Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/HDjvHxINmfIK4flO-FoEw4EFKU4.roa
File:                     HDjvHxINmfIK4flO-FoEw4EFKU4.roa (raw, json)
Hash identifier:          MNKbt9szK9CRu1W7p5ljB+i7WOwcWhGLTGlaaV7xEbQ=
Subject key identifier:   1C:38:EF:1F:12:0D:99:F2:0A:E1:F9:4E:F8:5A:04:C3:81:05:29:4E
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       FF
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/HDjvHxINmfIK4flO-FoEw4EFKU4.roa
Signing time:             Fri 01 Sep 2023 01:33:16 +0000
ROA not before:           Fri 01 Sep 2023 01:33:16 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.167.128.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:33:16 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=1C38EF1F120D99F20AE1F94EF85A04C38105294E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4a:df:28:86:9c:dd:ee:bf:e6:88:68:88:13:
                    fa:41:8e:6f:7b:22:cd:96:7c:9f:6e:34:18:c0:86:
                    83:28:31:37:09:18:3b:b4:e9:73:08:04:2d:d2:8f:
                    7d:47:71:3e:8b:e4:c9:38:f7:18:39:f1:b5:12:13:
                    8c:ae:71:53:3a:8e:81:ea:2c:73:ba:4c:ad:33:b1:
                    8b:fe:cf:c2:94:47:73:2e:19:1c:bf:1b:f5:e5:31:
                    d3:75:fe:d4:97:e9:e2:ad:1b:a1:44:17:3d:e2:c8:
                    02:6a:c5:8b:ee:91:1b:60:fd:c3:03:44:50:46:8f:
                    06:23:72:60:3a:1a:e0:17:18:c7:9a:5d:03:fb:c5:
                    36:45:b7:25:a5:4e:6f:10:b4:13:a0:f8:25:95:f4:
                    9d:15:14:dc:ee:ba:a1:34:90:ee:d9:42:38:ed:4b:
                    e9:a6:da:ae:c9:52:7d:39:62:45:9e:e9:02:f7:cf:
                    8a:b2:7c:c5:b7:f8:20:47:06:62:44:e5:e2:12:ee:
                    52:5c:17:78:99:4d:8e:fe:33:e5:da:73:10:af:24:
                    cb:2a:44:d7:84:d2:4c:e2:0d:cd:e6:2f:e3:a6:13:
                    a9:f5:d6:21:3b:f6:4c:eb:25:d5:f1:32:f0:3a:9d:
                    83:a9:87:fd:af:51:7b:aa:44:77:c2:b6:21:4b:17:
                    64:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:38:EF:1F:12:0D:99:F2:0A:E1:F9:4E:F8:5A:04:C3:81:05:29:4E
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/HDjvHxINmfIK4flO-FoEw4EFKU4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.167.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         d2:da:9f:eb:cf:d3:9b:d0:13:8e:ab:0c:34:1a:9d:e5:14:ab:
         fc:73:0f:61:dd:b5:16:5b:6a:cf:cc:8f:be:16:fb:1a:51:25:
         25:98:8e:fb:a0:26:6c:63:c1:3e:ad:f9:f3:65:22:08:e2:e6:
         fb:47:14:0a:ce:86:7c:22:ca:56:a6:a3:6e:e6:40:e9:75:7e:
         54:22:74:f0:ff:c4:f9:6b:d1:c0:d0:1a:ed:1e:5f:32:c0:b8:
         a3:f3:ad:50:d4:39:84:77:2b:63:b0:33:19:57:26:7a:fd:14:
         f6:7b:42:1d:8e:6f:dd:d4:00:66:20:e4:3a:a1:0a:5f:d0:0c:
         76:d8:ff:62:99:66:de:47:43:76:5c:34:a7:3f:08:1f:cf:f6:
         36:8b:db:79:30:67:94:7a:ab:25:a1:2f:54:94:32:66:bd:ec:
         26:eb:e2:c0:6e:64:8f:fa:9f:d1:95:8e:09:9e:89:63:5f:a5:
         31:94:9f:45:bd:2a:c9:99:c8:1f:7b:d7:c0:fd:fb:ca:5e:e7:
         b9:22:61:84:a6:f8:aa:e5:eb:9c:03:6c:5f:91:06:0f:43:86:
         ff:5a:93:fd:c1:95:dd:ca:a1:77:97:71:63:47:7b:a2:9f:f1:
         ae:b6:f8:4c:9e:10:c1:7b:8f:29:49:3e:dc:ce:30:b4:b3:6e:
         e0:4b:d1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org