Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/4m0pSMMuP0_NZbgwehcJU2q-ioU.roa
File:                     4m0pSMMuP0_NZbgwehcJU2q-ioU.roa (raw, json)
Hash identifier:          s4WpsCVyBuLDu5tytnjK38RObq0UJu7cTsq7SI8JZsM=
Subject key identifier:   E2:6D:29:48:C3:2E:3F:4F:CD:65:B8:30:7A:17:09:53:6A:BE:8A:85
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       7B
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/4m0pSMMuP0_NZbgwehcJU2q-ioU.roa
Signing time:             Tue 18 Oct 2022 02:20:19 +0000
ROA not before:           Tue 18 Oct 2022 02:20:19 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        211.10.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:20:19 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=E26D2948C32E3F4FCD65B8307A1709536ABE8A85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:64:7f:da:88:94:3b:99:2f:5f:10:e5:73:cf:
                    c7:79:39:61:9a:bb:d2:6b:cf:53:87:32:4e:77:9f:
                    01:87:80:1f:c2:6f:ee:37:0f:1d:92:38:a9:a8:47:
                    5b:0b:f5:11:79:8f:e0:13:eb:1e:3b:95:34:4a:37:
                    cc:ba:3a:aa:79:a7:69:3c:3a:cd:d4:86:3d:3e:07:
                    23:b9:f7:af:9d:96:52:55:0f:18:1e:b8:40:ca:bc:
                    a4:08:5c:dc:b7:cb:4f:1c:fc:1f:1e:2e:15:42:d9:
                    b0:84:fd:c8:b1:22:d1:6e:43:f0:8c:f3:50:bf:af:
                    64:e0:83:73:61:2f:c6:ad:fd:db:43:63:f3:41:b5:
                    fb:e1:1e:fc:12:d4:4d:53:b9:3d:92:14:7a:73:43:
                    db:4a:9f:a1:87:21:18:dc:40:03:8d:29:e3:3a:dd:
                    8c:d6:f7:bc:c9:c5:e0:9b:16:a7:09:8e:62:8d:a8:
                    d4:18:a4:4c:4f:2a:cf:1d:9c:79:cc:fd:b6:d8:63:
                    6e:dc:9c:15:a9:58:b9:37:a2:92:a2:ed:31:70:12:
                    bd:70:b2:ca:b6:a9:fc:3f:67:4c:45:d0:0c:37:1f:
                    7b:ab:7d:9c:0f:48:82:cb:2f:a4:38:06:71:fc:8b:
                    3d:00:00:2c:1b:9c:83:a7:f2:39:6f:75:b7:30:af:
                    9f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:6D:29:48:C3:2E:3F:4F:CD:65:B8:30:7A:17:09:53:6A:BE:8A:85
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/4m0pSMMuP0_NZbgwehcJU2q-ioU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:31:f3:66:d0:8a:9e:40:cd:dd:fa:90:f9:9d:5e:f7:52:c7:
         93:35:14:f5:54:1c:df:d6:ab:6e:f2:74:00:20:0f:c4:aa:7d:
         1a:b2:21:8c:66:da:53:ae:f3:5e:42:64:e3:a3:d5:29:7b:0f:
         80:ac:bb:3d:26:ef:94:91:d1:3b:2c:7b:08:98:4c:a7:b4:82:
         f0:07:d4:31:3a:71:c2:16:47:60:a0:09:b6:34:9d:f7:5c:87:
         6d:3f:5c:16:68:e9:55:23:dd:6d:b4:80:66:6a:9e:80:dc:19:
         46:b4:98:aa:03:d9:8a:05:51:71:67:d6:8f:57:5b:7e:9f:47:
         6e:a2:0d:3e:e4:ee:8b:35:e2:17:15:1b:5d:77:63:d6:29:4f:
         73:b5:22:9d:53:40:2c:5a:37:44:24:62:75:de:06:ba:e1:05:
         76:61:f6:c3:28:e8:48:60:a1:0a:17:9b:c2:78:85:c4:33:b4:
         fe:90:ef:5c:15:a3:e4:61:7e:d0:fd:5c:9f:94:8e:ac:69:b2:
         e6:aa:1d:9d:3d:3c:d3:22:0e:ca:89:a5:48:85:90:f8:ae:ca:
         78:e0:26:23:4b:98:07:0c:77:f5:12:dd:13:17:7e:36:0d:8d:
         8a:14:2d:52:e9:ad:51:21:6b:0c:e1:96:a0:55:e7:9e:c6:cb:
         6a:97:ed:4f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org