Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/bgsWOw8b7BMcprE3Uudhl1IAuKo.roa
File:                     bgsWOw8b7BMcprE3Uudhl1IAuKo.roa (raw, json)
Hash identifier:          zKmTNw9lj32PMpMsS2nuscTNDyw2fcpMEAlnery7IsE=
Subject key identifier:   6E:0B:16:3B:0F:1B:EC:13:1C:A6:B1:37:52:E7:61:97:52:00:B8:AA
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       B5
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/bgsWOw8b7BMcprE3Uudhl1IAuKo.roa
Signing time:             Tue 18 Oct 2022 02:42:19 +0000
ROA not before:           Tue 18 Oct 2022 02:42:19 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        218.225.0.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181 (0xb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:42:19 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=6E0B163B0F1BEC131CA6B13752E761975200B8AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9b:94:57:b3:ae:20:64:8c:5a:2f:18:ea:a4:
                    b3:fc:72:ef:16:47:78:d9:d1:94:1e:bb:14:5a:51:
                    9f:16:d0:3a:79:c7:49:3d:77:ab:66:85:6f:a6:c9:
                    4a:98:91:33:10:3c:9d:54:4c:55:b0:49:35:c0:d1:
                    55:1b:6c:5e:32:79:ee:1e:66:0b:47:a5:8d:26:54:
                    64:c3:c4:ba:58:1f:38:c7:cd:0e:8a:02:43:61:e8:
                    8e:a7:ef:a9:d7:e0:9c:a6:1c:b8:3e:e9:14:4a:22:
                    20:a9:74:93:2b:fc:70:cc:ac:a0:51:9f:b2:c3:24:
                    2a:cd:9a:2a:b9:69:4a:ee:14:a9:c1:75:b4:ad:dc:
                    78:b6:27:b5:58:ba:6f:df:b5:d0:ba:55:d1:f1:fd:
                    8c:aa:a5:8b:68:cf:dc:c3:b2:c3:d7:27:f3:ee:9c:
                    42:7f:7d:5a:cb:fc:08:dd:43:8e:7f:24:32:bd:4c:
                    87:33:a7:f0:9d:d1:94:7b:21:1a:a6:73:7b:09:04:
                    43:e0:ef:c6:bd:89:89:5d:85:38:ae:79:43:10:76:
                    ed:81:da:d2:99:8e:63:f4:1c:11:45:26:8a:0e:c7:
                    90:e1:d1:9f:01:d7:e5:9b:55:e5:ba:86:fe:92:9d:
                    26:88:2d:ed:00:f1:08:87:a9:3d:fa:45:dc:ef:7e:
                    59:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0B:16:3B:0F:1B:EC:13:1C:A6:B1:37:52:E7:61:97:52:00:B8:AA
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/bgsWOw8b7BMcprE3Uudhl1IAuKo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.225.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4b:50:fe:34:1a:07:cd:f6:08:14:b9:c8:45:23:63:a0:e3:c4:
         08:38:f3:f6:7f:8a:dd:d6:99:2a:0e:61:a7:44:2e:ee:e7:8b:
         d9:ad:cc:1b:bb:4a:9f:61:0c:57:ce:38:1f:e9:84:e1:5e:90:
         73:a3:19:74:a5:27:33:e3:ac:a7:73:61:a9:07:ba:d0:a9:57:
         d5:51:26:8e:57:a0:8f:6c:5d:46:9a:49:e0:1f:f9:b2:d2:f0:
         85:de:22:9c:e3:50:d4:89:58:fb:0d:db:a6:34:8e:5f:cc:d8:
         08:65:63:2f:bb:5a:f1:3a:f7:8a:07:ab:1e:3a:23:c1:3a:b8:
         2e:27:21:b3:72:b1:b1:8a:6c:bb:62:9b:f9:6a:bc:8e:37:52:
         b8:f2:e1:2f:97:4c:bf:c7:cd:7a:a0:0d:76:1e:dd:29:ae:7e:
         5e:4c:8c:e1:1a:2f:e7:01:a5:1b:cd:e3:d6:64:2a:10:fc:bb:
         55:77:d6:c8:b9:0c:79:df:da:62:19:7c:67:fa:5d:c4:48:29:
         0f:4d:e6:5e:ee:59:2b:c9:38:5c:b6:0f:5a:26:78:5a:b8:9e:
         b0:28:30:3c:87:20:2e:c7:60:29:fa:72:90:98:cd:73:79:71:
         09:5e:f7:a7:72:95:40:04:85:82:08:e0:c6:5a:53:9e:ec:16:
         67:f6:fb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org