Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/_ek9T6pqfji1u5c_aR9yro-hDN0.roa
File:                     _ek9T6pqfji1u5c_aR9yro-hDN0.roa (raw, json)
Hash identifier:          ActHkDF/4gIJzhfEu4foYP1Rvw87MUqV+JsZ0ccijJs=
Subject key identifier:   FD:E9:3D:4F:AA:6A:7E:38:B5:BB:97:3F:69:1F:72:AE:8F:A1:0C:DD
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0156
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/_ek9T6pqfji1u5c_aR9yro-hDN0.roa
Signing time:             Sun 01 Oct 2023 01:35:44 +0000
ROA not before:           Sun 01 Oct 2023 01:35:44 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        211.125.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:35:44 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=FDE93D4FAA6A7E38B5BB973F691F72AE8FA10CDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4b:21:a9:16:1e:b4:b5:4a:4c:f5:35:24:2c:
                    58:0f:50:77:b0:7d:96:37:bd:3f:06:49:b0:3b:eb:
                    f8:94:d6:b7:fd:30:71:8f:26:96:cc:05:75:40:31:
                    c9:b2:df:0c:0c:a0:3b:d4:b3:17:97:90:e7:ad:08:
                    3e:3d:e8:1e:82:ba:bb:00:30:6b:fa:36:44:16:56:
                    ae:83:c9:f9:60:0d:b9:4a:92:e8:36:28:c3:d6:14:
                    b7:e8:87:7a:9c:e3:f0:2f:9c:e8:09:02:bf:34:26:
                    8a:63:b9:01:20:1e:91:7b:df:55:61:72:14:e7:ac:
                    f1:0b:9d:06:7b:68:c9:b4:eb:38:51:15:64:d2:91:
                    b0:7a:b6:a5:5e:d3:e8:08:ec:1a:6f:cd:67:e3:77:
                    88:03:5c:ad:9b:75:47:55:74:9e:d5:ca:66:33:88:
                    38:c5:b3:cf:b2:9b:98:c7:72:6b:71:a4:7d:5f:65:
                    79:47:20:65:d7:d2:60:73:b3:2f:df:34:b4:27:58:
                    8a:56:e7:63:c8:18:d0:45:2a:c9:56:63:90:9a:0f:
                    d8:e3:c4:90:ee:17:49:1c:e3:94:2f:59:73:0d:f4:
                    95:eb:83:d9:9f:c5:d6:aa:69:29:99:ba:74:c4:6e:
                    b3:36:90:82:76:3a:34:3c:df:54:fc:5b:b3:15:9c:
                    5b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E9:3D:4F:AA:6A:7E:38:B5:BB:97:3F:69:1F:72:AE:8F:A1:0C:DD
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/_ek9T6pqfji1u5c_aR9yro-hDN0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:d7:8c:fb:af:e8:4d:3b:ee:aa:73:54:bd:fa:34:0d:ab:c3:
         32:c8:80:49:eb:0d:9e:d4:b6:88:ed:fe:98:4d:39:66:c5:c0:
         3c:52:64:7e:c4:3b:3e:8e:c3:63:5d:af:21:c2:db:04:e2:57:
         c0:fa:b0:b5:bf:dc:45:5b:78:6b:7e:80:69:7c:e5:2d:55:40:
         0f:ca:c8:fc:5d:e5:22:e9:3f:56:dd:ee:30:c4:94:49:f8:68:
         e0:88:62:40:51:69:3d:04:43:c0:0e:d2:df:3d:5f:3e:c8:a6:
         42:66:2a:cb:0b:91:68:10:76:ab:44:65:5f:f0:da:1a:f0:44:
         c0:0c:03:1b:1d:59:5f:dd:76:c3:43:c3:cd:bf:23:f1:26:b6:
         5e:71:be:37:cc:1e:de:31:00:a2:79:c4:a7:b7:df:07:d1:ed:
         83:5a:bb:5b:11:3c:95:d9:3a:ea:c5:69:c2:da:ed:03:3c:e9:
         e9:66:97:df:3d:fa:47:0a:15:f4:c9:e9:69:81:ab:4b:ca:1e:
         a8:fc:84:ad:3e:9c:b4:79:be:8e:3a:a7:65:33:d5:80:97:73:
         40:86:be:f7:fc:28:4f:c3:5d:5f:4c:f9:22:2c:1e:15:06:3c:
         f1:53:24:cb:a8:f7:ed:53:99:f3:8b:7f:91:62:5c:06:4c:c9:
         a0:cc:25:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org