Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/FIs82-kU9ZGG9Z4iOhzWOZxHDAg.roa
File:                     FIs82-kU9ZGG9Z4iOhzWOZxHDAg.roa (raw, json)
Hash identifier:          Jngs7RCFof09yUpIO0oDMQnpSzXum/LttWfAs5Dhsi4=
Subject key identifier:   14:8B:3C:DB:E9:14:F5:91:86:F5:9E:22:3A:1C:D6:39:9C:47:0C:08
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       1F
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/FIs82-kU9ZGG9Z4iOhzWOZxHDAg.roa
Signing time:             Tue 11 Oct 2022 09:28:17 +0000
ROA not before:           Tue 11 Oct 2022 09:28:17 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        210.224.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 11 09:28:17 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=148B3CDBE914F59186F59E223A1CD6399C470C08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ce:80:78:e9:65:af:49:20:b6:04:ee:51:e9:
                    b1:a2:87:7b:c0:83:97:23:b2:70:49:3f:49:2b:75:
                    eb:f0:8f:1e:2e:b5:0e:36:42:48:fd:95:99:93:9b:
                    cc:05:d8:28:3a:02:9d:5e:65:f1:34:66:cb:f5:b5:
                    0c:c9:93:5d:8f:e9:f7:95:33:42:90:12:af:93:90:
                    34:25:75:84:72:d2:76:61:82:3c:9a:bd:f2:74:38:
                    9e:14:d2:4a:08:2a:f8:20:16:cc:56:aa:ee:a5:c0:
                    0d:dd:04:bb:e5:cd:01:f5:b4:24:f3:4f:21:9a:a1:
                    cf:bf:59:f2:97:ef:ae:69:a3:ec:22:f8:b9:0b:47:
                    82:be:b3:d7:b6:44:44:e9:06:e1:81:47:07:ab:f5:
                    10:17:1e:dc:c4:30:1a:f1:8b:24:fa:88:49:4c:d0:
                    c4:62:46:9e:a6:1e:45:b7:71:1c:d3:cf:1e:d7:52:
                    09:87:e6:37:76:1c:ea:f8:de:68:d0:99:95:f6:9e:
                    27:e7:2f:0b:c9:c8:a7:7d:39:1a:af:86:d4:06:cb:
                    e0:d5:c6:cc:64:80:e1:38:bd:69:5a:1b:b2:74:b2:
                    42:fb:43:32:9b:c3:75:93:0b:77:1b:18:69:64:0f:
                    10:e2:12:81:10:7a:ce:31:e2:92:38:07:41:1b:43:
                    e4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:8B:3C:DB:E9:14:F5:91:86:F5:9E:22:3A:1C:D6:39:9C:47:0C:08
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/FIs82-kU9ZGG9Z4iOhzWOZxHDAg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.224.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         df:58:34:90:c1:eb:ac:e3:2e:78:54:39:06:e0:b3:f2:d4:ab:
         54:ad:35:40:f6:20:b1:1f:0d:fa:68:d2:2b:48:f7:51:e1:6e:
         7f:08:49:ca:7d:57:39:08:14:22:2e:be:a3:d5:a0:24:30:eb:
         9a:b6:0e:c8:5c:1a:44:2a:2f:62:e0:de:76:bb:7b:78:79:b6:
         17:f3:8f:10:6b:eb:ab:2d:b9:2b:0f:0d:70:2b:0b:b7:d4:db:
         96:df:01:fe:d6:72:af:a0:5b:cf:35:b5:95:b9:32:e1:7b:41:
         42:55:b9:df:b7:bc:7c:50:43:45:97:0c:7f:40:7c:7c:8c:60:
         6b:a7:e6:8b:08:0f:fa:4b:41:90:55:07:72:2d:35:b7:bc:19:
         38:36:f7:23:43:01:70:da:5e:61:0c:dd:40:c5:7c:d2:75:5c:
         f9:32:9a:fc:d0:14:72:02:fb:a1:b5:04:de:80:df:a6:b4:7f:
         28:fb:25:3e:bb:1b:2e:5b:43:e6:a0:a7:e0:21:04:a6:e3:8a:
         bc:4f:fe:1e:7f:8b:cb:87:4b:04:6d:01:6a:08:90:25:88:ca:
         0a:2d:16:29:be:fe:6c:5e:fe:58:e9:7a:74:2f:b0:7f:95:ac:
         f8:2e:fa:37:ff:e3:77:41:3c:6c:24:02:61:a3:3f:55:3a:e4:
         60:7b:5a:37
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBHzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNzYx
QTNBOUZBRTg3RjhGMDY5RDY4MjQ3MUNCRTFDOTM1RkJFMzIxMB4XDTIyMTAxMTA5
MjgxN1oXDTIzMDkxNTAxMzAwM1owMzExMC8GA1UEAxMoMTQ4QjNDREJFOTE0RjU5
MTg2RjU5RTIyM0ExQ0Q2Mzk5QzQ3MEMwODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMDOgHjpZa9JILYE7lHpsaKHe8CDlyOycEk/SSt16/CPHi61DjZC
SP2VmZObzAXYKDoCnV5l8TRmy/W1DMmTXY/p95UzQpASr5OQNCV1hHLSdmGCPJq9
8nQ4nhTSSggq+CAWzFaq7qXADd0Eu+XNAfW0JPNPIZqhz79Z8pfvrmmj7CL4uQtH
gr6z17ZEROkG4YFHB6v1EBce3MQwGvGLJPqISUzQxGJGnqYeRbdxHNPPHtdSCYfm
N3Yc6vjeaNCZlfaeJ+cvC8nIp305Gq+G1AbL4NXGzGSA4Ti9aVobsnSyQvtDMpvD
dZMLdxsYaWQPEOISgRB6zjHikjgHQRtD5M8CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQUizzb6RT1kYb1niI6HNY5nEcMCDAfBgNVHSMEGDAWgBTHYaOp+uh/jwadaCRx
y+HJNfvjITAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTMzNDcveDJHanFmcm9mNDhHbldna2Njdmh5VFg3NHlFLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveDJHanFmcm9mNDhHbldna2Njdmh5
VFg3NHlFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEzMzQ3L0ZJczgyLWtVOVpHRzlaNGlPaHpXT1p4SERBZy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADS4JUwDQYJKoZIhvcNAQELBQADggEBAN9YNJDB66zjLnhUOQbgs/LU
q1StNUD2ILEfDfpo0itI91Hhbn8IScp9VzkIFCIuvqPVoCQw65q2DshcGkQqL2Lg
3na7e3h5thfzjxBr66stuSsPDXArC7fU25bfAf7Wcq+gW881tZW5MuF7QUJVud+3
vHxQQ0WXDH9AfHyMYGun5osID/pLQZBVB3ItNbe8GTg29yNDAXDaXmEM3UDFfNJ1
XPkymvzQFHIC+6G1BN6A36a0fyj7JT67Gy5bQ+agp+AhBKbjirxP/h5/i8uHSwRt
AWoIkCWIygotFim+/mxe/ljpenQvsH+VrPgu+jf/43dBPGwkAmGjP1U65GB7Wjc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org