Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ET_RQNN7Fbk8HJq1_15gpBW2rdQ.roa
File:                     ET_RQNN7Fbk8HJq1_15gpBW2rdQ.roa (raw, json)
Hash identifier:          V+NV4m9WaDjeUwbbJi3gFChG+JDbVb2MaeRidB79JTo=
Subject key identifier:   11:3F:D1:40:D3:7B:15:B9:3C:1C:9A:B5:FF:5E:60:A4:15:B6:AD:D4
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       69
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ET_RQNN7Fbk8HJq1_15gpBW2rdQ.roa
Signing time:             Tue 18 Oct 2022 02:16:13 +0000
ROA not before:           Tue 18 Oct 2022 02:16:13 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        211.7.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:16:13 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=113FD140D37B15B93C1C9AB5FF5E60A415B6ADD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5a:0e:bc:73:49:ef:48:fe:eb:2b:f9:ea:e4:
                    af:59:a7:ed:b9:2a:51:67:5a:9d:20:1b:b7:70:a9:
                    3c:ec:1f:92:04:f1:d1:cd:ff:7a:b5:a4:4a:c0:b4:
                    9e:b8:b8:d6:2a:47:62:35:0a:e1:18:9a:09:a4:59:
                    e5:63:bb:9e:fc:bc:c3:1e:2a:18:87:63:7f:0f:69:
                    79:dc:e3:5d:1e:40:62:8a:35:26:55:b2:af:83:66:
                    7c:db:e1:77:95:31:89:8a:27:c8:d2:6e:21:11:28:
                    dc:77:c3:3d:9f:6b:97:af:e8:bb:91:0f:e3:6f:49:
                    58:2f:9e:e5:c0:8a:27:a5:6d:95:f1:f1:17:7d:5b:
                    22:47:9f:ae:49:6b:91:aa:b2:df:d1:6e:2f:4b:6e:
                    4e:4a:42:00:d7:5f:ad:29:0d:96:2d:b2:75:d2:c6:
                    df:53:1f:41:cc:bd:20:e0:af:e7:f5:f2:d6:3d:6f:
                    69:d9:46:3f:57:f1:7a:50:ce:13:6d:0e:bf:b4:b6:
                    e5:15:9f:6d:6b:60:23:e9:83:a4:6d:d2:d9:d3:6f:
                    c8:fa:c1:45:85:78:da:80:8d:f9:9a:33:6a:c8:01:
                    3e:1a:f4:d6:01:90:a1:6e:06:8f:a9:bb:b7:27:74:
                    ec:6f:d9:66:bc:2a:6d:bc:57:71:38:ff:b9:af:d6:
                    00:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:3F:D1:40:D3:7B:15:B9:3C:1C:9A:B5:FF:5E:60:A4:15:B6:AD:D4
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ET_RQNN7Fbk8HJq1_15gpBW2rdQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.7.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:03:9d:ed:df:74:66:92:9d:4b:ed:8a:89:04:9d:05:df:7a:
         37:85:4a:21:75:4d:56:e7:3b:43:15:e0:71:66:ad:7e:c1:8b:
         a1:e3:31:95:dd:52:e6:91:bc:f6:74:72:ea:89:04:88:69:cd:
         63:bc:22:80:58:07:d2:02:3e:91:74:11:4d:aa:87:c5:2c:41:
         02:6d:cb:82:31:6e:44:b2:5e:d8:3d:d7:71:e3:bd:11:6b:73:
         ff:ba:a7:1c:c8:61:f4:3f:3e:ce:69:d2:9c:17:d3:31:bf:49:
         25:32:36:9d:b7:f0:e9:eb:21:28:d3:58:2a:a1:80:71:03:7e:
         6d:1c:22:d6:2e:a0:57:74:dd:3a:76:da:00:36:fe:c3:4e:a3:
         76:cb:68:1d:0e:81:0f:d6:de:ee:17:7e:69:e7:ab:11:88:4e:
         03:a2:0a:f4:94:35:eb:94:a2:6f:5f:32:c2:c9:f8:e7:00:34:
         cd:41:19:a7:73:3f:79:8d:1b:fa:b7:73:90:12:f3:61:4d:c2:
         21:eb:fc:d3:5a:e1:01:0a:cb:37:94:fa:2a:45:7c:7e:de:02:
         27:ef:83:3a:46:e4:98:e6:37:00:1c:f7:2d:69:58:21:dd:0b:
         8a:8c:1b:b4:b7:1c:0f:e2:6f:88:d9:b0:80:a6:27:22:c9:d0:
         17:20:ef:a6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org