Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/PiYkVDGhIKkS0qLfsv8azo9tSPU.roa
File:                     PiYkVDGhIKkS0qLfsv8azo9tSPU.roa (raw, json)
Hash identifier:          oFy8i+v9rrcehBaJkDc/85LSCLgOyfvqjiDF0hq1CwI=
Subject key identifier:   3E:26:24:54:31:A1:20:A9:12:D2:A2:DF:B2:FF:1A:CE:8F:6D:48:F5
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0140
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/PiYkVDGhIKkS0qLfsv8azo9tSPU.roa
Signing time:             Sun 01 Oct 2023 01:33:17 +0000
ROA not before:           Sun 01 Oct 2023 01:33:17 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        210.254.72.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320 (0x140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:33:17 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=3E26245431A120A912D2A2DFB2FF1ACE8F6D48F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:82:ef:19:dd:af:b8:9a:93:16:8c:a9:98:e3:
                    7f:ad:11:19:96:fd:c5:7d:76:c7:38:28:16:23:e5:
                    bd:06:d3:66:af:4c:f8:84:fa:20:04:ef:d9:56:61:
                    72:2f:91:a6:a1:28:45:c6:36:64:5a:dd:43:87:76:
                    6c:07:89:59:c3:f1:96:5e:3d:f9:11:1e:93:87:c5:
                    5d:8d:c0:c5:79:b3:f9:28:fb:c4:9b:62:5e:bb:da:
                    7f:33:d7:62:52:85:9d:65:0b:80:5f:1b:cd:09:5f:
                    a9:d2:ec:82:16:37:01:ae:a4:9a:a3:78:cd:02:e1:
                    5d:ae:77:91:00:a2:f0:7a:eb:c7:8b:33:fa:28:9f:
                    2c:d9:77:41:3d:39:b7:1b:09:c3:55:b1:19:6d:03:
                    82:48:33:fb:2b:63:d1:b0:80:52:a2:3a:a0:9d:e3:
                    43:5e:f7:c3:ae:80:96:b1:c4:2c:ee:0b:14:50:ce:
                    9d:0c:be:97:68:97:ec:18:e4:d3:96:00:e0:52:c1:
                    c4:94:51:37:d6:ed:00:ca:6d:22:36:15:e5:32:9f:
                    51:c1:1c:20:13:2e:4d:93:91:d7:ed:cf:34:1c:a3:
                    e3:8c:56:74:fc:fa:74:58:59:64:ae:0a:ed:ce:bf:
                    10:77:9f:19:0c:57:d7:05:ee:81:7c:bc:45:d3:7d:
                    08:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:26:24:54:31:A1:20:A9:12:D2:A2:DF:B2:FF:1A:CE:8F:6D:48:F5
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/PiYkVDGhIKkS0qLfsv8azo9tSPU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.254.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d4:74:4b:18:6e:e4:f8:84:92:50:50:78:78:63:62:56:cc:b4:
         ad:f5:25:73:14:cd:50:8e:db:3f:9c:fd:05:26:63:74:f5:48:
         1e:3e:aa:9a:b0:37:e1:a9:9b:8f:3f:86:54:7f:e8:56:32:6e:
         5c:62:31:d2:d5:9e:cd:9f:a1:0b:9e:4c:5a:78:fc:4b:84:17:
         83:89:fc:af:d7:66:08:c9:78:e7:d6:27:15:41:59:59:61:8f:
         d1:30:b6:bd:a9:48:7c:b6:71:71:23:1f:c6:be:e4:cd:b2:9b:
         17:81:9d:db:cd:b0:0e:0e:49:25:66:7e:d2:74:59:a0:de:4a:
         2c:7e:7a:96:04:6c:82:03:1b:7a:e1:a7:65:60:c1:c8:58:ef:
         6f:b9:a4:72:0e:53:4f:1e:49:08:0e:a1:85:b5:51:50:b6:31:
         97:68:86:2f:cb:33:1c:aa:55:c1:74:6e:8b:b6:f6:27:7a:82:
         4c:de:73:35:57:2a:34:13:7b:71:03:aa:59:e9:03:bd:f0:c5:
         d8:d3:62:f1:91:31:61:3a:10:89:e0:37:dc:36:45:03:a6:00:
         9e:4c:1c:ee:c5:d2:7d:2f:1f:64:be:bd:d4:59:7b:d8:d5:f3:
         56:42:f6:d2:9a:3e:57:66:16:df:2f:df:0c:6d:03:c7:16:0f:
         e5:26:e4:d4
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzc2
MUEzQTlGQUU4N0Y4RjA2OUQ2ODI0NzFDQkUxQzkzNUZCRTMyMTAeFw0yMzEwMDEw
MTMzMTdaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDNFMjYyNDU0MzFBMTIw
QTkxMkQyQTJERkIyRkYxQUNFOEY2RDQ4RjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOgu8Z3a+4mpMWjKmY43+tERmW/cV9dsc4KBYj5b0G02avTPiE
+iAE79lWYXIvkaahKEXGNmRa3UOHdmwHiVnD8ZZePfkRHpOHxV2NwMV5s/ko+8Sb
Yl672n8z12JShZ1lC4BfG80JX6nS7IIWNwGupJqjeM0C4V2ud5EAovB668eLM/oo
nyzZd0E9ObcbCcNVsRltA4JIM/srY9GwgFKiOqCd40Ne98OugJaxxCzuCxRQzp0M
vpdol+wY5NOWAOBSwcSUUTfW7QDKbSI2FeUyn1HBHCATLk2TkdftzzQco+OMVnT8
+nRYWWSuCu3OvxB3nxkMV9cF7oF8vEXTfQgJAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUPiYkVDGhIKkS0qLfsv8azo9tSPUwHwYDVR0jBBgwFoAUx2Gjqfrof48GnWgk
ccvhyTX74yEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMzQ3L3gyR2pxZnJvZjQ4R25XZ2tjY3ZoeVRYNzR5RS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3gyR2pxZnJvZjQ4R25XZ2tjY3Zo
eVRYNzR5RS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMzM0Ny9QaVlrVkRHaElLa1MwcUxmc3Y4YXpvOXRTUFUu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQB0v5IMA0GCSqGSIb3DQEBCwUAA4IBAQDUdEsYbuT4hJJQUHh4Y2JW
zLSt9SVzFM1Qjts/nP0FJmN09UgePqqasDfhqZuPP4ZUf+hWMm5cYjHS1Z7Nn6EL
nkxaePxLhBeDifyv12YIyXjn1icVQVlZYY/RMLa9qUh8tnFxIx/GvuTNspsXgZ3b
zbAODkklZn7SdFmg3kosfnqWBGyCAxt64adlYMHIWO9vuaRyDlNPHkkIDqGFtVFQ
tjGXaIYvyzMcqlXBdG6LtvYneoJM3nM1Vyo0E3txA6pZ6QO98MXY02LxkTFhOhCJ
4DfcNkUDpgCeTBzuxdJ9Lx9kvr3UWXvY1fNWQvbSmj5XZhbfL98MbQPHFg/lJuTU
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org