Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/3U0HpUKbcaClp49m_FveIO34xKo.roa
File:                     3U0HpUKbcaClp49m_FveIO34xKo.roa (raw, json)
Hash identifier:          yDqa3I3lhsThlVXzddIqeGyKAs3ddyZsAZFiqXG99B8=
Subject key identifier:   DD:4D:07:A5:42:9B:71:A0:A5:A7:8F:66:FC:5B:DE:20:ED:F8:C4:AA
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       9D
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/3U0HpUKbcaClp49m_FveIO34xKo.roa
Signing time:             Tue 18 Oct 2022 02:30:23 +0000
ROA not before:           Tue 18 Oct 2022 02:30:23 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        211.125.184.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157 (0x9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:30:23 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=DD4D07A5429B71A0A5A78F66FC5BDE20EDF8C4AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:61:cd:1e:7c:42:61:4f:f8:3d:b2:63:41:67:
                    d5:f4:d8:7e:83:47:8b:68:1d:43:38:3f:2c:48:d2:
                    57:5e:ee:ee:04:82:6e:c7:50:24:9c:e2:1a:15:1b:
                    64:0d:29:0f:f1:40:90:e2:68:d4:bc:c7:5a:d1:57:
                    53:8e:61:db:66:58:f5:8a:f1:2d:69:56:ca:09:e2:
                    f5:f6:75:da:cc:e2:5d:07:1d:18:50:b8:a4:58:75:
                    52:e8:d7:15:d4:ba:35:41:cc:0d:5e:61:5e:81:b5:
                    fb:73:16:83:cd:6d:1a:07:ef:de:31:07:23:1a:7f:
                    94:d2:ac:87:02:35:86:fc:e1:29:07:68:cb:80:c2:
                    ce:98:2d:55:51:96:52:43:e7:d1:ad:f2:53:80:83:
                    38:43:61:f1:e1:da:77:e3:8b:71:70:7e:78:6d:8a:
                    8b:48:39:17:d3:f5:67:15:a6:8f:fe:98:13:89:3e:
                    04:03:0d:34:7a:97:6c:fe:83:2e:20:ca:52:82:4d:
                    4e:24:b8:57:a5:cd:9b:0a:81:96:b8:38:e9:51:67:
                    cf:5f:89:a3:a2:b2:20:d4:75:a7:22:83:5f:54:86:
                    aa:6c:f5:b1:4b:bd:ef:18:35:c1:10:3a:fc:11:3b:
                    5e:a1:04:d4:22:39:cb:98:89:e0:43:82:9a:86:64:
                    d8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4D:07:A5:42:9B:71:A0:A5:A7:8F:66:FC:5B:DE:20:ED:F8:C4:AA
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/3U0HpUKbcaClp49m_FveIO34xKo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:e4:13:68:31:65:75:98:1d:ac:67:5b:07:d6:fb:b2:38:88:
         d3:62:d2:31:47:89:8d:fd:89:06:b4:d9:f8:7e:e7:92:2c:e9:
         2a:69:51:a6:4e:58:37:d9:31:e6:45:77:68:65:b3:70:32:e1:
         ed:36:82:91:8a:8b:fb:bf:85:f8:69:4d:12:1e:10:82:ca:7d:
         68:b5:41:a8:89:db:f7:71:61:7c:52:7c:73:64:11:80:61:f9:
         d0:5d:72:17:97:e9:91:36:ae:76:cf:01:8e:e8:e5:03:99:69:
         1c:e5:55:c4:df:2a:7b:a0:32:c0:d2:2f:9a:27:f1:5f:5a:c2:
         a3:19:91:15:44:f7:48:fe:72:7f:18:6c:b2:c7:44:c5:5d:9f:
         99:d7:2e:b6:20:f0:42:2a:65:35:e8:6d:fa:e7:c7:f6:ce:b8:
         e6:fc:ce:4b:d2:a6:96:2c:27:a8:76:31:05:7c:ca:12:ac:a8:
         4a:78:90:9b:dd:34:d8:1c:66:a0:c9:4d:37:99:2d:61:2a:71:
         ec:52:d3:a5:86:fa:62:38:c9:fa:8b:7f:38:e0:05:41:84:f6:
         f6:85:48:fe:42:03:7d:61:94:eb:1d:af:9e:c8:db:23:9d:3f:
         c3:c5:70:51:66:bb:20:ca:53:ae:22:f2:84:e5:4f:13:f6:db:
         b8:7e:bd:27
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzc2
MUEzQTlGQUU4N0Y4RjA2OUQ2ODI0NzFDQkUxQzkzNUZCRTMyMTAeFw0yMjEwMTgw
MjMwMjNaFw0yMzEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERENEQwN0E1NDI5Qjcx
QTBBNUE3OEY2NkZDNUJERTIwRURGOEM0QUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAYc0efEJhT/g9smNBZ9X02H6DR4toHUM4PyxI0lde7u4Egm7H
UCSc4hoVG2QNKQ/xQJDiaNS8x1rRV1OOYdtmWPWK8S1pVsoJ4vX2ddrM4l0HHRhQ
uKRYdVLo1xXUujVBzA1eYV6BtftzFoPNbRoH794xByMaf5TSrIcCNYb84SkHaMuA
ws6YLVVRllJD59Gt8lOAgzhDYfHh2nfji3FwfnhtiotIORfT9WcVpo/+mBOJPgQD
DTR6l2z+gy4gylKCTU4kuFelzZsKgZa4OOlRZ89fiaOisiDUdacig19Uhqps9bFL
ve8YNcEQOvwRO16hBNQiOcuYieBDgpqGZNjJAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQU3U0HpUKbcaClp49m/FveIO34xKowHwYDVR0jBBgwFoAUx2Gjqfrof48GnWgk
ccvhyTX74yEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMzQ3L3gyR2pxZnJvZjQ4R25XZ2tjY3ZoeVRYNzR5RS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3gyR2pxZnJvZjQ4R25XZ2tjY3Zo
eVRYNzR5RS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMzM0Ny8zVTBIcFVLYmNhQ2xwNDltX0Z2ZUlPMzR4S28u
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQA0324MA0GCSqGSIb3DQEBCwUAA4IBAQAD5BNoMWV1mB2sZ1sH1vuy
OIjTYtIxR4mN/YkGtNn4fueSLOkqaVGmTlg32THmRXdoZbNwMuHtNoKRiov7v4X4
aU0SHhCCyn1otUGoidv3cWF8UnxzZBGAYfnQXXIXl+mRNq52zwGO6OUDmWkc5VXE
3yp7oDLA0i+aJ/FfWsKjGZEVRPdI/nJ/GGyyx0TFXZ+Z1y62IPBCKmU16G3658f2
zrjm/M5L0qaWLCeodjEFfMoSrKhKeJCb3TTYHGagyU03mS1hKnHsUtOlhvpiOMn6
i3844AVBhPb2hUj+QgN9YZTrHa+eyNsjnT/DxXBRZrsgylOuIvKE5U8T9tu4fr0n
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org