Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/AZmBL2gLOmKHlKoVh7cyOTFGKAs.roa
File:                     AZmBL2gLOmKHlKoVh7cyOTFGKAs.roa (raw, json)
Hash identifier:          hwRmm20N8rZ5Xq6aGZAidMHLL8jyXAAYBXf+2OMmHJU=
Subject key identifier:   01:99:81:2F:68:0B:3A:62:87:94:AA:15:87:B7:32:39:31:46:28:0B
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       A4
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/AZmBL2gLOmKHlKoVh7cyOTFGKAs.roa
Signing time:             Tue 18 Oct 2022 02:32:22 +0000
ROA not before:           Tue 18 Oct 2022 02:32:22 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        218.225.112.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:32:22 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=0199812F680B3A628794AA1587B732393146280B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:32:22:6f:e4:63:17:50:cf:51:ab:06:80:7d:
                    c3:6f:cc:2b:1a:22:23:27:22:bb:d5:21:6c:b6:ed:
                    1d:a5:af:14:b8:b6:e0:c8:dc:fb:ee:85:42:87:2b:
                    0a:2d:31:ab:06:74:91:6e:24:35:c7:dc:0a:41:24:
                    98:2c:da:fc:7b:23:77:86:1d:c4:a4:00:23:76:3e:
                    9c:cf:68:28:c7:83:a0:c2:fc:d4:9e:42:c0:36:00:
                    ac:38:11:b7:a0:57:b0:e8:a9:5f:64:87:07:e0:7d:
                    12:87:69:1f:54:f4:55:f7:a2:77:ad:5b:48:03:8d:
                    ac:3a:3b:a8:dd:ff:cf:f9:35:07:f6:83:63:a9:30:
                    0d:a2:0f:3f:2e:e3:81:9e:60:9b:3d:4e:82:20:b2:
                    67:6d:05:84:80:fd:d2:16:5d:56:84:b5:d7:55:5a:
                    ae:21:14:36:55:59:dc:71:44:ef:80:c9:a4:5a:08:
                    cc:a5:6c:c1:72:9c:fb:b0:f7:ac:47:d9:7f:e1:67:
                    20:51:b6:7c:a3:cb:01:2c:5a:0c:b4:63:76:a3:54:
                    e2:08:e3:5b:6e:87:42:5e:ac:89:e0:43:84:bc:df:
                    bf:23:da:f5:29:1a:dc:61:f2:43:0f:cd:76:5f:80:
                    1a:79:60:f4:60:74:c0:60:9a:55:0f:a0:7c:e4:43:
                    12:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:99:81:2F:68:0B:3A:62:87:94:AA:15:87:B7:32:39:31:46:28:0B
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/AZmBL2gLOmKHlKoVh7cyOTFGKAs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.225.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:52:be:7b:42:27:49:23:69:4b:15:e4:1c:14:f8:a2:25:3d:
         b2:6c:d8:b5:a7:92:f6:2c:51:ba:0a:51:13:aa:f1:e1:41:19:
         ed:ba:e5:fb:00:d2:12:78:8b:38:4b:d8:56:8e:37:f2:0f:b2:
         56:7b:0f:13:8d:26:67:4b:31:09:b9:6d:fa:0b:b4:db:60:50:
         ee:90:3a:08:53:43:3c:39:6d:1b:c1:9b:d4:91:9d:96:3a:dd:
         b3:d3:3a:d7:93:e9:d0:2a:db:98:94:14:3b:23:31:a6:ca:ed:
         0f:6a:51:2d:6e:94:b4:d0:8e:2a:85:9b:b3:a9:5d:42:42:8d:
         50:e8:62:08:04:99:d1:97:05:a5:bf:99:df:97:4d:68:30:12:
         45:f9:9a:36:d4:5e:a9:3a:6b:e3:48:00:9b:84:0f:26:11:cb:
         44:7a:80:b4:9d:d5:70:f7:00:c9:88:92:77:28:c4:0f:42:8a:
         1e:d3:3d:e3:28:ba:9b:a4:53:2b:d9:42:17:3c:58:02:65:a3:
         87:43:04:76:4f:7b:25:26:fb:65:0e:2a:e3:2a:f0:88:03:b9:
         d2:69:30:6f:d0:ee:68:12:55:27:18:b0:bf:d0:42:3f:25:a6:
         5c:40:7b:ac:57:c7:08:b7:c5:5b:21:cb:fe:2d:65:72:74:67:
         93:b8:70:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org