Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/cY_y3wdKrr4-U-w52g_a0xwPOJo.roa
File:                     cY_y3wdKrr4-U-w52g_a0xwPOJo.roa (raw, json)
Hash identifier:          5QbDYpAcYn9IPpAaHUsBtgA2YbLDuAbGxmlixA5rQ14=
Subject key identifier:   71:8F:F2:DF:07:4A:AE:BE:3E:53:EC:39:DA:0F:DA:D3:1C:0F:38:9A
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       65
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/cY_y3wdKrr4-U-w52g_a0xwPOJo.roa
Signing time:             Tue 18 Oct 2022 02:14:12 +0000
ROA not before:           Tue 18 Oct 2022 02:14:12 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        211.7.52.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:14:12 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=718FF2DF074AAEBE3E53EC39DA0FDAD31C0F389A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cb:f9:59:3a:89:ae:3d:01:28:30:9c:9c:2f:
                    8a:d6:79:ff:13:e4:01:b4:f3:32:5c:2a:8e:56:59:
                    bd:c9:0f:31:4b:a2:ab:b3:dc:5b:51:fb:4d:14:11:
                    97:73:c4:59:25:d7:42:43:b9:42:83:24:0a:83:da:
                    36:60:18:cf:2e:4f:11:0d:69:16:cf:f6:85:7d:a3:
                    f9:d7:76:d5:9d:de:31:b7:a4:23:62:b8:33:b4:4f:
                    35:53:0d:15:72:35:1f:c3:15:d1:6c:f9:94:e1:13:
                    bb:40:03:68:39:2e:69:52:b8:a3:bd:84:50:a8:91:
                    4c:64:b4:37:2c:55:71:96:ad:7d:7b:da:3c:c8:99:
                    84:54:c1:e1:af:26:b7:00:fb:a9:72:f7:1f:ae:f2:
                    ea:5a:83:09:cc:3b:54:a8:97:78:0d:49:81:a0:33:
                    cb:f3:21:f7:94:45:e0:54:a5:f7:27:b5:1c:ea:f4:
                    c0:e9:aa:2d:bc:b7:07:6c:2f:31:5c:ae:ca:d9:a0:
                    66:ba:f0:34:a9:fc:b1:43:d9:8a:90:b2:50:53:54:
                    9f:cb:8d:82:ec:e3:46:18:9a:ea:95:52:86:17:a7:
                    0a:c8:d3:98:5c:ed:cc:c1:f0:93:3d:34:ae:59:e4:
                    29:33:9e:16:ae:18:20:60:0c:23:2e:a6:ce:a0:ae:
                    dc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:8F:F2:DF:07:4A:AE:BE:3E:53:EC:39:DA:0F:DA:D3:1C:0F:38:9A
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/cY_y3wdKrr4-U-w52g_a0xwPOJo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.7.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:c1:e6:65:bc:79:8f:67:b8:98:56:e5:55:40:67:4b:b4:1d:
         97:2f:55:7d:18:04:13:69:b2:74:0b:95:3b:f8:b9:96:a3:e9:
         b6:a3:bd:8c:5f:2f:bd:c3:2a:df:d9:a5:d2:36:20:f0:25:1d:
         32:48:7d:6e:44:78:94:01:42:84:e7:14:4a:58:c4:3a:a4:f1:
         d1:b4:b4:96:93:2f:fb:58:ef:47:78:c6:ef:28:f8:f8:8b:cd:
         ec:8c:4a:3b:23:9d:8e:3b:21:b8:51:6f:95:c1:75:ff:36:98:
         db:6f:ba:2b:68:10:93:27:f6:07:a5:ee:44:e8:96:61:ff:0c:
         69:12:41:93:a6:e0:ad:ec:45:f0:b1:e1:a5:eb:45:7f:b5:38:
         6f:e9:3a:b0:98:3f:e3:38:30:95:1d:9f:d4:96:4d:d4:ce:b7:
         9a:66:99:bf:23:dd:9c:c9:5a:00:23:27:51:50:0f:82:c9:2f:
         0b:09:31:b1:89:e7:ee:49:fb:b0:45:03:ee:78:d7:a3:74:17:
         a6:e0:4d:be:ed:4e:09:86:79:1c:d3:18:bc:fd:99:84:89:15:
         8c:85:49:c1:0a:b8:94:55:18:8a:77:9e:67:62:98:a1:58:b7:
         c8:f3:16:a7:09:8b:6f:bb:2b:5c:7d:d7:c5:24:2c:72:ea:03:
         df:54:09:c3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org