Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/HG_bC9_tM0Y0LI44jHf0waOGMaI.roa
File:                     HG_bC9_tM0Y0LI44jHf0waOGMaI.roa (raw, json)
Hash identifier:          zZC7EhDVmXlfqo+HNoq9kgAoXYYtfdTHSgdCyJM32rQ=
Subject key identifier:   1C:6F:DB:0B:DF:ED:33:46:34:2C:8E:38:8C:77:F4:C1:A3:86:31:A2
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       7A
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/HG_bC9_tM0Y0LI44jHf0waOGMaI.roa
Signing time:             Tue 18 Oct 2022 02:20:19 +0000
ROA not before:           Tue 18 Oct 2022 02:20:19 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        211.10.134.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:20:19 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=1C6FDB0BDFED3346342C8E388C77F4C1A38631A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:75:cc:5a:3a:37:99:b9:2d:e1:0b:25:5b:68:
                    2a:d9:9e:c5:b9:24:37:54:62:8c:6b:55:4c:1e:11:
                    fb:19:a6:43:f1:66:ce:bc:5a:fd:4a:6e:72:95:ec:
                    37:f9:74:ff:a2:d6:06:30:11:33:c6:9d:ed:ad:a0:
                    38:fd:9b:24:e6:00:fa:70:5a:4d:6c:a8:a9:ef:2d:
                    61:cd:f3:83:a7:52:08:10:17:a0:68:c7:f7:ed:c2:
                    2f:7b:06:45:f0:0e:08:32:df:d9:46:32:74:d1:47:
                    3a:4e:f1:64:c5:a6:80:dc:36:be:95:c1:9d:22:a8:
                    07:56:82:9d:e7:cc:ec:ea:09:f8:36:e7:7e:9c:3a:
                    97:ea:26:83:a3:05:8c:85:86:f5:2c:5d:1b:47:0e:
                    1f:c0:f0:d5:49:ee:87:7c:81:55:0e:18:1b:43:94:
                    5e:9f:45:64:17:fa:98:06:20:81:6b:5d:86:c3:8d:
                    09:4b:d6:6a:ea:9f:36:11:44:b4:9a:3f:6d:02:8d:
                    28:72:78:f6:fb:02:80:61:b3:ec:01:08:94:80:8d:
                    a5:38:40:a3:e5:f2:b7:31:39:17:85:28:c5:96:8c:
                    de:73:d5:79:1e:3f:82:92:6e:29:c4:aa:18:b8:86:
                    55:5d:df:88:0e:c2:71:ae:af:3f:12:85:84:a1:b9:
                    d2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:6F:DB:0B:DF:ED:33:46:34:2C:8E:38:8C:77:F4:C1:A3:86:31:A2
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/HG_bC9_tM0Y0LI44jHf0waOGMaI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:89:b2:a9:a1:73:e5:e8:4c:06:d4:88:39:fc:47:3d:33:c1:
         92:a6:44:98:bb:c7:16:ae:c6:75:11:4a:2e:8b:45:a4:ec:33:
         34:57:c8:af:75:93:48:7f:a6:12:d8:eb:b4:bf:90:70:a9:43:
         78:63:91:7c:64:ca:9a:1b:ec:ad:d8:be:be:7e:69:4f:fa:3a:
         10:1b:d9:f2:e2:69:a5:d0:ad:4f:b3:b5:6e:b9:a4:dd:0d:b9:
         f2:03:b0:4b:14:61:0e:97:fe:e0:e8:b1:96:32:38:e4:4f:4e:
         fe:07:5a:fe:a3:8c:10:e8:05:66:f3:74:dc:8a:b5:9e:f1:68:
         b7:ff:06:07:49:5c:ad:cf:00:67:85:88:f2:d6:98:28:bc:0c:
         6d:0b:3b:5b:d3:9d:be:66:b6:66:43:d9:4d:06:b7:da:c3:7b:
         22:8a:ba:45:50:cb:0f:6a:15:8f:40:f7:a5:be:47:09:34:69:
         b1:5b:6d:2a:8f:9c:2a:04:da:1c:9f:0f:6d:f3:7c:26:89:b2:
         44:63:01:50:31:57:d7:21:a6:3f:7a:be:ec:7e:f0:b8:1b:2d:
         8e:6d:af:02:f5:c9:0e:bc:35:36:68:31:2d:62:88:ed:c3:10:
         6e:fc:8a:f3:f5:51:dc:20:bc:41:fb:fc:16:2a:0b:55:8f:e1:
         42:6d:54:0a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org