Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/Mh-Ks0Gsv483i551Q9p4FNvjwbM.roa
File:                     Mh-Ks0Gsv483i551Q9p4FNvjwbM.roa (raw, json)
Hash identifier:          A+BJB/i+DbnC1pFrawg0cX7eGEUCWxLY/pVqsSMsDQ8=
Subject key identifier:   32:1F:8A:B3:41:AC:BF:8F:37:8B:9E:75:43:DA:78:14:DB:E3:C1:B3
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       B4
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/Mh-Ks0Gsv483i551Q9p4FNvjwbM.roa
Signing time:             Tue 18 Oct 2022 02:42:19 +0000
ROA not before:           Tue 18 Oct 2022 02:42:19 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        211.125.160.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180 (0xb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:42:19 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=321F8AB341ACBF8F378B9E7543DA7814DBE3C1B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:42:1d:c3:98:49:4a:bc:b8:1c:c7:54:84:23:
                    02:e3:89:46:48:e5:7c:ec:84:89:3d:0e:bb:9b:1f:
                    eb:f7:84:4f:f0:74:a9:bc:d7:b3:9f:ee:04:59:55:
                    b2:03:f0:c2:ae:cb:d5:6f:ca:0c:e7:1e:b2:18:b5:
                    fa:2e:61:95:4e:22:0d:b2:0b:e0:89:e3:06:a8:37:
                    d0:fe:99:59:4e:cf:2e:05:c9:da:4e:ec:20:33:fb:
                    85:1f:e6:71:2e:e7:55:f0:0c:2d:be:0d:cc:ba:09:
                    20:91:00:79:85:0a:1d:73:5c:b1:91:d6:b4:38:3c:
                    b5:0e:63:ef:7a:8b:dc:5f:3f:e4:f7:c7:52:49:c0:
                    94:10:1c:e7:7f:19:94:25:6f:4a:85:32:d4:7a:99:
                    3b:c2:2a:2a:33:4c:1d:f5:0e:99:1f:9a:73:71:e5:
                    11:05:98:8f:e1:a7:ac:57:43:2f:99:fe:6c:c2:9c:
                    e9:4f:5d:58:54:5e:53:09:36:21:73:e6:18:65:aa:
                    7e:3f:6d:d5:5b:ef:0b:bd:dd:b3:ca:6d:d8:6a:75:
                    f3:4c:87:d0:c8:b7:6a:06:86:ed:de:62:2b:a5:8e:
                    87:e9:29:0d:21:ef:63:59:30:8c:c2:f3:56:c4:f0:
                    99:c7:a0:e2:ff:c4:4c:0d:5a:f4:b1:3d:6b:e6:c0:
                    40:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:1F:8A:B3:41:AC:BF:8F:37:8B:9E:75:43:DA:78:14:DB:E3:C1:B3
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/Mh-Ks0Gsv483i551Q9p4FNvjwbM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d4:97:a2:8b:37:4c:e0:1b:b4:39:a3:ed:aa:f9:1b:b8:41:fa:
         d4:f2:da:94:4f:c8:0c:50:be:38:45:32:2e:da:6e:12:03:56:
         dc:42:57:0a:8f:2a:86:f0:88:ff:09:7a:10:3c:37:25:52:aa:
         5e:f8:c5:d8:47:81:db:27:f8:a8:5c:f0:ff:54:8c:8a:f8:72:
         cc:96:77:ea:bb:55:65:cd:e1:64:ab:b5:d6:9f:e3:2e:e1:f6:
         9b:91:d6:5b:38:08:2c:cc:6a:0b:2c:0e:93:ca:02:3d:c2:9d:
         78:66:ae:18:94:4b:75:87:18:45:0a:6d:91:a8:12:1f:67:06:
         8a:8b:b1:13:ff:22:1d:74:4e:f0:2d:0c:78:54:70:bd:d6:b1:
         f2:5c:37:e1:2d:c8:ce:fc:42:4c:49:65:e3:4b:62:52:37:67:
         2f:01:7d:e0:6c:b7:5f:12:e8:b8:df:1c:76:20:1b:6a:60:53:
         3d:22:ab:f3:c9:f9:88:16:5b:82:2b:99:87:86:83:d0:c3:74:
         6b:25:66:f7:bd:4c:64:80:01:e3:6d:a0:23:9d:7c:5b:71:f2:
         77:52:4b:05:77:43:23:14:93:25:3b:ac:44:54:b7:e0:c0:8c:
         9a:05:32:ca:5b:e5:fd:b4:8c:ea:e0:f1:31:31:d7:53:ed:b3:
         5b:82:e3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org