Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/9W2HdF9hQtYn295MFBHdyLwv_KA.roa
File:                     9W2HdF9hQtYn295MFBHdyLwv_KA.roa (raw, json)
Hash identifier:          Dny4YwuZW9zf7ZLkAhFcqUatlZL+GjAPTmePuRrwn6E=
Subject key identifier:   F5:6D:87:74:5F:61:42:D6:27:DB:DE:4C:14:11:DD:C8:BC:2F:FC:A0
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       12
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/9W2HdF9hQtYn295MFBHdyLwv_KA.roa
Signing time:             Tue 11 Oct 2022 09:24:12 +0000
ROA not before:           Tue 11 Oct 2022 09:24:12 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        210.191.0.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 11 09:24:12 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=F56D87745F6142D627DBDE4C1411DDC8BC2FFCA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:89:0e:44:3e:a6:3f:98:3c:8a:2a:2c:77:c2:
                    26:34:de:14:21:84:aa:1f:85:16:b7:c5:79:10:1c:
                    6b:77:f9:aa:06:a4:41:eb:dd:3a:36:a1:2f:9a:53:
                    b8:f0:2e:ee:ce:60:1a:d9:a5:7e:79:72:36:41:c5:
                    19:82:ba:f3:69:a1:cf:45:55:cc:08:80:d7:a2:f9:
                    ec:ad:3d:c5:69:e1:43:c6:90:ec:47:3e:1b:f0:7b:
                    46:0b:94:cf:49:e1:72:86:e7:8a:17:1b:60:85:30:
                    b3:2d:7a:68:82:db:9c:36:7d:48:6c:69:06:f7:09:
                    db:df:52:27:42:15:8d:71:39:ec:aa:ba:a1:c4:e2:
                    d7:9c:af:59:89:95:c4:a1:80:5c:91:67:02:24:f3:
                    6d:e6:c4:7c:14:73:f9:e6:b2:73:60:6c:e3:05:67:
                    ad:7f:f5:ea:4b:c7:d4:ce:48:67:e0:95:a1:7d:c6:
                    0b:ac:f2:de:e5:94:a8:c1:47:0c:76:d6:ea:ef:b7:
                    d2:54:80:ed:27:82:38:b5:96:fe:63:4e:9a:11:6c:
                    f2:67:6c:a4:1d:b8:f9:7f:33:c9:83:43:aa:9c:de:
                    0b:58:8f:40:5b:cb:6d:e9:e5:fe:8d:84:76:fe:fb:
                    27:a5:e5:fc:00:0d:e6:15:14:c9:e3:50:c7:ea:d1:
                    e0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6D:87:74:5F:61:42:D6:27:DB:DE:4C:14:11:DD:C8:BC:2F:FC:A0
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/9W2HdF9hQtYn295MFBHdyLwv_KA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.191.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         af:ae:bf:9a:e6:06:d1:37:0e:21:1a:9e:2a:65:fa:e1:05:71:
         a9:ba:7a:84:8c:80:5d:a6:cf:bd:23:50:24:f0:f1:bd:dd:b6:
         8d:cf:3e:86:a9:1a:b6:3a:0c:58:5a:57:91:86:d6:1d:5f:cb:
         a3:2b:34:25:10:18:d6:78:99:33:bd:05:98:0c:25:bd:69:b5:
         da:ff:89:7b:46:7d:92:dd:01:86:ff:83:fe:c2:be:f6:ae:6f:
         b4:f9:2b:0a:f9:7e:4d:61:51:00:dd:89:9a:a6:71:6e:56:58:
         07:38:95:4d:9f:a4:ea:57:7c:00:de:22:f1:51:38:c0:45:54:
         7c:06:c9:9c:4b:4c:1f:37:f1:ef:1c:63:be:49:40:5d:4b:4e:
         cf:84:01:e3:ff:7f:01:89:46:c5:a3:e3:62:2f:ae:32:08:f4:
         8e:26:6c:b0:71:cb:8e:2b:ec:20:ed:fb:00:66:10:33:a1:10:
         b6:53:3b:7d:9e:3f:fa:1c:54:46:f5:6d:60:64:66:72:31:28:
         45:66:19:b4:28:bd:42:63:c2:4c:d8:a9:5c:be:61:97:a6:63:
         a5:20:fb:fb:46:7e:b1:d4:b7:24:d6:4c:e8:20:5e:a3:37:15:
         1d:a4:8b:66:ea:15:60:41:c6:eb:1c:6a:91:0a:4e:c4:e0:2e:
         37:be:f6:be
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org