Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/XSiUVG6l0Wmw4HwDsva9jNMk9Pg.roa
File:                     XSiUVG6l0Wmw4HwDsva9jNMk9Pg.roa (raw, json)
Hash identifier:          U+jzQgOktbmi1I+emoWTT6WZOkvEvjNQi5iACuofESs=
Subject key identifier:   5D:28:94:54:6E:A5:D1:69:B0:E0:7C:03:B2:F6:BD:8C:D3:24:F4:F8
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       5F
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/XSiUVG6l0Wmw4HwDsva9jNMk9Pg.roa
Signing time:             Tue 11 Oct 2022 10:40:37 +0000
ROA not before:           Tue 11 Oct 2022 10:40:37 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        210.188.128.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 11 10:40:37 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=5D2894546EA5D169B0E07C03B2F6BD8CD324F4F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:14:8c:eb:e2:0d:b9:9a:07:d3:72:0f:0d:1e:
                    5b:af:7b:f7:7e:c2:30:e8:08:26:b3:1c:c2:42:4d:
                    c4:fd:a5:15:f9:0f:d0:bd:60:76:9d:19:31:a7:d0:
                    7d:13:39:28:0d:49:70:c2:0b:b0:25:f1:9b:d4:76:
                    c8:f6:e7:4b:1f:18:40:99:35:f1:29:79:2d:2b:0f:
                    a5:31:57:3d:3b:cf:7a:bb:83:10:a2:5e:af:2a:af:
                    fc:08:09:64:91:b8:fb:a2:99:f0:5e:57:fe:a4:b0:
                    be:a8:d0:2d:f4:26:ea:a8:14:d0:c9:f1:11:a4:e9:
                    dc:af:bc:3f:78:85:b5:9b:56:67:cf:54:1c:6e:46:
                    43:3b:31:e8:f7:28:0a:98:a3:41:17:ff:11:94:70:
                    a5:f8:49:27:0a:3f:59:e0:99:3e:1b:ce:49:21:33:
                    7c:ee:ec:28:61:2d:e7:7b:dc:af:e1:13:a6:5f:e6:
                    56:e4:5d:a4:8d:19:7d:c2:dc:f2:d6:53:1f:13:36:
                    85:eb:5e:a9:1d:5c:3d:5c:d9:ab:ed:23:a5:35:2a:
                    77:84:54:ce:78:7b:4a:e2:c9:88:fe:f9:e7:81:17:
                    e0:23:f0:c3:e0:df:e7:96:66:56:d4:dc:c5:cc:3e:
                    99:b9:03:22:bf:a6:3e:15:0a:8c:e1:fe:be:82:a7:
                    32:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:28:94:54:6E:A5:D1:69:B0:E0:7C:03:B2:F6:BD:8C:D3:24:F4:F8
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/XSiUVG6l0Wmw4HwDsva9jNMk9Pg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c6:e5:1b:9b:78:32:76:09:fc:aa:63:c7:33:d2:a8:07:0d:1f:
         78:d6:b5:20:8a:2e:22:8a:43:58:f5:e6:57:dd:43:42:c6:93:
         07:a1:bc:77:b6:91:87:04:a6:85:2e:e1:10:ba:ce:6a:5b:f6:
         63:b1:48:11:12:7e:88:4f:d9:54:97:50:84:c9:09:73:bb:94:
         7c:e8:06:04:c7:b7:53:30:de:ef:1f:29:9e:e2:e5:56:07:b6:
         83:c7:0d:49:2e:79:96:d8:4f:02:fa:2f:75:6c:38:ab:8f:4d:
         05:81:47:52:3e:af:95:b8:c0:ff:6f:8c:7f:92:24:cf:8d:0a:
         33:85:98:94:31:90:fd:ec:4f:d9:0e:e9:5e:fd:31:ee:3d:4e:
         7c:90:64:35:81:3d:7f:d9:ed:eb:c0:b9:3c:a1:95:7a:08:f6:
         bd:90:87:82:45:bb:1d:58:48:2d:ad:56:a8:cd:89:19:72:2b:
         55:89:a7:4d:f5:c6:10:a9:2d:db:91:0c:cd:bf:9a:f6:07:a5:
         e4:26:aa:22:20:66:58:7a:59:54:23:22:27:4e:3a:28:86:02:
         4d:9e:21:64:f0:d3:cc:34:f0:9f:08:97:e4:65:60:7b:6e:72:
         eb:49:cf:49:d3:3c:7c:9f:52:bc:75:0b:bf:86:d0:73:56:b7:
         2a:67:69:f8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org