Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/QQxy0u_ZltvkLVpibHgxQVoNj8c.roa
File:                     QQxy0u_ZltvkLVpibHgxQVoNj8c.roa (raw, json)
Hash identifier:          6EPRYDVxRcp+zlY3YVIa4OYnkU/0F4wmlfYAcXLGQUU=
Subject key identifier:   41:0C:72:D2:EF:D9:96:DB:E4:2D:5A:62:6C:78:31:41:5A:0D:8F:C7
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       F0
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/QQxy0u_ZltvkLVpibHgxQVoNj8c.roa
Signing time:             Fri 01 Sep 2023 01:33:10 +0000
ROA not before:           Fri 01 Sep 2023 01:33:10 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.143.62.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:33:10 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=410C72D2EFD996DBE42D5A626C7831415A0D8FC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:17:ef:2b:07:38:dd:59:30:34:40:0e:a8:72:
                    52:a1:f7:37:1b:b5:bc:f5:58:99:9b:1d:7b:27:91:
                    15:fc:59:65:59:87:f5:7f:84:29:11:44:7f:0d:4f:
                    78:0d:20:e9:37:c4:4f:4f:f9:68:2c:07:b4:5b:93:
                    d6:8d:45:7f:55:66:ad:80:e5:57:7f:fd:95:1d:d1:
                    d5:9c:a3:1f:b4:30:d5:9c:9a:b0:8d:78:7f:64:fa:
                    46:8a:ea:58:96:48:47:71:3a:38:06:b8:a3:34:9e:
                    40:b4:ec:55:25:bd:b1:0e:f1:e9:ee:e6:f3:73:77:
                    e4:95:6d:d7:a8:76:34:b3:da:26:a7:c0:f7:a9:d7:
                    6e:e5:63:df:ce:3b:51:6c:39:18:0f:da:0e:5d:62:
                    d2:98:44:59:be:4c:9b:4a:bd:e9:a3:af:f7:24:26:
                    5f:36:21:04:30:73:95:0d:a0:27:aa:2d:0c:6b:ec:
                    88:79:c0:ab:61:51:65:4c:34:c7:58:1e:2c:1b:5a:
                    9b:53:be:d5:5b:09:f5:56:99:31:c4:69:df:d7:0d:
                    05:ef:9b:28:f0:9d:d7:86:8c:fb:db:a8:16:a6:23:
                    e3:76:94:62:2e:db:b9:98:49:2c:5a:a4:0b:74:e3:
                    2f:3d:e5:1f:3c:c9:57:7a:a6:35:e8:bd:ee:9c:c9:
                    23:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:0C:72:D2:EF:D9:96:DB:E4:2D:5A:62:6C:78:31:41:5A:0D:8F:C7
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/QQxy0u_ZltvkLVpibHgxQVoNj8c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.143.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:6f:52:68:81:b5:0e:c2:2b:4a:fe:7c:7e:c8:09:d8:b8:db:
         76:00:ac:d5:fe:4b:05:c8:9e:63:3d:55:8f:37:ea:d2:43:cb:
         be:ac:41:04:09:34:e1:65:ba:95:44:82:11:b2:f9:ab:ab:36:
         f1:16:f5:8a:82:ff:14:06:6f:5e:80:6a:1a:7e:1d:b8:2b:90:
         5e:cc:ae:81:c2:e2:2a:9d:34:f5:93:9a:af:58:82:97:8f:17:
         60:8c:74:be:06:da:79:a8:13:ff:37:8f:ae:c5:8a:3e:00:27:
         55:88:21:bf:b1:e7:7f:06:2f:2a:78:65:f5:de:8f:1f:d5:7a:
         f0:6b:50:84:a8:90:2e:a3:57:e2:c5:ad:a7:35:63:71:6b:a3:
         28:e4:59:aa:7b:be:e5:32:2f:9a:d5:80:3a:be:9a:99:76:6b:
         9e:f1:af:e9:2c:28:42:d8:d6:c3:6a:35:31:d7:be:90:4a:ee:
         55:49:1c:4c:07:f9:b1:d0:fa:23:c0:2d:40:db:d6:b3:e6:53:
         cd:9d:5f:21:e1:74:a4:bd:c4:49:98:e5:a3:32:82:c7:d6:66:
         0e:f3:b9:3d:5f:4d:39:c7:c7:6e:7e:89:1a:e4:cb:de:c5:64:
         22:dc:37:64:50:6f:36:d9:e6:9f:1f:f6:a0:29:e1:14:0a:03:
         70:95:66:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org