Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/KMf23t0TJm4vboAZ4Sl7E9m0MKI.roa
File:                     KMf23t0TJm4vboAZ4Sl7E9m0MKI.roa (raw, json)
Hash identifier:          O2R5AWrJ6vz3emacNv2tVmvhUzixz06OTtL6PKjdG/I=
Subject key identifier:   28:C7:F6:DE:DD:13:26:6E:2F:6E:80:19:E1:29:7B:13:D9:B4:30:A2
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       99
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/KMf23t0TJm4vboAZ4Sl7E9m0MKI.roa
Signing time:             Tue 18 Oct 2022 02:30:22 +0000
ROA not before:           Tue 18 Oct 2022 02:30:22 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        211.125.160.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:30:22 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=28C7F6DEDD13266E2F6E8019E1297B13D9B430A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:42:09:76:1b:a1:15:74:35:31:3c:ae:85:32:
                    ff:03:da:d3:70:d8:c2:59:e1:91:fb:62:7f:d0:2a:
                    2e:91:4b:fb:2a:61:ef:87:18:30:29:6b:9f:30:0d:
                    ec:70:2a:43:f6:7e:5f:7f:19:e1:92:3c:d3:4c:f4:
                    24:df:84:c5:16:8c:cb:87:79:da:5b:e7:80:4b:5e:
                    64:02:85:18:a1:b3:4c:f5:68:43:96:b7:ba:90:3b:
                    72:0b:b8:f7:aa:82:8d:81:54:27:0c:a4:01:a2:0b:
                    b2:89:db:90:56:c8:f0:c3:f6:13:54:ef:9e:6b:c6:
                    a1:8c:61:e3:db:49:3d:af:9d:f9:19:d1:00:5c:dd:
                    e6:00:46:7c:5e:d5:f7:6a:8c:c1:cf:17:32:28:a7:
                    ce:83:e9:28:dd:4a:cf:44:18:51:1e:ed:a6:79:82:
                    c4:0a:18:51:48:58:e2:d2:97:66:c1:9f:dd:ac:42:
                    86:8c:82:51:7a:35:66:41:db:98:bd:bb:6a:57:65:
                    28:26:a7:ac:18:0b:8d:c2:91:d2:83:91:ab:0b:53:
                    89:02:49:d5:ce:15:67:32:77:66:3b:47:0e:62:37:
                    1b:69:f1:4c:e1:db:54:f0:5d:2b:4c:91:1e:ce:26:
                    a9:98:b8:38:83:09:0e:b6:ce:0a:85:c1:b7:d3:ef:
                    53:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C7:F6:DE:DD:13:26:6E:2F:6E:80:19:E1:29:7B:13:D9:B4:30:A2
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/KMf23t0TJm4vboAZ4Sl7E9m0MKI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:03:e8:e6:85:e3:95:8f:aa:74:91:f3:a8:c6:50:98:01:95:
         59:2b:bd:46:c3:5f:2b:c4:fd:7e:25:63:69:f4:08:1d:62:4a:
         c6:ba:4d:b5:ea:3e:35:2b:22:24:0e:f8:2d:77:6a:4f:e1:19:
         56:af:fb:34:ad:c1:76:90:3e:b6:31:9a:ee:cb:99:c4:27:f4:
         6a:33:a7:2d:38:73:fa:ed:e1:4b:61:14:07:c5:2a:e4:d8:81:
         3b:d0:76:2a:e0:78:d7:68:7d:31:5c:ad:2a:f9:28:36:8d:85:
         10:13:9f:54:6f:94:ef:1c:74:37:43:aa:f2:8c:2f:3b:1d:68:
         01:c4:5d:63:b6:35:1d:e6:1b:21:f3:a1:32:1a:18:93:37:8a:
         89:9f:53:ea:85:a4:0e:aa:79:14:90:2b:6f:fb:ae:00:4e:ac:
         d3:bf:50:3e:82:a3:ce:9a:e9:83:5d:65:95:1c:12:98:f2:ef:
         33:76:3a:11:8c:fe:98:ad:a4:45:6f:72:66:e5:b8:cc:f5:47:
         9d:99:33:e7:75:00:b9:55:96:80:f4:39:1b:60:ed:77:8a:a4:
         11:f2:b7:a6:df:8c:1d:80:f7:2c:0b:d8:fb:45:3b:4a:19:0c:
         87:74:f3:04:3c:63:d9:84:cd:66:1d:90:a4:7c:54:0c:51:b3:
         e8:44:53:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org