Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/e3Cah5Ou3IbqpFd5UGAFf2WLE10.roa
File:                     e3Cah5Ou3IbqpFd5UGAFf2WLE10.roa (raw, json)
Hash identifier:          Ezn22VdlVAo4RcaoCEgH5Sz45lGtz7pjCRWOUECzu8I=
Subject key identifier:   7B:70:9A:87:93:AE:DC:86:EA:A4:57:79:50:60:05:7F:65:8B:13:5D
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0135
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/e3Cah5Ou3IbqpFd5UGAFf2WLE10.roa
Signing time:             Sun 01 Oct 2023 01:30:50 +0000
ROA not before:           Sun 01 Oct 2023 01:30:50 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        211.10.160.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309 (0x135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:30:50 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=7B709A8793AEDC86EAA457795060057F658B135D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cf:60:91:cd:0f:e5:06:38:55:84:23:9b:50:
                    69:c7:4a:c6:7c:46:a4:f9:8c:60:63:9d:0a:45:d2:
                    e9:66:93:06:7b:91:ba:8b:47:81:ce:5c:79:d1:bd:
                    9b:af:e2:49:a1:c0:b4:f9:79:74:0d:5a:d1:8f:51:
                    92:27:96:98:29:b2:7d:6a:02:1e:5b:15:b3:54:3f:
                    2d:7e:45:51:7d:e4:60:08:f0:60:9d:7b:01:12:77:
                    93:31:c9:bd:49:1d:43:26:62:65:30:4f:8e:c7:4c:
                    d3:17:a6:18:d4:e5:2c:f1:0c:ca:30:5c:10:c6:80:
                    1f:ec:38:81:cf:0e:f8:1a:58:28:be:db:19:c3:50:
                    28:87:db:fb:04:6f:3d:02:d8:0c:bc:0b:62:64:f7:
                    fc:58:94:af:f5:9b:e0:8f:58:c2:6d:8d:40:ea:b8:
                    0f:03:a0:ba:f7:ae:10:dc:34:da:ed:3e:87:9e:c0:
                    b1:95:4b:b4:91:a5:cb:a4:f7:d8:df:4a:86:42:67:
                    d6:b5:69:4e:0f:95:32:56:41:0c:ce:2a:ae:dc:31:
                    8c:f3:5f:94:4a:52:8f:c5:dc:d6:7b:ca:4a:e4:11:
                    f0:6c:be:ca:67:b0:6e:fc:ea:21:f0:90:e3:20:a2:
                    71:56:59:03:e6:76:85:69:c2:70:7c:63:60:2f:8d:
                    05:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:70:9A:87:93:AE:DC:86:EA:A4:57:79:50:60:05:7F:65:8B:13:5D
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/e3Cah5Ou3IbqpFd5UGAFf2WLE10.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:a0:37:48:c3:c5:05:a4:81:b8:07:dd:df:24:65:23:2c:d0:
         5c:85:3a:b6:60:78:8c:18:17:a2:24:3f:52:54:d5:a1:21:44:
         f7:e0:fe:b6:b3:c9:83:5c:5f:c7:d9:c7:99:52:54:96:83:c8:
         99:dd:fe:03:4c:ea:aa:eb:bc:11:f3:f2:ee:d1:68:47:bb:2c:
         d7:2d:39:ff:c5:d2:52:50:3c:37:17:75:69:98:f9:5f:1e:7a:
         d8:9d:31:be:f8:30:e8:0e:b4:ae:4b:e4:d8:6d:4c:25:7d:35:
         8a:2f:32:5c:32:c1:10:9b:4e:d6:53:59:eb:45:fc:64:4a:b2:
         cc:11:9c:6b:5e:d8:90:a1:1f:92:e5:52:2f:4e:08:c2:0f:93:
         93:02:b1:da:db:d7:50:fa:e7:ee:c0:d6:ef:34:3b:db:b1:b8:
         31:6c:db:3e:25:88:e2:11:ee:23:6e:06:20:d2:4e:70:bf:6d:
         b7:28:0b:e7:66:0f:0a:0c:8a:78:2a:4a:d0:0f:eb:db:dc:fd:
         5b:17:79:c3:04:df:da:97:42:e5:09:bf:54:19:24:8b:ac:f9:
         83:8b:a4:27:c2:4f:89:7b:56:d0:78:24:1c:41:c7:38:c0:b9:
         af:31:22:b2:46:2a:d1:2a:a6:43:c4:79:8d:bb:e2:6b:6d:4f:
         7c:b0:4f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org