Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/UCyAHizsMsRMADv9p4Z9-64OTMs.roa
File:                     UCyAHizsMsRMADv9p4Z9-64OTMs.roa (raw, json)
Hash identifier:          OEJS3fB199JS2Lra1BRnORcb5zoGK54Jb68dJlriJb8=
Subject key identifier:   50:2C:80:1E:2C:EC:32:C4:4C:00:3B:FD:A7:86:7D:FB:AE:0E:4C:CB
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0168
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/UCyAHizsMsRMADv9p4Z9-64OTMs.roa
Signing time:             Sun 01 Oct 2023 01:35:50 +0000
ROA not before:           Sun 01 Oct 2023 01:35:50 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        211.1.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:35:50 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=502C801E2CEC32C44C003BFDA7867DFBAE0E4CCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f4:87:60:d2:e4:f0:6f:75:39:6f:6a:ea:fb:
                    da:f0:6c:2a:cc:0e:00:a6:be:3a:fb:0b:66:e7:30:
                    17:ab:3a:9e:69:e9:72:79:9c:8e:96:d2:be:df:47:
                    7f:6a:9f:82:85:9f:b6:33:a3:ae:98:a0:d8:dd:2e:
                    98:96:4f:a9:61:06:91:a6:24:43:82:35:14:34:71:
                    42:60:92:8c:2a:95:ab:6f:3f:83:e8:b1:29:c0:87:
                    16:a5:2c:f8:97:b6:b2:2e:51:5c:3a:dd:fe:0b:f9:
                    3a:45:10:40:b2:f7:91:4b:4a:a0:7f:25:39:a0:17:
                    cf:de:aa:6d:f5:23:c2:1a:cb:a4:1f:d6:9b:98:45:
                    45:f5:98:af:a7:ec:11:7b:88:b5:6b:1d:be:52:92:
                    1c:0c:bd:81:e8:0d:b9:5d:3f:68:44:0d:b2:44:bb:
                    c0:fa:98:9f:83:e2:08:2a:44:29:c2:66:f6:92:09:
                    f4:59:0f:1d:ef:4b:1d:30:be:04:64:d5:3e:04:b6:
                    ca:46:c4:fe:83:17:0f:2e:e2:6a:ea:c8:01:34:54:
                    3d:b3:33:ae:8c:39:29:a2:90:95:bb:3c:37:95:ef:
                    48:ef:62:b0:34:b6:b5:c3:15:e3:0e:ca:a9:56:e1:
                    70:da:16:e0:59:fa:ff:bd:0c:ae:c5:1e:12:4e:15:
                    13:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:2C:80:1E:2C:EC:32:C4:4C:00:3B:FD:A7:86:7D:FB:AE:0E:4C:CB
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/UCyAHizsMsRMADv9p4Z9-64OTMs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.1.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:58:ce:44:e3:42:b3:4d:1c:9b:4b:22:72:81:1a:e2:a6:12:
         03:66:32:32:ab:02:fa:5a:03:08:1a:32:24:d1:e7:7e:5c:86:
         2d:5d:f0:a2:b9:fe:af:d7:c7:e9:bd:aa:73:24:37:12:ca:c0:
         82:f2:33:28:6c:15:c0:51:f4:57:8e:55:93:03:66:8a:de:e0:
         5e:49:8d:ad:bc:6d:23:37:ae:8e:fc:fa:9f:3d:ce:52:9f:98:
         33:bc:f7:d2:54:15:d4:ff:5a:6c:fb:c5:75:a5:ed:3e:28:0e:
         42:3e:70:eb:c9:07:1e:8b:86:fc:61:7b:15:b3:0b:31:cf:af:
         d0:e4:31:73:68:56:02:34:ee:20:72:d5:08:77:c9:2a:01:3a:
         9e:ed:67:84:5b:4d:40:ea:48:20:2c:ec:5a:1e:05:44:f2:d1:
         69:b4:11:f2:06:b4:28:d8:98:94:a6:6d:b4:68:b8:46:f5:3f:
         8c:d7:3c:e1:0b:fa:86:03:5b:0b:2a:3c:12:93:69:bb:59:63:
         d0:71:6d:83:1b:a0:3f:8a:08:64:00:1a:51:ed:b2:0e:e7:c5:
         8d:d3:4b:c7:e5:b8:a0:44:8a:b1:d5:ed:3f:42:81:7a:3a:2f:
         56:0c:b5:95:3a:da:60:0e:f9:4d:2a:ee:c7:80:03:fa:7a:f6:
         83:98:df:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org