Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/5VM7egKUFqoRbd7W5-_Jh70GzdM.roa
File:                     5VM7egKUFqoRbd7W5-_Jh70GzdM.roa (raw, json)
Hash identifier:          mn1izJC1gtKTDdThKX9mJpSnO0xxV5Jc8a+euvOeExk=
Subject key identifier:   E5:53:3B:7A:02:94:16:AA:11:6D:DE:D6:E7:EF:C9:87:BD:06:CD:D3
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       3B
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/5VM7egKUFqoRbd7W5-_Jh70GzdM.roa
Signing time:             Tue 11 Oct 2022 09:36:11 +0000
ROA not before:           Tue 11 Oct 2022 09:36:11 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        210.238.10.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 11 09:36:11 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=E5533B7A029416AA116DDED6E7EFC987BD06CDD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ee:af:e3:09:74:64:13:96:45:c0:97:78:f7:
                    f7:5a:83:f3:67:c2:c3:c3:2b:e2:f2:03:a7:46:fe:
                    00:82:62:f3:4b:bf:4e:b1:06:23:8c:fc:4c:e4:0a:
                    24:8c:01:98:51:f4:fc:f4:9c:08:91:d2:33:bb:9e:
                    be:59:cd:43:f8:60:28:fa:a9:1d:29:b5:fd:67:8e:
                    8c:cd:dc:96:1f:5e:2c:a5:fb:92:ca:f4:b0:14:4b:
                    9d:5b:00:28:e5:b2:b4:56:d0:8d:8d:c5:23:5b:dd:
                    77:db:4d:75:cf:53:af:2c:e0:4b:98:bb:47:e3:bb:
                    ba:b7:a3:8e:f4:ad:71:a3:56:d3:7f:76:6a:44:31:
                    b0:39:1a:bf:1c:f6:8b:af:f5:f6:9c:9b:f8:e6:f3:
                    d1:93:18:fc:26:1f:b8:8e:c0:f3:bd:bc:e1:3a:ad:
                    e2:ef:cd:b6:d2:a5:5c:37:c4:33:6b:1d:e1:08:1c:
                    26:1a:31:8d:5e:78:3f:0f:e3:6e:6c:df:84:35:47:
                    12:67:a7:5d:fb:58:b5:66:24:6f:d0:b6:bd:86:7b:
                    9e:09:43:41:8b:b6:78:61:a1:d1:9c:20:3c:03:48:
                    3d:01:a6:34:bd:da:5f:24:02:de:b2:7f:23:bb:ca:
                    e6:5f:42:4a:9e:e5:01:64:29:ef:5f:a6:b2:2d:d2:
                    3c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:53:3B:7A:02:94:16:AA:11:6D:DE:D6:E7:EF:C9:87:BD:06:CD:D3
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/5VM7egKUFqoRbd7W5-_Jh70GzdM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.238.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:72:c8:1e:2d:0d:90:28:02:74:d3:fd:53:0b:76:dc:0c:aa:
         9b:a7:a3:e0:49:5c:d5:6a:38:8e:df:9a:88:c2:76:2f:26:2c:
         80:f5:2b:32:51:0b:84:29:8f:71:ef:c7:23:4b:f7:84:2d:ee:
         d3:1e:46:cc:ad:3a:85:26:37:96:82:2d:a3:3a:ab:04:23:60:
         ec:dc:e9:72:67:cf:0d:34:a2:7b:0f:8f:4d:3c:b1:e4:ee:10:
         fd:42:9f:6a:a0:53:0f:c6:f8:d8:00:fc:13:1d:8c:cc:41:09:
         ac:bc:06:8f:9e:6a:fa:36:31:5c:ed:5d:b4:99:82:89:78:de:
         db:64:a6:aa:40:c5:81:fb:97:de:76:48:f9:77:cc:d1:a7:f0:
         a7:fe:68:77:ac:81:cf:b4:2f:b8:3a:e2:a9:79:be:0d:65:4d:
         32:38:36:5f:bc:96:96:34:65:fe:4e:37:36:f6:40:52:da:65:
         5e:ed:7c:d1:e0:a7:20:2a:80:2d:bf:c8:01:bf:e2:cb:5d:cb:
         9d:4a:12:20:58:db:49:84:b0:d8:39:c4:b8:41:b4:0f:39:e3:
         f8:c0:04:2c:c6:45:5d:f6:12:9e:fe:51:66:50:b3:8e:fa:ff:
         20:f7:52:43:81:20:70:2d:2c:91:3e:9d:2b:f3:69:79:90:98:
         52:b4:8d:3e
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBOzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNzYx
QTNBOUZBRTg3RjhGMDY5RDY4MjQ3MUNCRTFDOTM1RkJFMzIxMB4XDTIyMTAxMTA5
MzYxMVoXDTIzMDkxNTAxMzAwM1owMzExMC8GA1UEAxMoRTU1MzNCN0EwMjk0MTZB
QTExNkRERUQ2RTdFRkM5ODdCRDA2Q0REMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKbur+MJdGQTlkXAl3j391qD82fCw8Mr4vIDp0b+AIJi80u/TrEG
I4z8TOQKJIwBmFH0/PScCJHSM7uevlnNQ/hgKPqpHSm1/WeOjM3clh9eLKX7ksr0
sBRLnVsAKOWytFbQjY3FI1vdd9tNdc9TryzgS5i7R+O7urejjvStcaNW0392akQx
sDkavxz2i6/19pyb+Obz0ZMY/CYfuI7A87284Tqt4u/NttKlXDfEM2sd4QgcJhox
jV54Pw/jbmzfhDVHEmenXftYtWYkb9C2vYZ7nglDQYu2eGGh0ZwgPANIPQGmNL3a
XyQC3rJ/I7vK5l9CSp7lAWQp71+msi3SPN0CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBTlUzt6ApQWqhFt3tbn78mHvQbN0zAfBgNVHSMEGDAWgBTHYaOp+uh/jwadaCRx
y+HJNfvjITAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTMzNDcveDJHanFmcm9mNDhHbldna2Njdmh5VFg3NHlFLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveDJHanFmcm9mNDhHbldna2Njdmh5
VFg3NHlFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEzMzQ3LzVWTTdlZ0tVRnFvUmJkN1c1LV9KaDcwR3pkTS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAHS7gowDQYJKoZIhvcNAQELBQADggEBAIxyyB4tDZAoAnTT/VMLdtwM
qpuno+BJXNVqOI7fmojCdi8mLID1KzJRC4Qpj3HvxyNL94Qt7tMeRsytOoUmN5aC
LaM6qwQjYOzc6XJnzw00onsPj008seTuEP1Cn2qgUw/G+NgA/BMdjMxBCay8Bo+e
avo2MVztXbSZgol43ttkpqpAxYH7l952SPl3zNGn8Kf+aHesgc+0L7g64ql5vg1l
TTI4Nl+8lpY0Zf5ONzb2QFLaZV7tfNHgpyAqgC2/yAG/4stdy51KEiBY20mEsNg5
xLhBtA854/jABCzGRV32Ep7+UWZQs476/yD3UkOBIHAtLJE+nSvzaXmQmFK0jT4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org