Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/N5PpsMHgfZiFhDsVV3bguzD1tgA.roa
File:                     N5PpsMHgfZiFhDsVV3bguzD1tgA.roa (raw, json)
Hash identifier:          Pq8HMXS4okm/++33rxujDjNMcZqHKhh0PqbWDEARiQ0=
Subject key identifier:   37:93:E9:B0:C1:E0:7D:98:85:84:3B:15:57:76:E0:BB:30:F5:B6:00
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0130
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/N5PpsMHgfZiFhDsVV3bguzD1tgA.roa
Signing time:             Sun 01 Oct 2023 01:30:47 +0000
ROA not before:           Sun 01 Oct 2023 01:30:47 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        210.253.137.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 304 (0x130)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:30:47 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=3793E9B0C1E07D9885843B155776E0BB30F5B600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5c:7d:61:4a:7e:5f:48:bd:67:58:4e:e3:ef:
                    1a:27:c2:28:77:cc:3c:77:22:22:98:5d:3d:56:40:
                    63:d5:d8:8c:32:c1:b2:dc:f1:fb:4d:8e:7c:4f:25:
                    45:bd:86:a1:2a:67:82:b6:b0:ca:d9:e8:41:4b:0d:
                    b9:6e:2e:5d:1a:8f:b5:2d:3d:d5:3b:a9:37:f4:6a:
                    ce:25:be:2e:66:13:e3:5c:44:2a:f0:a1:3d:42:58:
                    da:a2:cd:62:f6:e1:40:50:78:da:19:74:65:3f:79:
                    b5:cf:fd:60:84:a0:7a:e1:05:8a:7b:5c:93:45:bb:
                    b7:ba:40:8b:65:75:9b:04:fe:68:92:0e:50:71:42:
                    3a:ca:be:f0:8c:5e:71:90:94:7c:ea:90:89:ea:44:
                    7c:3d:6f:e4:a7:3f:a8:aa:ea:e8:d4:dc:39:9b:07:
                    b8:67:27:ab:00:8b:ad:af:f1:e2:00:d6:a7:88:1f:
                    26:9c:5e:26:e5:a7:10:d0:03:03:cb:8d:a0:0c:a0:
                    2c:2e:e8:e3:3d:fd:12:55:4d:c7:ea:b2:25:6c:db:
                    4c:3c:0c:5a:5e:dc:50:90:ef:91:d3:7d:3e:09:ad:
                    51:8d:bc:db:c1:c0:2f:08:79:52:fd:fd:c0:8d:f2:
                    2c:4b:2d:e5:dd:90:a1:37:5d:1b:f6:92:ae:5b:19:
                    e6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:93:E9:B0:C1:E0:7D:98:85:84:3B:15:57:76:E0:BB:30:F5:B6:00
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/N5PpsMHgfZiFhDsVV3bguzD1tgA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.253.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:f5:c9:54:e9:53:fd:29:c9:83:4b:5a:2b:da:7e:55:dc:27:
         05:48:1b:e9:84:bf:b2:ac:4f:72:82:c0:ba:2f:fa:5f:1c:4f:
         45:94:b1:81:15:d6:ff:db:f7:b0:c3:79:3c:65:bf:0b:c3:1e:
         1c:6d:84:f6:c0:c1:e2:99:b3:05:ca:40:b5:f1:a4:69:0f:0c:
         85:3e:4f:45:00:a5:03:d8:f7:84:eb:63:4c:b2:6f:f5:19:12:
         dc:41:67:55:8b:ed:89:04:dc:e6:65:16:c7:7e:07:51:39:b5:
         57:11:c8:02:b3:34:5b:a6:e3:00:53:1f:70:9d:51:9d:c3:c9:
         64:ce:32:f7:6b:c7:f4:56:e1:88:42:40:e1:71:a8:3e:d7:ef:
         63:2a:49:4b:44:1a:85:e9:02:8b:08:21:ff:1d:4d:5f:b8:09:
         ae:2a:a0:56:18:a4:72:b3:1c:53:6e:c7:c7:a7:34:11:36:12:
         10:da:a5:4f:e2:92:f5:1f:63:c8:77:ce:2f:ea:27:2c:25:c6:
         f2:87:49:16:91:d0:37:4d:48:b6:2c:50:79:f2:b3:16:eb:0a:
         7b:3a:b8:33:1d:c7:f0:9c:ba:22:6f:54:d6:1a:01:3a:b5:77:
         c1:ff:ce:07:49:8c:b7:83:d8:af:fb:86:53:9c:9a:b7:db:91:
         8a:17:2b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org