Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/3kIFWHwekHAUXjRZuXt4LOA6uEo.roa
File:                     3kIFWHwekHAUXjRZuXt4LOA6uEo.roa (raw, json)
Hash identifier:          8aVosCbyKNCjjFC1ATE3aZodbefOwNpAzDuZUvSHKsU=
Subject key identifier:   DE:42:05:58:7C:1E:90:70:14:5E:34:59:B9:7B:78:2C:E0:3A:B8:4A
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       33
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/3kIFWHwekHAUXjRZuXt4LOA6uEo.roa
Signing time:             Tue 11 Oct 2022 09:34:19 +0000
ROA not before:           Tue 11 Oct 2022 09:34:19 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        210.235.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 11 09:34:19 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=DE4205587C1E9070145E3459B97B782CE03AB84A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d9:bc:ed:80:30:d4:db:5e:ff:16:e6:68:6e:
                    8c:2e:c1:77:b8:25:9f:c7:d3:94:34:03:a9:e8:fa:
                    f7:32:be:b4:d9:f0:b3:7f:e1:92:0e:8a:48:d7:76:
                    b6:8c:15:41:aa:2b:2a:94:26:55:03:23:b4:20:ea:
                    62:5d:ba:93:74:56:fa:5e:14:dd:27:7a:e3:5f:7e:
                    e7:27:2a:5a:07:55:6e:e8:23:20:ef:3b:25:dd:cb:
                    80:51:4f:03:26:91:b2:7a:64:e4:e3:3c:17:a0:8e:
                    93:3f:71:05:07:5c:f6:5d:11:b1:06:5b:88:21:30:
                    dc:91:fd:23:eb:5e:d3:54:9b:4f:ac:c3:bc:fa:50:
                    dd:14:bc:c4:1f:8d:22:f1:3d:b3:28:c8:13:17:32:
                    ea:03:48:82:d0:99:16:38:69:57:a9:c8:4f:ed:2b:
                    b6:e5:92:77:20:9b:18:ec:bd:2d:bb:83:db:fd:3d:
                    85:0d:21:a3:ca:e2:e8:ff:7e:63:e6:7e:28:b0:71:
                    96:37:c7:de:f5:15:17:25:41:69:21:2f:ef:ba:c9:
                    b5:a5:be:97:c7:0c:31:7f:e1:ba:db:11:0b:f2:75:
                    6a:1b:e1:9a:64:11:ec:37:f5:02:78:51:3c:39:82:
                    e1:49:4e:aa:fb:66:56:6c:8a:02:55:db:7b:43:6c:
                    16:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:42:05:58:7C:1E:90:70:14:5E:34:59:B9:7B:78:2C:E0:3A:B8:4A
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/3kIFWHwekHAUXjRZuXt4LOA6uEo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.235.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:17:17:3c:2b:2e:f2:a6:67:b0:92:97:00:33:41:60:68:47:
         44:78:e5:b5:3b:ef:b8:ce:a9:19:cd:13:30:3a:17:71:a4:23:
         6d:85:e4:6a:20:b5:7c:5a:52:fc:77:f0:50:d1:72:75:ea:c3:
         85:52:cf:f3:4e:9f:51:dd:31:aa:df:40:10:05:88:df:6c:8d:
         56:e4:f0:93:1a:2a:f5:a6:43:83:e2:ed:ed:9e:f6:a0:84:0a:
         51:a3:71:9e:cf:c5:30:cb:77:20:17:14:c6:f1:84:e2:d4:37:
         4f:6c:ba:d8:6f:89:d6:14:c9:75:59:c0:34:4e:af:cf:19:99:
         8b:20:88:e9:86:32:89:59:11:21:58:f7:2c:12:a7:7f:49:e6:
         db:4e:65:46:4d:c7:f7:6a:31:f6:09:c9:3c:9b:c1:fd:39:51:
         fc:7b:95:56:45:5a:1e:c1:41:65:cd:c6:fc:f4:c0:13:23:a6:
         70:f9:d6:38:cb:54:40:ec:62:72:a2:d0:6f:5b:1c:85:f8:16:
         e6:db:cf:b9:41:f3:2f:19:74:23:03:c1:4d:66:da:e5:b1:13:
         c0:2e:93:0c:d7:fe:e5:7b:10:be:19:2a:16:ef:77:40:6e:48:
         18:06:b5:5f:19:38:4c:61:fa:b8:fc:a1:fa:ee:8e:83:43:f0:
         60:21:d4:c8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org