Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/BfcZyXl1S_PNi1yc7AvwzOs9_dM.roa
File:                     BfcZyXl1S_PNi1yc7AvwzOs9_dM.roa (raw, json)
Hash identifier:          irCNNX9gT1ZgT2DH2GmNB4oLxIgYnwP/y6zOtbwvAOA=
Subject key identifier:   05:F7:19:C9:79:75:4B:F3:CD:8B:5C:9C:EC:0B:F0:CC:EB:3D:FD:D3
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       9E
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/BfcZyXl1S_PNi1yc7AvwzOs9_dM.roa
Signing time:             Tue 18 Oct 2022 02:30:23 +0000
ROA not before:           Tue 18 Oct 2022 02:30:23 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        211.125.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:30:23 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=05F719C979754BF3CD8B5C9CEC0BF0CCEB3DFDD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1b:bb:ff:5b:0d:db:6c:a5:40:d3:37:c8:c7:
                    b9:45:45:3e:b3:09:7e:84:37:5f:71:65:44:54:cb:
                    0d:2b:8b:6a:4f:33:56:a3:62:6c:b9:7d:3d:0a:5d:
                    87:0f:8d:ff:2d:a5:72:62:34:ce:2b:3f:78:ff:54:
                    2b:1e:10:94:18:e2:be:5f:66:31:fe:0b:14:32:01:
                    ca:2b:55:2c:af:9d:5f:da:5b:f6:fd:e4:48:47:d0:
                    c7:94:2b:94:2f:95:f1:50:4c:35:90:03:90:e7:b6:
                    ad:48:0a:3e:7c:16:f8:d5:d9:47:49:d4:43:88:c3:
                    57:8f:34:93:ef:06:dd:0c:c7:da:de:e7:d6:b0:4e:
                    d7:ac:a8:a3:9b:92:b3:15:b9:f5:ba:8b:dd:6e:50:
                    63:f0:00:44:ab:82:ae:bf:af:7c:0c:62:e8:70:41:
                    ef:07:d6:0d:21:74:a4:47:08:c7:1b:50:a2:f3:25:
                    53:3b:dd:7f:46:37:0a:f2:f3:7a:cb:07:ad:4f:aa:
                    d6:00:a7:d1:a2:6e:21:61:2d:33:18:63:fb:00:08:
                    4e:33:f5:45:f2:36:5d:87:81:3c:b3:07:a8:8e:ed:
                    a1:ea:eb:94:e3:3d:35:90:d3:ff:fa:6d:d7:43:b1:
                    f6:53:87:ce:d4:a6:12:91:66:a7:8a:38:19:63:0f:
                    d9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F7:19:C9:79:75:4B:F3:CD:8B:5C:9C:EC:0B:F0:CC:EB:3D:FD:D3
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/BfcZyXl1S_PNi1yc7AvwzOs9_dM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:ef:74:07:1f:35:e2:8b:3e:1c:3b:1b:f9:b2:05:35:2e:b9:
         34:fc:8e:1e:4b:d9:89:2f:b8:4c:9f:0e:e5:c8:61:24:05:19:
         d7:a0:39:d2:51:91:4b:51:ec:2c:94:d6:cd:00:a2:50:e1:f8:
         9d:2e:a0:ac:f7:d8:08:83:31:d6:d8:97:d9:02:bd:52:c3:c3:
         9c:99:24:8f:74:21:c6:77:65:b9:63:5d:d9:6e:09:f4:32:cf:
         6f:ea:e9:65:0c:8d:e5:af:66:6c:27:a5:f7:22:85:a1:4e:b9:
         46:27:b3:9f:dc:dd:d2:60:52:b2:d9:03:d6:ee:de:2c:2e:06:
         08:b3:20:02:3f:34:00:16:a4:92:5c:23:03:47:b9:c1:35:87:
         86:f3:5c:ee:d1:05:00:5d:42:5e:a6:c8:16:ea:fb:14:ac:77:
         18:9b:88:6f:16:c4:4d:3e:b0:f2:fc:fd:5d:40:c4:51:e6:20:
         6c:1f:24:da:dd:21:ab:f5:4d:57:10:49:12:90:45:b7:07:3b:
         c9:a3:ff:a9:62:48:dc:a5:c4:56:e6:b0:f7:0d:84:68:45:99:
         be:7c:ac:a8:77:51:9c:8c:b6:52:1c:01:4d:9b:40:fd:42:7a:
         2c:28:cf:8c:3f:36:f5:e4:2b:3f:2f:b0:e3:49:ba:2f:fb:93:
         3c:5c:bd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org