Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ZfK3XGFs4i7ppb8jnVEZdCgVL0Y.roa
File:                     ZfK3XGFs4i7ppb8jnVEZdCgVL0Y.roa (raw, json)
Hash identifier:          v72G7IFg6MFvu4c+dnmGTc/L025HKDnlqgokhRXKAVU=
Subject key identifier:   65:F2:B7:5C:61:6C:E2:2E:E9:A5:BF:23:9D:51:19:74:28:15:2F:46
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       E3
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ZfK3XGFs4i7ppb8jnVEZdCgVL0Y.roa
Signing time:             Fri 01 Sep 2023 01:31:00 +0000
ROA not before:           Fri 01 Sep 2023 01:31:00 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.229.192.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:31:00 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=65F2B75C616CE22EE9A5BF239D51197428152F46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:61:a0:37:20:57:07:0f:ae:73:a8:fc:84:2f:
                    0f:44:a6:59:28:8f:31:52:98:69:28:d5:38:16:1c:
                    54:a2:63:b1:47:ca:e5:c8:f0:ae:4e:b6:f1:5f:44:
                    6e:8a:31:33:5a:3f:41:c4:84:24:eb:66:c0:ad:02:
                    c8:c9:5b:30:f6:a7:cf:88:6b:cb:0e:19:50:8f:70:
                    27:9d:f1:ee:64:00:45:ca:95:b6:63:17:a9:63:82:
                    a9:72:bf:36:3f:e8:31:b6:57:f9:3c:fd:53:74:96:
                    b0:7f:85:f2:cf:10:a3:e3:50:fe:9a:5e:d0:13:8d:
                    6c:fa:10:fa:61:5e:e0:f1:3a:d6:6d:87:94:21:0c:
                    b7:a8:34:24:5c:0b:97:37:fb:e2:b3:2e:15:bd:6a:
                    38:9e:33:87:fc:b2:af:fc:f9:d3:7a:20:06:d4:ce:
                    d0:e2:ba:2d:cf:76:16:80:a2:46:65:1f:b1:ab:98:
                    58:33:27:28:dc:e0:5c:de:d6:16:32:67:bd:0c:ca:
                    ae:8c:9b:df:e7:df:ea:3f:60:d4:96:51:5c:6d:8b:
                    ae:8b:f8:fa:a9:85:9b:e7:71:15:ff:7a:f3:95:14:
                    25:7a:55:21:a4:2b:ae:a7:e6:e4:5f:0e:b6:fe:57:
                    1c:7e:e7:0b:c8:75:90:a4:86:e7:29:00:0e:69:ed:
                    b2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F2:B7:5C:61:6C:E2:2E:E9:A5:BF:23:9D:51:19:74:28:15:2F:46
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ZfK3XGFs4i7ppb8jnVEZdCgVL0Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.229.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         63:b8:f8:70:68:3c:db:cb:62:f7:99:52:10:e9:8d:05:b0:9a:
         c5:21:6d:be:f4:c2:38:92:e8:22:79:50:02:85:48:0b:38:20:
         7d:ea:68:54:6b:99:8a:88:47:97:20:4f:ef:a1:36:e1:73:47:
         aa:d7:c4:ac:70:ff:bf:4e:fb:9b:c7:d6:f1:9e:c0:03:3a:06:
         5c:1c:b9:fa:e6:de:49:c4:fe:66:d9:ea:a1:5b:53:0c:2d:19:
         e4:5f:13:d8:75:a9:6a:cc:f0:d0:fd:06:71:91:f6:0d:ff:49:
         de:e4:d6:33:d4:a4:6c:e4:ab:b2:fc:e1:fe:b1:18:c6:fc:fd:
         aa:d6:74:2d:9b:da:93:c5:15:65:90:5b:8b:29:48:5b:20:a7:
         2d:9e:cb:a0:fb:a2:be:a5:2d:e5:c7:01:b8:8c:c8:67:bd:4b:
         f6:91:f8:3a:d8:40:fa:2e:b6:18:ef:cc:bb:67:39:29:d8:a2:
         04:92:99:96:71:eb:05:da:aa:5c:09:1d:8d:2f:d3:7e:8d:2b:
         b6:00:a3:0b:29:cf:ca:f8:d1:9e:e4:6c:77:8f:cd:27:1a:96:
         d3:10:2b:8d:6b:06:5a:0a:d0:53:1b:4d:bd:da:64:ad:36:67:
         cc:3a:12:b0:cb:49:9b:2c:fb:41:14:11:83:ae:eb:ab:d8:4e:
         e7:75:0f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org