Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/88kNAGv6DW6137Rqej0y73sXxgk.roa
File:                     88kNAGv6DW6137Rqej0y73sXxgk.roa (raw, json)
Hash identifier:          jTTnTWHB9t5dc8K4X6C/wh1kWeHgt3rLL5kHbuJPjKQ=
Subject key identifier:   F3:C9:0D:00:6B:FA:0D:6E:B5:DF:B4:6A:7A:3D:32:EF:7B:17:C6:09
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       3F
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/88kNAGv6DW6137Rqej0y73sXxgk.roa
Signing time:             Tue 11 Oct 2022 09:38:09 +0000
ROA not before:           Tue 11 Oct 2022 09:38:09 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        210.238.64.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 11 09:38:09 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=F3C90D006BFA0D6EB5DFB46A7A3D32EF7B17C609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:07:31:b4:db:42:7a:ca:75:e8:92:6b:2e:90:
                    56:54:85:07:24:3b:f1:81:77:3b:1c:7c:c9:ac:53:
                    89:2f:c2:80:85:9b:e8:7f:5d:2f:93:12:68:06:db:
                    9a:23:18:70:18:4a:c5:02:92:2b:2c:2e:9f:3b:2c:
                    6e:85:1d:d4:e3:17:27:f8:5c:99:18:a9:3f:47:f3:
                    6a:6c:82:85:48:b7:28:ad:87:4b:25:be:75:c5:7d:
                    f7:aa:48:8f:69:eb:3d:57:ea:b4:34:73:1b:30:cf:
                    97:83:ab:13:8e:5c:41:78:4a:5a:55:fa:b7:65:ae:
                    89:28:83:16:e0:52:a8:a1:cd:65:1a:7a:13:7b:86:
                    df:43:d3:a5:0b:36:e1:d1:90:84:c6:d4:db:f6:5a:
                    eb:96:04:6c:5f:6f:52:0f:31:03:06:8b:71:5c:97:
                    41:a9:b3:ea:e5:36:96:d8:4e:dd:32:b5:60:56:86:
                    b9:97:51:05:6e:46:26:e6:41:99:03:e4:49:bb:85:
                    3f:75:37:30:01:a3:b8:ad:a8:03:bc:0c:33:cf:65:
                    38:56:c5:36:ff:22:b5:3d:c6:aa:85:25:cb:b1:75:
                    0e:98:2d:28:ef:e9:d4:9a:64:fc:3d:35:a6:2d:ec:
                    d4:05:a2:f5:ca:a8:76:cd:55:3f:49:0b:65:e2:cb:
                    e8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C9:0D:00:6B:FA:0D:6E:B5:DF:B4:6A:7A:3D:32:EF:7B:17:C6:09
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/88kNAGv6DW6137Rqej0y73sXxgk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.238.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5b:39:5b:fd:00:9b:4e:be:ce:e4:e6:56:bf:12:37:be:16:2a:
         5b:c9:92:89:e0:48:75:34:98:be:0b:00:ce:b7:cd:91:a1:a8:
         44:46:be:e7:2f:c6:8a:a3:80:62:87:a4:df:73:c0:7d:6f:1c:
         1c:10:00:89:12:7e:7a:fd:4e:41:c3:13:a1:8e:da:cd:04:58:
         de:98:d0:3c:63:ee:0f:5e:c3:b1:e1:da:86:a3:82:84:32:26:
         a7:03:86:32:4e:7f:46:29:95:17:93:f1:32:b5:d9:de:df:b4:
         e1:6c:9e:12:7b:24:66:27:5a:53:f8:88:42:2e:73:d1:3b:51:
         78:78:77:5c:04:8b:f1:83:d3:2e:90:f1:5a:c9:a1:ca:f9:1d:
         bb:a9:a3:da:61:cb:42:9e:3f:4a:38:d4:ad:87:9e:82:1f:5e:
         4f:b2:f5:ff:40:ad:c5:b2:77:c8:47:8c:a6:d9:46:75:15:a4:
         30:41:ec:b0:fd:29:35:7f:f9:14:50:aa:77:38:71:8f:11:e7:
         db:2e:3b:a5:d7:89:26:b3:13:b5:34:5e:de:fa:17:6c:21:37:
         de:69:01:d2:5c:be:65:c1:e7:4b:1f:6a:09:fe:05:35:17:3d:
         c6:ba:52:c8:6b:12:37:5c:4a:aa:e3:d3:09:90:08:f7:00:b5:
         24:51:db:f6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org