Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/dHPDecTYBqdENieBYf8tB3HrqLA.roa
File:                     dHPDecTYBqdENieBYf8tB3HrqLA.roa (raw, json)
Hash identifier:          NghQj/sXX8Z91tjMeNUuISa3NcPkZUQDb9EQc1ocDQI=
Subject key identifier:   74:73:C3:79:C4:D8:06:A7:44:36:27:81:61:FF:2D:07:71:EB:A8:B0
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       012E
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/dHPDecTYBqdENieBYf8tB3HrqLA.roa
Signing time:             Sun 01 Oct 2023 01:30:45 +0000
ROA not before:           Sun 01 Oct 2023 01:30:45 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        211.9.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302 (0x12e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:30:45 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=7473C379C4D806A74436278161FF2D0771EBA8B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:91:5e:11:8e:0c:95:1e:af:a0:37:99:6d:41:
                    73:2d:34:1c:8b:8c:d7:4f:08:f1:ad:92:c8:36:4a:
                    9f:d3:75:15:01:8a:7a:58:cc:73:b9:00:fc:e9:c4:
                    71:78:de:a8:84:7c:35:7b:22:44:7c:85:3a:b4:e7:
                    25:43:4c:c8:53:cc:71:19:67:6e:ca:5c:a6:75:f4:
                    3e:39:ec:e2:7e:c2:75:19:4c:54:38:c3:51:dc:96:
                    3b:2d:a2:77:6f:70:e8:5c:a9:a9:c9:01:15:2e:36:
                    88:37:3a:86:cb:ce:d8:bc:cc:9c:07:14:4d:df:7a:
                    d0:ed:1d:1e:22:30:87:13:9f:ec:58:78:a0:c7:f7:
                    1e:a0:ae:57:fe:d5:da:3e:ad:02:d9:39:ad:7d:62:
                    f0:5c:4e:12:4b:4f:10:4c:a6:4d:87:15:86:f6:80:
                    06:e5:0e:7a:67:a5:38:84:63:4d:ba:c6:ed:b9:d6:
                    b0:6f:40:1e:93:66:17:45:e0:82:dc:73:e5:60:af:
                    3f:bd:ff:e7:f3:aa:0a:da:37:5f:04:18:4d:37:22:
                    4e:c1:35:00:4b:a8:ca:6d:91:94:06:3c:50:78:6e:
                    40:6f:94:6a:91:96:0a:3a:1c:16:62:b3:3e:88:7f:
                    1b:b1:5d:d3:1c:69:ad:42:0b:fc:cc:7e:c6:05:81:
                    8b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:73:C3:79:C4:D8:06:A7:44:36:27:81:61:FF:2D:07:71:EB:A8:B0
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/dHPDecTYBqdENieBYf8tB3HrqLA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.9.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:99:d0:63:6e:ab:10:73:06:72:1a:77:a7:7a:9e:ca:f8:53:
         8b:c8:8a:ab:b7:09:b2:7b:03:3c:f8:e9:90:aa:4d:c5:03:4f:
         0e:7e:b6:a4:b2:a8:4d:6f:d1:71:1a:18:d4:8d:30:42:cc:bd:
         35:18:c6:69:ef:6e:84:4c:6c:e8:dc:85:f6:04:28:1b:df:83:
         64:0d:13:c3:83:45:5e:e4:82:a1:01:98:78:cf:5f:a9:bf:b8:
         ed:fc:02:98:55:bd:7c:61:92:bf:a2:0e:f0:92:26:6f:02:5b:
         e9:5e:7a:34:79:6c:07:b0:54:0d:fd:54:e2:3b:42:39:f1:11:
         d1:de:37:b4:f1:f9:b3:6f:59:fa:30:e4:e0:b5:c4:2e:8c:ed:
         53:7e:f3:c2:d9:ae:35:30:9f:a1:0b:8b:32:49:73:f9:00:4b:
         a8:00:7f:5b:03:c7:2d:91:26:8b:c2:07:c3:7a:6a:f4:a6:65:
         36:d1:ce:cb:5e:85:29:96:6e:ca:9d:96:b1:89:df:66:dc:58:
         aa:b4:32:bd:eb:c3:f8:92:6b:37:5b:b4:92:a4:b5:03:f2:d6:
         f9:19:28:25:f1:3c:fa:fb:df:9c:31:b3:b6:de:f8:8d:de:8c:
         50:95:de:3b:a6:d6:d7:2e:cb:c7:57:4f:3a:24:d4:d6:6c:ae:
         af:50:3a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org