Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/Qou0wjE1RI-boo2-Y_1ZldMNA7c.roa
File:                     Qou0wjE1RI-boo2-Y_1ZldMNA7c.roa (raw, json)
Hash identifier:          XV8P+NLs+ATzEwqCi8IdWqt6x95ok/0uAwX9fkDJkeE=
Subject key identifier:   42:8B:B4:C2:31:35:44:8F:9B:A2:8D:BE:63:FD:59:95:D3:0D:03:B7
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       29
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/Qou0wjE1RI-boo2-Y_1ZldMNA7c.roa
Signing time:             Tue 11 Oct 2022 09:32:06 +0000
ROA not before:           Tue 11 Oct 2022 09:32:06 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        210.141.232.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 11 09:32:06 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=428BB4C23135448F9BA28DBE63FD5995D30D03B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:6b:70:7e:9d:0c:ee:67:46:8b:87:0f:1b:cd:
                    ee:a2:ca:17:d9:2b:d8:43:ca:ff:cd:7b:39:e1:34:
                    90:00:f1:09:6d:e9:7d:ff:2a:36:c3:fe:34:5b:f0:
                    76:e9:f0:3d:74:62:39:1e:ac:ab:b0:47:18:8e:1d:
                    23:59:7e:94:ef:e1:20:60:78:5b:f5:8d:98:d7:42:
                    a7:28:f2:e3:14:7d:ff:d1:d4:25:7c:9c:c9:f2:d2:
                    53:2b:ea:27:5a:bc:54:65:44:c1:fb:c5:dc:4e:39:
                    54:2e:fd:1a:aa:1c:fa:6c:9f:c3:f9:a5:4b:59:b1:
                    41:8a:ab:1b:14:05:b1:3a:42:06:0f:50:42:3e:a3:
                    9f:8e:18:b4:4c:45:f4:2f:28:fd:40:b4:dd:cf:68:
                    90:c2:5b:90:8c:a0:7c:bc:e5:a0:e9:f3:36:39:f8:
                    a2:c8:11:2d:26:33:7f:ba:8b:02:77:b2:fe:f4:29:
                    80:f8:ee:59:f3:53:dd:27:6b:55:b1:00:4f:43:f9:
                    8e:88:e5:f9:8e:bf:9e:f8:80:f6:76:64:47:7b:95:
                    54:1d:61:90:b7:3f:29:bd:ed:eb:06:7e:a0:2e:7c:
                    ea:71:72:3f:52:d3:ef:6b:99:96:20:76:c2:76:10:
                    e2:81:db:f7:40:fc:6a:a4:6e:bc:09:0c:f7:8d:2f:
                    e3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:8B:B4:C2:31:35:44:8F:9B:A2:8D:BE:63:FD:59:95:D3:0D:03:B7
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/Qou0wjE1RI-boo2-Y_1ZldMNA7c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.141.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dd:6c:17:bd:18:52:67:f6:75:ac:f0:4d:ea:0a:bf:3d:dd:0a:
         79:c4:07:13:41:f9:2e:ec:cb:ce:e6:b1:07:11:14:16:2b:b1:
         00:31:a4:ae:37:9c:07:0e:b6:10:99:22:ab:94:0b:b4:16:4e:
         ae:7f:0e:51:da:15:df:a3:9c:40:a4:f6:72:5a:32:ed:4d:c9:
         c6:82:9d:cc:30:54:5f:3f:fa:b4:fb:00:8d:a2:1e:5e:b1:94:
         0d:26:77:48:cb:eb:13:4f:d6:bb:7c:0b:3a:1c:8b:b3:23:1c:
         81:f4:2f:b0:6d:fc:93:65:cd:48:94:bb:86:7f:16:d6:ae:ab:
         3a:0f:2c:f2:da:91:0f:ea:df:d0:47:1b:c0:b2:ef:88:1b:9c:
         5e:04:85:86:74:11:9a:c1:79:12:26:26:57:3b:7c:e4:d1:fc:
         be:39:1c:0e:bf:7f:99:e4:9d:1a:55:af:c0:30:0d:6a:cc:39:
         01:59:9d:72:f3:63:bb:58:d4:a1:2b:21:ac:2d:0f:19:41:2c:
         c8:b1:95:78:b6:ca:e0:04:52:da:46:bf:c0:5c:d4:e5:ce:6b:
         12:32:07:05:64:83:54:4d:11:c9:02:35:64:e9:ae:81:f5:51:
         ab:7f:29:86:d2:30:27:42:90:6f:5e:10:0a:08:1e:c7:a9:a6:
         d0:5d:25:a4
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBKTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNzYx
QTNBOUZBRTg3RjhGMDY5RDY4MjQ3MUNCRTFDOTM1RkJFMzIxMB4XDTIyMTAxMTA5
MzIwNloXDTIzMDkxNTAxMzAwM1owMzExMC8GA1UEAxMoNDI4QkI0QzIzMTM1NDQ4
RjlCQTI4REJFNjNGRDU5OTVEMzBEMDNCNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPJrcH6dDO5nRouHDxvN7qLKF9kr2EPK/817OeE0kADxCW3pff8q
NsP+NFvwdunwPXRiOR6sq7BHGI4dI1l+lO/hIGB4W/WNmNdCpyjy4xR9/9HUJXyc
yfLSUyvqJ1q8VGVEwfvF3E45VC79Gqoc+myfw/mlS1mxQYqrGxQFsTpCBg9QQj6j
n44YtExF9C8o/UC03c9okMJbkIygfLzloOnzNjn4osgRLSYzf7qLAney/vQpgPju
WfNT3SdrVbEAT0P5jojl+Y6/nviA9nZkR3uVVB1hkLc/Kb3t6wZ+oC586nFyP1LT
72uZliB2wnYQ4oHb90D8aqRuvAkM940v468CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBRCi7TCMTVEj5uijb5j/VmV0w0DtzAfBgNVHSMEGDAWgBTHYaOp+uh/jwadaCRx
y+HJNfvjITAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTMzNDcveDJHanFmcm9mNDhHbldna2Njdmh5VFg3NHlFLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveDJHanFmcm9mNDhHbldna2Njdmh5
VFg3NHlFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEzMzQ3L1FvdTB3akUxUkktYm9vMi1ZXzFabGRNTkE3Yy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADSjegwDQYJKoZIhvcNAQELBQADggEBAN1sF70YUmf2dazwTeoKvz3d
CnnEBxNB+S7sy87msQcRFBYrsQAxpK43nAcOthCZIquUC7QWTq5/DlHaFd+jnECk
9nJaMu1NycaCncwwVF8/+rT7AI2iHl6xlA0md0jL6xNP1rt8Czoci7MjHIH0L7Bt
/JNlzUiUu4Z/FtauqzoPLPLakQ/q39BHG8Cy74gbnF4EhYZ0EZrBeRImJlc7fOTR
/L45HA6/f5nknRpVr8AwDWrMOQFZnXLzY7tY1KErIawtDxlBLMixlXi2yuAEUtpG
v8Bc1OXOaxIyBwVkg1RNEckCNWTproH1Uat/KYbSMCdCkG9eEAoIHsepptBdJaQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org