Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/aZ_yLe0Q5JAbZ2NBqx07Z_Saurw.roa
File:                     aZ_yLe0Q5JAbZ2NBqx07Z_Saurw.roa (raw, json)
Hash identifier:          j0KcjAjDk59dVIHJDUw0GIIlwgYfshba3D85BTuDufg=
Subject key identifier:   69:9F:F2:2D:ED:10:E4:90:1B:67:63:41:AB:1D:3B:67:F4:9A:BA:BC
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0169
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/aZ_yLe0Q5JAbZ2NBqx07Z_Saurw.roa
Signing time:             Sun 01 Oct 2023 01:35:51 +0000
ROA not before:           Sun 01 Oct 2023 01:35:51 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        211.7.128.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 361 (0x169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:35:51 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=699FF22DED10E4901B676341AB1D3B67F49ABABC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c1:8b:57:14:46:7a:fc:11:64:f2:34:12:c7:
                    32:b4:46:2a:dc:54:5d:6e:22:d9:ce:87:71:d9:aa:
                    f2:04:32:1c:44:9f:27:de:13:a0:ce:c0:c8:fd:d4:
                    3d:0a:3b:87:67:0f:20:eb:19:74:a7:93:3b:f0:12:
                    eb:e5:20:3d:4c:6b:88:cb:8c:43:48:cc:46:fc:29:
                    11:20:8f:94:aa:27:87:f0:76:5b:69:be:10:3f:85:
                    e2:8c:9e:01:ae:d0:44:a7:13:2d:0c:10:b0:bc:6c:
                    4a:d5:d7:67:1b:0c:90:ad:b0:10:62:36:bf:38:90:
                    63:c3:d5:b2:26:45:16:d1:fb:2a:31:fa:f5:b8:f1:
                    41:83:a4:1f:75:8b:66:34:9b:35:e1:86:ea:88:be:
                    b2:4a:58:05:73:5e:da:22:19:f3:8a:ac:07:06:64:
                    46:d0:01:16:58:b4:05:6b:d3:88:65:f1:1b:0d:a9:
                    c1:9e:e9:35:8f:9b:f4:3c:da:d6:fc:dc:d7:da:77:
                    62:74:33:3f:15:6d:f0:41:d4:7e:6b:20:65:5c:42:
                    48:9a:33:30:89:27:a2:54:c7:8a:ad:f9:fd:e7:9d:
                    48:2d:8e:b9:4d:96:cd:c8:7e:a5:93:50:13:60:7b:
                    e2:16:91:29:3a:8b:b3:f5:25:4f:c4:7f:13:fd:ed:
                    fb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9F:F2:2D:ED:10:E4:90:1B:67:63:41:AB:1D:3B:67:F4:9A:BA:BC
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/aZ_yLe0Q5JAbZ2NBqx07Z_Saurw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.7.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c6:85:ff:c8:ec:3b:9c:ec:a6:aa:4d:dc:81:c9:7e:e6:94:4b:
         fa:7f:d5:ef:4f:84:f4:51:9b:7e:f8:0a:19:ee:98:b1:0e:44:
         d2:6d:30:3a:86:2e:c3:fb:fe:74:03:b6:ad:0d:cf:67:9f:22:
         9f:7c:c0:62:f6:25:99:a5:ab:36:53:73:fe:b4:35:8e:b1:00:
         38:6e:92:39:02:40:28:22:68:22:2d:a3:5d:72:83:4a:1f:b1:
         58:f6:7d:f8:e0:05:6e:01:ba:fb:5f:45:5a:b8:3e:69:7f:99:
         08:93:6b:19:c1:ca:96:e9:80:c6:a1:71:b7:60:cd:ff:f8:40:
         e0:6d:4c:18:7c:ed:ae:e8:37:e2:52:93:1a:2b:07:77:59:74:
         e6:c1:b4:a0:5b:3a:f3:93:5b:b4:50:1e:5f:38:06:ad:0c:4c:
         21:57:55:a9:b6:cd:a4:5c:5d:ac:2c:34:c3:7f:c7:f7:ac:ff:
         48:e8:32:f9:53:c5:e8:31:b0:ff:cf:93:1d:8f:57:e0:c8:61:
         13:ab:42:4c:7b:f6:0a:4f:71:a0:09:92:95:d4:b2:67:3f:3b:
         7a:08:fc:be:1b:15:1e:25:44:8d:c9:73:b7:35:82:08:d0:89:
         e7:74:de:54:cb:4c:2f:a1:af:0c:0f:63:da:1a:46:e9:cc:0e:
         f0:1d:c1:27
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzc2
MUEzQTlGQUU4N0Y4RjA2OUQ2ODI0NzFDQkUxQzkzNUZCRTMyMTAeFw0yMzEwMDEw
MTM1NTFaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDY5OUZGMjJERUQxMEU0
OTAxQjY3NjM0MUFCMUQzQjY3RjQ5QUJBQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFwYtXFEZ6/BFk8jQSxzK0RircVF1uItnOh3HZqvIEMhxEnyfe
E6DOwMj91D0KO4dnDyDrGXSnkzvwEuvlID1Ma4jLjENIzEb8KREgj5SqJ4fwdltp
vhA/heKMngGu0ESnEy0MELC8bErV12cbDJCtsBBiNr84kGPD1bImRRbR+yox+vW4
8UGDpB91i2Y0mzXhhuqIvrJKWAVzXtoiGfOKrAcGZEbQARZYtAVr04hl8RsNqcGe
6TWPm/Q82tb83Nfad2J0Mz8VbfBB1H5rIGVcQkiaMzCJJ6JUx4qt+f3nnUgtjrlN
ls3IfqWTUBNge+IWkSk6i7P1JU/EfxP97fsjAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUaZ/yLe0Q5JAbZ2NBqx07Z/SaurwwHwYDVR0jBBgwFoAUx2Gjqfrof48GnWgk
ccvhyTX74yEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMzQ3L3gyR2pxZnJvZjQ4R25XZ2tjY3ZoeVRYNzR5RS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3gyR2pxZnJvZjQ4R25XZ2tjY3Zo
eVRYNzR5RS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMzM0Ny9hWl95TGUwUTVKQWJaMk5CcXgwN1pfU2F1cncu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQG0weAMA0GCSqGSIb3DQEBCwUAA4IBAQDGhf/I7Duc7KaqTdyByX7m
lEv6f9XvT4T0UZt++AoZ7pixDkTSbTA6hi7D+/50A7atDc9nnyKffMBi9iWZpas2
U3P+tDWOsQA4bpI5AkAoImgiLaNdcoNKH7FY9n344AVuAbr7X0VauD5pf5kIk2sZ
wcqW6YDGoXG3YM3/+EDgbUwYfO2u6DfiUpMaKwd3WXTmwbSgWzrzk1u0UB5fOAat
DEwhV1Wpts2kXF2sLDTDf8f3rP9I6DL5U8XoMbD/z5Mdj1fgyGETq0JMe/YKT3Gg
CZKV1LJnPzt6CPy+GxUeJUSNyXO3NYII0InndN5Uy0wvoa8MD2PaGkbpzA7wHcEn
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org