Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/-snXs_itBuYKAkxf9kuFAkKcf9Q.roa
File:                     -snXs_itBuYKAkxf9kuFAkKcf9Q.roa (raw, json)
Hash identifier:          yBGi0J2lCvLumg+WF/Z6j9WT4iPQoYt3bqF+d4uUmYI=
Subject key identifier:   FA:C9:D7:B3:F8:AD:06:E6:0A:02:4C:5F:F6:4B:85:02:42:9C:7F:D4
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       CB
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/-snXs_itBuYKAkxf9kuFAkKcf9Q.roa
Signing time:             Fri 01 Sep 2023 01:30:50 +0000
ROA not before:           Fri 01 Sep 2023 01:30:50 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        124.109.161.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203 (0xcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:30:50 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=FAC9D7B3F8AD06E60A024C5FF64B8502429C7FD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0a:9c:e0:e8:04:74:56:77:40:d5:0a:1e:9a:
                    49:e5:97:0e:99:fe:3f:d6:ca:b9:ac:96:12:1a:ef:
                    93:76:28:d2:6a:f7:ca:3b:7c:4f:55:76:79:2c:bc:
                    1e:7e:81:d2:ec:1a:92:f2:3c:64:cc:69:92:2d:8a:
                    ed:fa:64:d3:de:b8:b5:7b:15:37:f3:49:75:2d:21:
                    b8:7c:60:69:2d:5d:12:50:03:73:e2:76:00:dc:5e:
                    6c:b9:fe:dd:de:5f:6d:c8:53:9b:e9:98:44:6c:d9:
                    bf:2c:57:c5:d4:13:82:60:0e:3a:78:4d:43:46:c4:
                    12:0c:f7:25:fa:30:18:d1:71:c8:e7:d1:b8:ab:f3:
                    62:84:25:2a:ab:c0:44:36:6b:ad:27:e4:48:bf:e5:
                    55:1e:e7:96:51:57:92:6d:9c:f4:88:df:9a:0d:39:
                    d1:6f:ac:88:97:15:1e:2b:78:9e:eb:79:7c:9e:b3:
                    76:dd:81:04:f9:33:bb:b3:30:60:3c:cb:ab:4c:7f:
                    7c:75:da:b9:c1:0b:63:04:2e:ec:fa:0f:ab:2e:11:
                    32:a5:0c:24:bd:11:95:6c:d4:a2:ab:ab:b7:02:f5:
                    1e:b6:14:dd:be:ff:c4:8a:51:5f:21:86:44:09:62:
                    31:f5:43:22:d6:07:2a:4d:59:dd:e4:0a:74:6e:ca:
                    05:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C9:D7:B3:F8:AD:06:E6:0A:02:4C:5F:F6:4B:85:02:42:9C:7F:D4
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/-snXs_itBuYKAkxf9kuFAkKcf9Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.109.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:d1:2b:eb:01:00:7c:67:74:39:37:92:a5:de:54:fe:f6:3b:
         4e:57:e3:ae:4c:43:83:47:72:bf:65:41:35:a4:11:5b:e0:4f:
         a4:9f:f1:91:cb:9a:ef:8b:89:80:d2:5b:15:56:ab:57:8e:38:
         44:4e:2a:e8:59:3f:10:9b:13:cf:f2:c6:ec:c0:37:ea:10:59:
         ae:b3:d2:38:1d:76:fb:58:7b:82:a6:6e:fb:44:ef:1e:c1:81:
         0b:a2:4b:14:81:12:e1:85:62:95:8a:83:4f:d5:89:0d:42:3c:
         cd:54:d5:f0:a4:85:2b:5f:25:63:a1:52:f6:54:cb:83:31:a5:
         57:1b:00:1c:eb:28:16:1f:50:78:b7:b6:f2:4e:8e:80:24:30:
         39:3d:7d:2b:11:16:6f:39:38:da:f1:0a:0f:61:dc:9b:88:b9:
         f0:47:1c:55:c0:a2:aa:91:51:7e:0e:ec:69:af:0f:ac:1d:db:
         93:37:78:ed:93:88:cb:b2:15:73:b0:ae:8c:14:6a:53:de:64:
         f0:d9:66:4b:6e:f7:54:50:51:c4:03:46:3b:a3:41:aa:d6:aa:
         dd:7c:5a:d9:c7:d9:2e:87:df:85:91:55:3f:99:c6:ad:7b:45:
         41:cc:0d:37:bb:a1:13:db:9f:0e:f9:c7:b8:0c:e6:11:1e:58:
         0b:fe:1d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org