Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/7NSUztmY0mOWW-jb8Pm7M3IjIIE.roa
File:                     7NSUztmY0mOWW-jb8Pm7M3IjIIE.roa (raw, json)
Hash identifier:          KOXiD33ck4uxSqZd+A8DcqLGHIbZzulO1CSqu3yjj0k=
Subject key identifier:   EC:D4:94:CE:D9:98:D2:63:96:5B:E8:DB:F0:F9:BB:33:72:23:20:81
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0110
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/7NSUztmY0mOWW-jb8Pm7M3IjIIE.roa
Signing time:             Fri 01 Sep 2023 01:34:25 +0000
ROA not before:           Fri 01 Sep 2023 01:34:25 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.188.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 272 (0x110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:34:25 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=ECD494CED998D263965BE8DBF0F9BB3372232081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ce:ad:33:a2:ff:b5:0c:a9:e8:67:1b:13:a9:
                    c0:db:0c:52:ea:e9:72:cf:c1:ab:69:53:6d:3a:3e:
                    51:3c:06:a6:3f:81:0c:44:1b:8f:5a:b0:4a:51:51:
                    8d:5d:92:89:f2:bf:d7:df:1a:61:be:18:1a:a1:17:
                    10:4e:d2:86:e6:43:42:37:b6:56:fb:50:14:70:e7:
                    40:07:dc:75:32:aa:8a:b8:d8:94:c5:af:74:4c:10:
                    9a:d5:f7:2b:62:57:fc:f4:08:ac:85:0a:f0:f5:a7:
                    5b:db:1d:32:1d:8a:ac:80:93:05:8d:2f:53:e3:82:
                    8f:64:38:60:04:b1:0b:08:d8:6f:4c:c6:0c:6f:66:
                    3a:13:1c:7d:f7:2d:25:dc:80:29:a1:23:c5:eb:cc:
                    5b:93:b6:a1:9a:86:19:9b:67:b9:c2:00:29:d9:8e:
                    29:8f:1d:2a:f9:ac:b3:da:0a:ed:09:e0:6b:c8:84:
                    fc:90:8b:9b:dd:21:da:51:24:e4:1a:89:73:1a:b1:
                    a8:b6:ea:d7:85:32:83:fe:d3:41:53:15:a6:3b:2b:
                    df:e5:5b:e5:1e:ed:04:af:4c:59:90:65:05:41:32:
                    dc:05:ea:07:6f:ef:21:66:d6:0a:f1:5f:c6:f6:fc:
                    4d:cf:72:c2:c7:8c:c2:87:4f:00:c1:6e:7f:77:9f:
                    ef:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D4:94:CE:D9:98:D2:63:96:5B:E8:DB:F0:F9:BB:33:72:23:20:81
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/7NSUztmY0mOWW-jb8Pm7M3IjIIE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:2a:3d:fe:03:53:4f:5d:e4:cb:b9:79:a3:0e:5f:6e:a3:a6:
         bd:73:72:8e:44:f9:eb:3f:6f:ad:e7:20:f8:bc:a9:17:ba:58:
         73:64:16:e2:58:49:14:56:39:f2:63:83:a5:02:ec:aa:0a:0b:
         46:e2:46:c4:de:8f:4f:65:34:36:f8:aa:b6:80:fe:45:ab:a0:
         63:02:7a:4d:d9:0d:ef:75:02:09:c1:2b:3c:1e:da:a4:13:d3:
         f8:62:c0:a1:b3:ab:e3:e9:c7:d7:1d:3d:9e:cb:19:d5:27:a6:
         80:b2:94:12:b2:16:17:d1:62:56:2a:5f:eb:64:08:45:62:4b:
         bf:96:f3:55:b5:7c:42:fb:2c:77:8c:e2:d1:9c:12:35:2e:29:
         13:26:16:d0:39:b4:f0:cd:56:d4:d4:6d:fb:80:04:b0:83:eb:
         3c:ad:cb:e6:8d:5f:bd:c2:e8:fd:b6:3c:c8:31:9b:34:0f:26:
         6b:61:e7:18:e8:80:93:f9:89:91:bf:fb:98:27:ff:cf:a7:2a:
         79:d0:03:ae:fe:12:1b:b3:62:20:bf:3b:a2:a1:03:89:30:84:
         49:8f:d1:78:94:8e:ec:18:e3:34:ea:36:f6:ac:2b:15:d6:c2:
         60:53:49:00:36:0f:87:1d:f5:a3:d9:e5:b0:42:66:1f:1f:98:
         9f:de:65:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org