Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/dPR-q__fMkgSqQOwQhlh9SBkwLM.roa
File:                     dPR-q__fMkgSqQOwQhlh9SBkwLM.roa (raw, json)
Hash identifier:          1k5QtqSpvxjwb+3kUrQhRGQdDJVyFBPTUd0+1KlqEf0=
Subject key identifier:   74:F4:7E:AB:FF:DF:32:48:12:A9:03:B0:42:19:61:F5:20:64:C0:B3
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0143
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/dPR-q__fMkgSqQOwQhlh9SBkwLM.roa
Signing time:             Sun 01 Oct 2023 01:33:19 +0000
ROA not before:           Sun 01 Oct 2023 01:33:19 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        211.10.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323 (0x143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:33:19 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=74F47EABFFDF324812A903B0421961F52064C0B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:03:05:10:e3:d2:03:94:9f:a7:b1:d7:42:2e:
                    7b:85:28:e8:27:bb:73:9a:31:08:6f:85:bc:fb:5d:
                    78:45:be:18:be:f2:64:6d:19:a9:77:ca:43:61:68:
                    6f:c5:d4:b5:9a:69:8e:4a:31:c6:7e:42:13:e4:c6:
                    f4:b7:03:d8:c8:77:f9:f4:63:20:a2:ec:c6:59:dd:
                    24:b6:0b:e4:39:ee:be:39:bb:65:0d:fc:39:15:70:
                    43:92:1c:95:36:30:5f:31:22:d1:b4:09:34:33:03:
                    d2:94:90:27:8b:c5:da:bb:ce:d2:c7:23:07:db:6f:
                    54:5e:7f:84:2b:cc:75:47:2d:ae:05:01:38:48:21:
                    3b:97:d8:6e:df:c2:c9:d2:6c:7b:72:23:b3:d8:ca:
                    b3:a2:21:b3:3d:e7:c3:c6:75:96:b5:59:cb:5b:c4:
                    a3:82:ff:ab:47:34:7e:4e:eb:6d:d9:d5:3f:66:43:
                    7a:b0:c0:32:2a:8a:29:c3:68:d3:ac:a3:10:1b:c0:
                    ff:4b:93:5f:a0:62:b2:2e:e4:39:83:00:7b:c3:62:
                    fc:2b:04:23:f9:21:3d:6d:f2:c3:d4:86:2c:5e:84:
                    a3:d2:be:a0:67:22:44:50:85:47:0a:12:12:6c:be:
                    2b:41:59:f0:47:2e:f1:4b:9f:20:27:a9:47:2a:4e:
                    06:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F4:7E:AB:FF:DF:32:48:12:A9:03:B0:42:19:61:F5:20:64:C0:B3
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/dPR-q__fMkgSqQOwQhlh9SBkwLM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:4d:4e:e8:aa:28:08:39:14:6c:04:1c:98:40:c5:44:75:9f:
         a1:38:25:2d:fa:7a:9d:d1:29:16:88:26:44:06:49:03:fa:ee:
         d4:20:f8:b2:43:66:e3:70:3a:20:8c:be:53:ce:11:5b:9e:79:
         6a:58:8c:cd:d1:70:ec:93:7d:ac:9f:9c:c6:9c:59:7e:94:78:
         87:2a:2b:35:8c:6f:a9:84:f0:10:c4:51:17:f2:89:78:19:e1:
         c2:e6:2d:04:3f:a3:c2:73:b6:87:c6:1b:9f:c4:57:d4:b1:b1:
         b1:4d:01:d6:6b:1e:77:c5:ea:ae:65:3f:fc:46:b9:d3:ff:70:
         e5:39:b9:77:ae:20:86:f5:3a:09:f6:20:c4:5f:0a:14:90:15:
         99:66:eb:58:7b:fc:41:b1:5b:d0:08:64:c4:a3:ac:7b:9e:ae:
         0b:8f:ac:44:e7:9a:45:5a:e6:92:19:79:25:37:37:8e:ec:49:
         f8:ac:80:9e:d3:06:90:68:53:a2:75:71:e7:25:a5:df:e1:07:
         9e:a4:ee:2d:43:2b:aa:89:14:1d:8c:5f:5c:7a:a2:3e:ca:1a:
         3f:11:6f:2c:6c:d9:c3:67:a9:6a:47:f3:dd:3f:49:be:18:cd:
         55:e0:fd:1f:e9:e7:cb:91:09:7e:48:07:de:88:02:e8:ae:13:
         0b:d2:e9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org