Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/C2mxdnfxfXGQByelZmrAD-d6JAc.roa
File:                     C2mxdnfxfXGQByelZmrAD-d6JAc.roa (raw, json)
Hash identifier:          cyhHK5incTVkT12Gx6HQt8OLZZ1yp5m+7y08lva3Ff4=
Subject key identifier:   0B:69:B1:76:77:F1:7D:71:90:07:27:A5:66:6A:C0:0F:E7:7A:24:07
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       6A
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/C2mxdnfxfXGQByelZmrAD-d6JAc.roa
Signing time:             Tue 18 Oct 2022 02:16:13 +0000
ROA not before:           Tue 18 Oct 2022 02:16:13 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        210.250.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:16:13 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=0B69B17677F17D71900727A5666AC00FE77A2407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:00:10:b9:60:23:cb:f3:dd:ae:b9:56:f8:39:
                    53:d5:c9:af:a5:9f:6e:55:f1:99:4b:22:ca:c5:29:
                    cf:d5:40:df:12:d5:40:bc:3a:1f:16:66:be:76:53:
                    95:42:4b:7d:fa:65:c5:20:70:10:b2:66:6e:c4:89:
                    ef:aa:c8:22:7e:b6:40:65:d6:a2:ca:a7:60:ae:e1:
                    a0:e6:5d:75:da:7b:08:b8:62:25:63:4b:3e:9a:b3:
                    f5:d2:63:9f:08:a4:be:a0:13:5e:e4:fc:dd:5a:7a:
                    2e:7d:7c:f5:ca:99:3d:00:80:9e:da:52:78:7e:67:
                    09:98:cc:71:fa:ea:04:b6:4d:f7:4b:c3:79:e7:95:
                    01:3f:7a:49:35:b1:8f:b3:df:f6:04:57:92:ae:06:
                    2c:27:50:2b:74:9a:c6:b8:0f:ed:f9:ca:52:cc:c0:
                    03:b8:13:68:16:92:68:d5:07:fb:79:a1:59:57:90:
                    3c:1a:45:4e:c0:86:4a:88:df:6d:11:10:2b:ba:2b:
                    c9:07:0d:e0:68:a1:f7:4b:ea:0a:83:95:63:91:d9:
                    b6:9b:e1:09:8d:95:25:48:f8:0c:9e:af:ec:82:42:
                    38:6d:36:28:69:f9:ea:ee:46:30:df:9f:0b:54:2b:
                    47:d5:1b:4f:cf:7d:da:74:f7:87:d6:60:cb:77:4c:
                    4b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:69:B1:76:77:F1:7D:71:90:07:27:A5:66:6A:C0:0F:E7:7A:24:07
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/C2mxdnfxfXGQByelZmrAD-d6JAc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.250.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:77:24:83:cd:ca:84:e5:64:0f:3b:aa:9d:9d:c0:d7:49:7f:
         ee:d0:fd:90:be:4b:a6:f7:18:c7:8b:fe:7a:a6:61:26:33:03:
         c5:1a:63:bf:64:82:bd:5f:17:8d:3a:56:20:7d:92:20:64:80:
         b4:bc:24:92:9e:6a:51:c1:1a:fa:83:9b:5d:be:51:0f:46:11:
         a4:13:10:77:af:57:b4:b8:e6:bd:2f:a5:78:f8:d0:1e:df:89:
         db:59:40:ff:36:4b:dd:a8:51:d6:1e:d7:8d:e0:53:0f:0c:67:
         33:b0:3e:58:75:70:32:06:18:58:ab:57:0e:d8:5a:9c:c3:03:
         4d:a0:d5:f6:6e:fa:76:cf:06:5e:51:ff:63:18:28:42:0e:8b:
         ae:79:7e:c6:27:03:b5:f2:29:0c:0f:45:2d:d1:aa:09:6f:fd:
         1f:a8:fd:95:91:fb:dc:24:1f:49:42:5c:bd:74:a7:bf:f1:72:
         3e:47:68:ea:e4:0e:2e:4b:6b:1d:8a:9d:6b:97:01:e4:09:30:
         da:76:84:36:21:5f:39:f9:54:72:f8:be:b0:c2:b5:77:ab:a5:
         65:03:ac:6c:ae:05:30:18:00:35:c9:39:b0:39:42:61:29:c5:
         a1:33:7a:f2:52:62:78:78:79:69:6d:e8:25:6b:fc:b6:a0:70:
         07:91:7d:28
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org