAjRAciPi5XKGAhB
naf4Orf07cNawFkTKaHc9vHy3orzxT3g5xmxNpRXOEfk7VQQo1Ai6V5jvIpC9Q6B
yiU3BmT+ebgH14B3YCIuFjtQmeiwJaXhA3noWsuP4OIh50brO9UHgGFyxM5pkBQc
dLvIAb2bFfHWmyY85AMSD0jWXH/kMu/0reeJAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUs9AcP1PX9VZND+W70xLuL/tBweYwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL3M5QWNQMVBYOVZaTkQtVzcweEx1TF90QndlWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwFyFDANBgkqhkiG9w0BAQsFAAOCAQEAYhwcS1KkqWWFXY3SlJLK+ouBfgg/
RAjiCrPISVR90veOF/+88yHoE0L8gqF4goIvJaFiuvE0v49YNeIREWI38awyRqC2
ou3ubgSE/dDrQCaGNPDjSn0HFZec63tAB3p1uzAWdlaM7XLGY3k768Fk2Zd69zby
3MhlRBb5xpcqIYji/qoj2Vnwwk4rwwipEAzFmHztE31/h33jQTiHPZU3hof/1DGZ
ScW3RvD8CFaNzoFhUHfiBUg7/YVUFDdNGozI/z5sllvuOBJekGMavXljIDc9b/G9
Nk4YywpODIupeUgaCfsLTWNTMeh5PGDvvUahkjE0ChHLCTPhjYgGU43WxQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 02:47:47 2025 by rpki-client