Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/SURek4mMvfL3UQ3qr1xjnEF4aWk.roa
File:                     SURek4mMvfL3UQ3qr1xjnEF4aWk.roa (raw, json)
Hash identifier:          7iLTIYKi8fwVfkpR9rJ58tCXMMVGCvz432IF8PLkd2s=
Subject key identifier:   49:44:5E:93:89:8C:BD:F2:F7:51:0D:EA:AF:5C:63:9C:41:78:69:69
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       CA
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/SURek4mMvfL3UQ3qr1xjnEF4aWk.roa
Signing time:             Fri 01 Sep 2023 01:30:49 +0000
ROA not before:           Fri 01 Sep 2023 01:30:49 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.191.0.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:30:49 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=49445E93898CBDF2F7510DEAAF5C639C41786969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5a:14:15:3e:79:93:1a:6d:8b:f4:af:e8:67:
                    07:55:10:42:60:2f:23:12:dd:ac:52:5a:e2:d9:be:
                    f3:5e:ea:cc:12:50:0c:e3:40:b5:96:aa:ee:00:dc:
                    8b:95:3f:e2:68:51:cc:c0:4e:e5:c7:83:50:2d:2b:
                    17:a0:ea:4f:1b:02:29:d8:9c:3e:02:80:f5:77:44:
                    f8:4e:27:81:2b:3e:78:c1:cf:15:e3:47:9b:60:32:
                    91:1d:5c:9b:9a:c7:8e:fa:fe:1c:90:2f:ba:f8:c3:
                    92:a6:00:89:d8:6f:00:e6:96:af:ca:8a:2f:dd:50:
                    26:e2:fc:c5:d9:c6:61:2e:55:b0:96:ed:c6:bf:79:
                    6b:0a:d8:94:ba:56:20:ef:68:54:72:80:84:a6:ed:
                    e3:fb:31:a6:cb:b3:20:65:d3:92:c2:2b:bf:c5:0c:
                    04:89:91:33:33:cb:cc:6d:34:9e:21:f0:61:ae:f5:
                    5e:6d:78:4a:d1:67:33:94:5e:b9:c0:43:5e:b7:1a:
                    62:80:3c:77:93:ff:37:53:12:c5:5f:7d:4f:3f:35:
                    79:45:e3:a7:bc:38:ec:75:20:89:20:ce:bb:98:20:
                    88:24:60:39:3a:88:be:0d:d0:42:14:55:ad:7b:f9:
                    4d:36:82:1e:09:5e:2a:9b:85:a5:99:f6:71:d9:f2:
                    b2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:44:5E:93:89:8C:BD:F2:F7:51:0D:EA:AF:5C:63:9C:41:78:69:69
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/SURek4mMvfL3UQ3qr1xjnEF4aWk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.191.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3c:f7:33:b1:35:42:38:aa:f7:7f:72:38:ea:17:a1:ce:28:43:
         26:a4:35:9e:5b:9d:d9:dd:68:75:58:29:ae:3f:af:59:7a:24:
         29:13:4a:9e:c0:27:ec:17:e8:6e:d5:85:ea:8b:bc:a5:f1:df:
         6a:44:63:ea:38:ec:bf:df:53:cb:bf:05:cf:bd:59:27:ba:91:
         0a:22:f6:82:8c:3c:f1:46:26:5d:9c:c8:6f:3a:f5:cc:2e:0b:
         f6:19:6e:4b:67:17:1e:5c:be:9a:3b:04:3c:73:82:36:a0:ba:
         40:a8:49:4f:0d:b9:c5:ce:90:6f:bd:ec:db:41:a8:a5:ae:67:
         30:5f:ed:d7:7c:4d:95:20:77:90:88:0b:84:a2:99:0f:01:31:
         30:8e:98:28:2e:05:53:6a:4d:89:4b:11:63:bd:f6:6f:cf:52:
         bd:26:a0:21:42:d3:63:e1:50:f0:ea:61:02:0e:9e:4f:2e:eb:
         82:29:1b:ee:c6:eb:d4:e7:b7:c0:e9:a6:26:65:40:c9:d0:67:
         b4:31:af:0b:b1:25:65:63:36:ba:09:ac:d0:f9:1f:3a:6b:c6:
         ce:89:16:cb:60:50:98:44:05:bf:99:56:37:c1:f3:1c:a4:a2:
         bf:4f:05:83:f7:41:4d:4f:14:3e:42:72:c8:4b:36:b7:2b:e2:
         2d:8d:f9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org