Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/A6u3yQHCgGgUuv6AuwAKSWwlrhU.roa
File:                     A6u3yQHCgGgUuv6AuwAKSWwlrhU.roa (raw, json)
Hash identifier:          RG5Z33NDJFW5m54FyUsZnpPwJ++W8d93p1t68R6py1I=
Subject key identifier:   03:AB:B7:C9:01:C2:80:68:14:BA:FE:80:BB:00:0A:49:6C:25:AE:15
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       82
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/A6u3yQHCgGgUuv6AuwAKSWwlrhU.roa
Signing time:             Tue 18 Oct 2022 02:22:23 +0000
ROA not before:           Tue 18 Oct 2022 02:22:23 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        210.253.154.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:22:23 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=03ABB7C901C2806814BAFE80BB000A496C25AE15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d8:c8:7f:39:04:49:96:4d:ea:c7:bf:ef:56:
                    bb:b7:57:b0:7f:9f:7e:fa:67:55:65:e0:80:1b:f9:
                    03:e7:c6:b9:09:a6:d6:91:0b:ec:81:0d:8f:58:7d:
                    fc:30:b9:fe:c7:2b:c0:8f:64:99:aa:e4:51:65:55:
                    c9:8e:52:89:6b:d6:e5:86:d5:09:9b:b7:b1:71:20:
                    f5:f0:63:2f:75:b6:55:a0:25:67:ec:50:b5:0d:3f:
                    11:27:10:96:b2:b5:8a:1a:54:de:17:9e:b4:32:c7:
                    a0:ab:0a:27:96:83:df:91:b6:1a:09:7d:68:0f:af:
                    6c:1c:c0:4a:b3:1f:b8:b2:3c:03:8e:17:c2:61:1a:
                    dd:2d:33:aa:e9:ef:09:44:0c:0e:48:d7:26:34:e4:
                    90:1b:76:d1:1f:20:a4:6c:6c:fe:d2:e3:e1:02:cf:
                    dc:8e:34:ca:54:24:ce:c5:f2:78:73:4b:f4:7e:87:
                    92:63:05:eb:f2:d3:7c:b3:80:8f:bb:89:d2:34:35:
                    70:af:d0:7c:d2:e0:51:53:6e:fe:d7:04:97:a0:d1:
                    52:a3:e0:45:7c:7f:cf:1d:74:af:3c:ab:36:d2:36:
                    fe:75:4b:6b:1a:43:88:20:1c:56:77:60:60:26:0b:
                    3f:c1:72:5c:3f:f1:fb:c4:28:e6:43:44:c1:6d:f3:
                    21:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:AB:B7:C9:01:C2:80:68:14:BA:FE:80:BB:00:0A:49:6C:25:AE:15
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/A6u3yQHCgGgUuv6AuwAKSWwlrhU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.253.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:5d:86:db:96:e4:31:86:7c:07:80:c1:78:fa:70:78:77:83:
         d6:3a:19:b9:c6:75:c7:e2:ab:31:aa:5c:8e:5c:b5:15:34:30:
         7a:0b:18:73:be:bd:86:e9:40:4f:b5:91:d4:a3:fe:e7:15:6d:
         8c:87:79:11:9a:fc:05:70:3c:28:59:35:38:95:32:62:be:56:
         21:8b:bc:c2:d1:bf:b4:18:35:12:a9:12:c6:95:f1:c4:c9:7b:
         8e:59:0a:a2:ee:94:75:b3:30:95:f1:91:62:b5:b6:c2:50:c4:
         f9:10:88:72:e2:0e:e9:fe:24:3e:b1:51:28:aa:73:1a:ac:93:
         43:88:e3:a1:8a:7c:86:dc:bd:fe:d4:91:eb:8a:c4:a0:59:6d:
         f3:9f:e1:07:52:8d:9d:59:b0:8b:34:61:08:e0:9f:1e:4d:59:
         a7:7c:0e:6e:ed:18:3e:77:02:31:7a:17:64:9a:e2:a3:62:59:
         2d:73:5a:6c:ec:28:a3:f2:28:6b:30:72:d7:a6:59:1e:11:13:
         59:eb:c9:dd:de:8d:0e:0a:64:6f:da:7d:9e:4f:c7:e4:6c:d7:
         f6:a7:e3:95:23:15:0a:d4:d8:e5:20:97:68:e1:e3:e2:a9:30:
         d8:db:94:23:78:4f:23:27:de:f0:e4:a7:67:22:d1:54:33:dd:
         93:63:d1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org