Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/dxPodl8TPLyxyQF6LfZIY4ARfEc.roa
File:                     dxPodl8TPLyxyQF6LfZIY4ARfEc.roa (raw, json)
Hash identifier:          6ReMXjORv0JbKgDafqeJQAgwUPNXGNR40ecTskT+Loo=
Subject key identifier:   77:13:E8:76:5F:13:3C:BC:B1:C9:01:7A:2D:F6:48:63:80:11:7C:47
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0166
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/dxPodl8TPLyxyQF6LfZIY4ARfEc.roa
Signing time:             Sun 01 Oct 2023 01:35:49 +0000
ROA not before:           Sun 01 Oct 2023 01:35:49 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        211.7.0.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:35:49 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=7713E8765F133CBCB1C9017A2DF6486380117C47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:65:e8:d6:b0:e4:b6:3e:82:2f:10:0b:58:e4:
                    fd:47:12:c4:65:83:29:fc:02:79:1f:57:0b:7e:dd:
                    ee:0b:f9:23:5a:8f:f4:00:cd:98:cc:de:6c:b2:71:
                    5c:d6:14:c7:79:4f:67:59:46:5c:d4:b5:d6:50:cc:
                    a6:18:99:cf:e6:30:d7:c0:9d:24:fd:27:4a:e3:80:
                    85:72:d7:8e:21:2b:83:94:e2:05:74:17:04:2a:86:
                    9a:18:4a:07:28:44:e6:2b:b8:bc:0f:c9:07:c3:d9:
                    34:0e:8e:79:9b:09:4b:55:ca:e2:f1:88:bf:a3:42:
                    2d:51:61:da:33:9c:e5:cc:5d:2a:15:0c:8e:f8:78:
                    eb:51:33:74:bc:9d:0b:af:6c:a0:bc:7e:75:95:5e:
                    44:f7:a7:38:b3:6f:33:d8:0c:5b:be:e4:e2:0a:bf:
                    91:89:5e:9f:ba:64:a9:66:73:e6:7c:17:b9:2d:7f:
                    81:8a:f1:2a:39:45:8c:ed:71:e6:dd:f8:5e:1d:8f:
                    7e:89:e9:05:f9:eb:45:f1:72:24:cf:76:0a:15:2d:
                    27:3a:67:b5:e4:1d:d5:91:a4:42:d1:53:bc:a4:5b:
                    5f:e6:be:82:84:bf:eb:67:33:a7:76:9b:82:88:0f:
                    a7:e6:af:b7:b9:28:23:56:fa:30:56:02:b6:36:ed:
                    f6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:13:E8:76:5F:13:3C:BC:B1:C9:01:7A:2D:F6:48:63:80:11:7C:47
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/dxPodl8TPLyxyQF6LfZIY4ARfEc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.7.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         00:a8:fb:cd:e5:f0:0f:2f:1f:a3:45:72:cd:4e:39:2e:a7:41:
         0f:59:10:19:3c:91:a2:65:99:83:80:84:92:0a:95:72:6f:9b:
         ab:ab:f0:0f:f4:40:86:01:b7:a1:f1:d4:fd:ec:02:ea:a5:34:
         37:14:96:49:9c:39:fa:eb:59:5e:9a:9f:5b:bd:2c:42:df:f2:
         31:a2:22:64:50:0c:e8:c7:19:cf:6d:f0:70:16:c0:ea:48:87:
         04:44:a0:d7:18:32:2c:f0:7f:c0:46:27:42:b8:ec:0f:48:4f:
         af:16:ac:8a:11:79:0d:7e:7e:fb:39:a2:e3:51:fb:ba:2a:ed:
         32:a4:1d:7f:60:de:41:61:b4:69:97:94:44:a0:7e:e0:9b:02:
         e9:b4:f6:cf:04:fc:1d:24:34:70:9d:39:16:0a:a7:98:22:33:
         4a:60:34:a7:65:ea:81:bf:98:08:53:59:16:66:a0:e4:34:03:
         08:17:3b:14:04:2a:dd:01:8f:7f:37:83:a1:06:f5:ec:cd:8d:
         63:76:bc:72:72:da:05:82:01:31:8a:8c:11:6e:ea:ab:23:13:
         0b:ef:8a:85:ad:dc:d0:42:d6:67:b9:a5:35:e6:1c:ad:74:84:
         ab:8d:80:4b:29:9a:e6:51:7a:f0:44:69:80:e8:eb:b2:fd:c2:
         46:89:19:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org