Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/U6fO6677JY5ffEKOO-C9RXyw9dY.roa
File:                     U6fO6677JY5ffEKOO-C9RXyw9dY.roa (raw, json)
Hash identifier:          t9kmRf0/v2a4JasKM8HbSb7FlHZ/n3JyPhOQaKTA9wQ=
Subject key identifier:   53:A7:CE:EB:AE:FB:25:8E:5F:7C:42:8E:3B:E0:BD:45:7C:B0:F5:D6
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       D1
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/U6fO6677JY5ffEKOO-C9RXyw9dY.roa
Signing time:             Fri 01 Sep 2023 01:30:52 +0000
ROA not before:           Fri 01 Sep 2023 01:30:52 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.199.0.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 209 (0xd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:30:52 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=53A7CEEBAEFB258E5F7C428E3BE0BD457CB0F5D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bc:c2:00:24:ab:00:09:d9:e6:4c:d4:21:3e:
                    c2:50:ae:fb:d2:a6:78:2f:81:08:fb:8a:f7:83:42:
                    e1:3f:49:68:32:5b:0c:10:dd:ad:22:69:a3:f2:a8:
                    de:4d:1c:f1:e9:73:43:37:c1:67:e7:32:d9:3f:c4:
                    5e:b1:c4:cf:d5:1b:e5:03:bf:38:be:31:d1:9a:e9:
                    0c:3c:37:2b:0b:d2:b7:5f:9d:3c:ce:1d:31:03:99:
                    06:56:7c:db:32:9c:87:68:6c:b4:91:6b:39:6c:94:
                    1e:a5:ed:04:03:50:d0:be:4f:f8:42:91:09:2c:8b:
                    cf:d4:64:80:25:fe:9d:d9:ad:20:5b:a0:4d:c4:c4:
                    d7:9e:05:18:af:06:94:92:40:b4:8d:89:c8:07:90:
                    de:e7:40:56:6b:36:4d:92:8c:7f:39:e1:20:8e:f3:
                    82:8b:d0:23:9d:f6:0f:73:6b:58:b6:1a:72:25:40:
                    ce:11:58:01:7d:38:98:bf:03:c9:8b:be:74:c9:19:
                    31:d4:f7:b5:f2:39:97:46:59:ad:f2:7c:a3:36:0f:
                    87:c0:38:05:27:23:49:b6:66:29:b7:e2:77:6d:0a:
                    3f:0b:21:4f:96:08:6f:10:a3:7c:de:41:9b:69:a5:
                    b5:fe:5c:09:d8:de:f0:e2:e4:ed:e8:0d:37:b9:be:
                    be:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A7:CE:EB:AE:FB:25:8E:5F:7C:42:8E:3B:E0:BD:45:7C:B0:F5:D6
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/U6fO6677JY5ffEKOO-C9RXyw9dY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.199.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         03:d2:d2:00:0f:1f:cc:7b:23:c4:8d:61:28:93:f7:80:5a:1d:
         27:37:82:ae:54:10:36:04:7f:ad:aa:bc:09:21:4a:4f:3f:f3:
         9a:69:9a:bf:1d:3c:f0:d0:eb:d6:9c:2a:24:53:6f:91:65:40:
         e6:5f:99:5d:7a:e8:7f:2b:1c:29:74:c5:2d:5d:75:e7:93:cd:
         02:d2:58:45:37:c3:19:65:95:12:30:1f:48:a8:85:aa:44:c3:
         64:96:2d:75:18:9f:ba:64:3e:d7:c1:44:24:99:df:35:58:6a:
         4d:b7:19:48:43:ac:21:a0:b8:99:75:ad:2e:df:f3:e6:78:b2:
         68:61:86:f7:4d:a8:11:a5:36:bf:ac:eb:1e:33:f5:89:29:af:
         df:5c:4a:e6:07:aa:9d:7f:b8:ff:3d:f4:7b:c0:c8:ba:0f:28:
         2e:47:02:af:a2:e6:38:6a:33:cf:b2:d2:e3:96:d4:7f:e2:3d:
         4f:5a:b6:c4:d6:30:e5:72:e2:8c:e8:59:83:20:6b:e8:e3:ac:
         a0:1f:01:6f:9b:db:fd:38:3e:33:6e:94:d7:63:10:e4:1e:a8:
         9e:28:86:dc:24:94:10:a4:b9:d4:a2:7b:b5:8b:95:df:d2:d6:
         7f:c5:00:1e:a1:99:18:f9:f2:30:d5:a3:c7:d2:b0:41:50:0a:
         fb:ef:6e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org