Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/WPtTq6Qkm8atV099zwuuqpmDdcc.roa
File:                     WPtTq6Qkm8atV099zwuuqpmDdcc.roa (raw, json)
Hash identifier:          CXo7ESiw0DgYPJwoALcdQqi4kGUoIl2zkRAnMqZKsZ8=
Subject key identifier:   58:FB:53:AB:A4:24:9B:C6:AD:57:4F:7D:CF:0B:AE:AA:99:83:75:C7
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       10
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/WPtTq6Qkm8atV099zwuuqpmDdcc.roa
Signing time:             Tue 11 Oct 2022 09:22:21 +0000
ROA not before:           Tue 11 Oct 2022 09:22:21 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        124.109.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 11 09:22:21 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=58FB53ABA4249BC6AD574F7DCF0BAEAA998375C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c4:fa:fb:eb:7f:5f:91:9b:2d:21:00:5a:df:
                    d5:a3:b3:ff:00:8b:ca:59:71:78:df:82:ad:4e:29:
                    d7:d8:f4:90:00:9b:48:9b:af:64:6f:91:d3:03:68:
                    6c:63:10:ae:d9:33:2c:aa:78:62:db:e3:53:17:95:
                    2a:6e:b7:a2:72:5e:48:47:98:a9:91:b2:4b:79:5c:
                    f0:2f:00:9d:3a:51:e6:ac:28:52:8c:03:80:89:5a:
                    09:37:19:6b:9d:75:e5:2c:7c:e9:86:c8:6e:b0:86:
                    06:5c:db:8f:08:66:f7:8f:a7:47:ca:6c:c6:d0:cb:
                    30:95:e8:0d:c8:75:8e:11:a2:5f:49:7c:f5:63:71:
                    f0:00:9d:f8:4e:e5:7d:72:f8:d0:da:07:1b:ac:bf:
                    1c:fb:2e:70:13:6d:f3:af:b4:ae:e8:11:8d:11:cb:
                    52:98:f7:60:66:f1:ea:da:92:fa:69:5b:67:56:55:
                    e8:e5:4e:14:db:0e:8d:7f:c7:8d:4b:80:aa:64:13:
                    71:66:4e:c2:8f:5b:1b:6e:3d:c2:6a:c8:d7:05:19:
                    9a:a4:f3:3d:dd:56:ad:91:ff:13:cf:37:9f:a4:3e:
                    78:55:42:7d:94:3c:67:95:92:fd:1b:36:5c:52:21:
                    47:2f:c3:a8:b2:e1:b3:aa:73:e8:2b:cd:32:cb:42:
                    ef:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:FB:53:AB:A4:24:9B:C6:AD:57:4F:7D:CF:0B:AE:AA:99:83:75:C7
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/WPtTq6Qkm8atV099zwuuqpmDdcc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.109.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:25:0b:cf:82:09:80:f2:ef:79:39:9a:b0:01:07:9c:41:e4:
         2e:65:82:60:8b:cf:53:af:76:21:49:d1:b5:e6:6f:6d:11:f5:
         93:f5:e7:85:63:93:60:20:fc:07:9c:3c:47:84:51:90:16:4f:
         5c:ab:8d:f2:c3:71:d4:b0:3c:37:9f:38:18:89:5b:f1:75:b9:
         67:26:a2:2a:da:24:d3:44:8a:36:63:b9:1a:34:32:5b:e2:53:
         d8:ea:94:90:f9:8f:2c:be:96:1f:d3:57:40:f9:d6:03:9b:b1:
         49:da:52:30:c9:6a:cf:ed:f3:4f:9d:eb:5d:80:2e:78:00:1f:
         58:42:25:54:6a:82:05:16:a9:33:a2:ca:a3:a2:d5:11:d4:50:
         8d:45:b6:43:e6:1d:a5:87:73:5c:a1:16:92:a3:be:a7:1c:b0:
         38:8b:ba:36:91:bc:b6:c7:9d:43:65:70:16:9d:6a:1c:5f:8d:
         6b:be:c6:d3:3e:d5:1c:c8:74:57:04:6c:05:c3:78:f9:51:cc:
         0e:49:1e:c2:7c:59:10:94:dd:e9:df:57:65:9c:e5:bf:12:8d:
         bc:cd:1b:50:95:cc:9a:be:7d:53:ef:df:43:3c:10:ef:49:62:
         3b:2a:55:58:b2:a0:16:90:3f:79:38:19:d3:d5:2d:19:6b:1f:
         42:af:17:76
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org