Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/aNk7gswkHwdJ9Dc6Wi9HzROoHeU.roa
File:                     aNk7gswkHwdJ9Dc6Wi9HzROoHeU.roa (raw, json)
Hash identifier:          FJBVl2JTw1YgxtGOrD/Jzm6xt8vPlXISK5352hYciLk=
Subject key identifier:   68:D9:3B:82:CC:24:1F:07:49:F4:37:3A:5A:2F:47:CD:13:A8:1D:E5
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       014D
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/aNk7gswkHwdJ9Dc6Wi9HzROoHeU.roa
Signing time:             Sun 01 Oct 2023 01:33:24 +0000
ROA not before:           Sun 01 Oct 2023 01:33:24 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        211.12.0.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:33:24 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=68D93B82CC241F0749F4373A5A2F47CD13A81DE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:af:6c:0c:63:23:9c:20:34:f7:65:d9:fd:bf:
                    24:77:b8:07:d4:ee:74:9b:00:bb:66:6c:cc:f0:53:
                    09:27:4f:b0:55:cb:de:be:b2:04:52:25:9f:97:54:
                    7a:0a:a6:24:e3:bc:18:4e:bd:3e:63:05:a3:b0:9a:
                    d8:02:e5:78:ab:d4:81:66:1e:f7:2d:ea:4a:1b:36:
                    e3:2c:57:91:32:f6:06:c9:ca:fe:17:e7:f1:32:3d:
                    ca:d2:de:ca:de:03:c4:70:3b:8e:56:cb:0a:f2:88:
                    b6:57:ec:60:05:c7:a5:78:89:48:bf:19:ab:24:45:
                    f1:16:75:eb:a6:66:7e:c1:7c:72:be:4f:9a:7f:c7:
                    d2:a1:0d:5e:64:a6:c6:96:be:b2:50:21:02:5a:35:
                    22:51:9b:80:1c:fc:01:6a:db:48:da:62:5d:9f:3d:
                    11:51:74:72:b1:e8:61:55:ba:18:2c:a3:36:b9:89:
                    0d:43:55:35:e3:38:78:50:54:14:76:e4:e6:2f:fe:
                    7f:ba:93:8d:d7:d4:dc:c8:ee:99:00:5e:0a:78:02:
                    60:f6:0d:31:b6:61:04:0e:ec:a9:89:8d:11:d4:20:
                    f4:02:1b:d0:1d:dd:52:cf:45:01:ce:0d:39:cf:80:
                    c5:8f:28:e8:fb:2b:1a:aa:e7:1d:5b:db:aa:59:ba:
                    49:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D9:3B:82:CC:24:1F:07:49:F4:37:3A:5A:2F:47:CD:13:A8:1D:E5
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/aNk7gswkHwdJ9Dc6Wi9HzROoHeU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.12.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         83:f8:52:1e:8a:75:81:a5:b4:b4:b1:84:0e:0b:a4:a5:5a:33:
         82:39:2a:d4:96:9e:22:bd:1b:ce:79:96:c5:aa:0c:5d:fc:15:
         aa:ca:7d:94:9a:37:86:5b:84:f3:75:02:a0:50:b0:aa:07:96:
         46:0d:46:f5:df:89:05:f9:a6:ac:c7:2f:d6:79:fd:f5:e9:fe:
         87:b9:58:9d:7f:91:dd:36:e6:cb:c5:9e:b1:7d:5c:30:c1:fe:
         55:21:9c:5e:57:df:78:74:43:2b:20:a8:ea:fc:e2:81:c1:08:
         5e:ab:31:a5:f2:63:89:69:05:e3:6b:b3:6b:d1:8b:ec:8f:2c:
         fa:47:28:b1:91:c2:bd:19:6b:99:66:32:c7:11:1e:fe:75:ed:
         99:49:ea:fe:29:85:f3:46:1b:1b:a8:d5:bb:bd:e1:dd:24:e0:
         af:07:3f:49:16:77:06:82:f4:d6:27:e5:5a:fb:5a:ce:29:11:
         16:d1:4c:81:04:8a:dd:56:3c:65:10:e0:ed:44:5e:0f:c1:e2:
         6c:98:41:45:9e:e0:d0:b5:7d:4d:14:58:a3:d0:27:ae:63:54:
         eb:43:41:fe:bf:0c:41:3f:29:d8:8e:37:19:f0:37:4f:f7:01:
         5b:b3:25:75:ca:ad:78:49:bb:4d:00:b0:a1:57:5b:a6:83:c1:
         4a:2c:83:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org