Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/2TrGm0wDv50DMsdyS5U-qfHDy1A.roa
File:                     2TrGm0wDv50DMsdyS5U-qfHDy1A.roa (raw, json)
Hash identifier:          PEjcrR6apKjgxuIjgfAzNFWqHf2M59+BE9jUgKryZp8=
Subject key identifier:   D9:3A:C6:9B:4C:03:BF:9D:03:32:C7:72:4B:95:3E:A9:F1:C3:CB:50
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       57
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/2TrGm0wDv50DMsdyS5U-qfHDy1A.roa
Signing time:             Tue 11 Oct 2022 09:50:21 +0000
ROA not before:           Tue 11 Oct 2022 09:50:21 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        210.235.128.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 11 09:50:21 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=D93AC69B4C03BF9D0332C7724B953EA9F1C3CB50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:87:c9:7a:b3:86:ba:6a:21:aa:4a:8d:af:4c:
                    19:3e:c8:05:09:f0:db:2b:98:8f:c9:33:be:87:f7:
                    22:0f:c3:3b:a6:bc:3d:a6:39:c4:c9:06:0c:08:61:
                    fb:a8:a0:2c:20:64:41:04:4c:48:b1:46:9e:4a:08:
                    7c:1e:da:f5:5c:f4:4e:60:f5:de:f9:42:86:3a:a8:
                    d5:a0:d2:23:1b:0a:9b:26:2b:dd:28:9f:21:b4:6c:
                    72:ef:a3:83:e7:31:81:c0:f3:87:99:29:12:4f:52:
                    9f:28:14:dc:a3:18:b0:c5:94:ed:85:84:fb:4c:5e:
                    c3:99:e2:08:c2:80:fa:ec:1a:73:dc:82:3b:19:06:
                    7a:f8:47:64:4b:03:26:82:70:7b:8f:33:96:7c:3c:
                    6f:34:7f:45:cb:e0:30:37:02:80:c5:f6:ed:ea:23:
                    7f:18:8e:8d:7f:3f:39:5d:d9:d3:d8:4d:ca:b8:21:
                    0d:b3:70:7a:44:e4:8d:35:6b:dc:74:46:ee:1c:83:
                    98:34:cc:15:02:95:e8:02:9a:70:b9:86:b2:37:9a:
                    f4:11:a5:65:c8:69:40:96:7d:df:64:5e:69:01:84:
                    e4:af:bc:2f:7f:29:ac:22:0e:51:45:dd:eb:f2:83:
                    55:cd:00:5a:ca:5e:19:5e:de:72:6b:e9:e9:21:3b:
                    0d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:3A:C6:9B:4C:03:BF:9D:03:32:C7:72:4B:95:3E:A9:F1:C3:CB:50
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/2TrGm0wDv50DMsdyS5U-qfHDy1A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.235.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0c:b0:ba:7d:98:56:c6:00:0d:30:5c:f8:d3:d9:22:a2:c9:fe:
         a0:68:ba:a4:4e:9d:e9:fa:00:24:f7:5d:4b:37:1c:71:ff:79:
         bb:41:82:f9:9b:56:87:60:26:f2:bd:f1:78:bf:d3:03:6f:ba:
         a9:f5:f7:9b:44:f3:a0:d7:23:d8:a8:85:00:46:23:49:58:66:
         14:d0:f1:00:72:71:3e:57:74:61:f5:6d:de:e0:ed:48:a2:20:
         f1:5c:3d:d4:8f:bc:f9:03:2e:7c:73:59:96:55:8c:aa:60:42:
         46:d1:49:43:e2:3e:93:72:0b:b3:7a:45:64:6b:15:e6:14:92:
         61:83:0b:94:9e:8a:bd:d9:83:36:c2:b4:45:34:17:fd:91:05:
         5a:c9:4f:db:81:83:06:e3:a0:9e:b5:c6:53:c1:02:07:fc:f2:
         07:00:00:74:34:c2:11:dc:2a:2e:d3:75:7d:55:ac:88:9a:c0:
         1d:d5:9b:cc:76:90:48:52:1f:13:56:fb:0a:b2:ef:77:af:61:
         9e:e8:ad:96:93:07:65:a4:a5:dc:4b:f3:a6:96:8a:cf:8f:25:
         cb:b1:bf:49:dd:93:77:3d:82:8b:27:45:02:45:68:bd:ed:d5:
         0c:aa:44:8b:c4:d1:67:83:82:10:7f:fb:27:5e:07:20:71:39:
         d8:e1:32:8a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org