Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/-ZsqXc8ITeQ6FN8-9BRJjz7CqsI.roa
File:                     -ZsqXc8ITeQ6FN8-9BRJjz7CqsI.roa (raw, json)
Hash identifier:          g6yftPxpl5fE1n2pLVmdLVP1F0slRbTBuaFplmsYbbE=
Subject key identifier:   F9:9B:2A:5D:CF:08:4D:E4:3A:14:DF:3E:F4:14:49:8F:3E:C2:AA:C2
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       FC
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/-ZsqXc8ITeQ6FN8-9BRJjz7CqsI.roa
Signing time:             Fri 01 Sep 2023 01:33:15 +0000
ROA not before:           Fri 01 Sep 2023 01:33:15 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.249.169.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:33:15 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=F99B2A5DCF084DE43A14DF3EF414498F3EC2AAC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:50:60:e1:ad:79:bc:8f:a8:42:71:4d:bd:56:
                    e1:92:99:30:2b:bd:84:0a:a3:5c:07:90:96:2f:12:
                    1a:77:e0:f1:2d:89:9d:85:57:72:09:a8:55:12:ea:
                    54:99:3d:92:15:1c:67:62:07:47:57:88:d5:29:dd:
                    f8:30:06:44:62:9a:21:88:07:ce:f7:ee:af:ab:f8:
                    5f:a0:00:1a:b0:41:57:6e:b5:e0:be:c5:7c:0c:82:
                    7b:2c:10:a9:04:d0:41:66:2e:15:54:8a:b7:e2:2e:
                    85:d5:94:43:cb:04:22:5e:98:ed:06:5e:1e:54:39:
                    b6:e6:59:48:56:38:a4:80:b3:72:5c:54:e9:eb:ad:
                    b1:28:ea:eb:3d:88:93:56:0a:dd:36:17:ad:8b:02:
                    6a:9c:50:e7:89:80:8e:19:d0:84:d1:88:a2:70:a5:
                    ac:84:4c:5f:ed:09:0c:34:66:fb:ff:1d:70:08:4a:
                    5c:d0:0d:44:39:d0:34:ef:02:c6:5a:e2:b1:71:72:
                    f8:0b:9f:d2:30:90:aa:9e:76:26:f4:d5:c9:c7:79:
                    18:cc:f1:34:cf:74:ab:06:f9:7a:f1:6d:6d:53:26:
                    f9:16:14:d6:e0:70:3e:33:f2:b1:dd:2d:b2:39:84:
                    2b:ce:55:7e:06:b0:ce:97:24:9b:36:b7:06:8f:48:
                    7e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:9B:2A:5D:CF:08:4D:E4:3A:14:DF:3E:F4:14:49:8F:3E:C2:AA:C2
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/-ZsqXc8ITeQ6FN8-9BRJjz7CqsI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.249.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:32:59:36:df:82:09:32:5d:8a:72:74:fb:22:6c:c2:64:1f:
         fe:6d:5b:87:70:f4:b4:95:d4:70:7a:68:78:96:21:77:ce:3e:
         04:d7:f7:71:63:32:36:56:16:16:d5:ed:64:f2:99:11:d6:a7:
         eb:9a:f5:21:ff:78:89:d5:2c:d5:96:c7:11:36:f9:f9:73:72:
         32:c8:3d:dc:ae:a2:9c:b8:e2:3a:d3:38:cd:91:b3:82:3b:b4:
         30:f0:4a:8d:f9:1f:8e:44:9d:e2:8a:ef:28:6e:ba:d7:4c:15:
         9b:6e:0a:85:b9:e1:9d:4c:b5:a1:bc:b5:e7:ec:0f:4f:d1:b1:
         01:69:76:01:10:46:12:b1:1a:a7:50:2b:e5:d0:ec:8e:56:a7:
         b0:26:7f:fe:8b:44:00:99:33:ca:13:de:0c:45:31:9f:8b:39:
         7d:7c:cc:90:4b:0d:2a:90:fb:33:d6:a7:6e:73:f2:ec:90:a4:
         85:60:1f:04:03:97:37:45:c2:66:71:00:d7:ee:17:11:9e:ca:
         8d:63:f2:02:d8:28:c3:7f:52:65:1c:32:1f:04:36:fa:6a:f6:
         c7:e6:3b:3a:b5:1c:a0:34:cd:72:53:1f:13:2d:22:13:b7:84:
         7d:59:f9:4a:58:56:d8:2c:bf:a1:e2:47:2b:a3:14:1e:25:70:
         25:66:67:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org