Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/fstKhBtZNGK4S7Pjp_cJCtXbdYA.roa
File:                     fstKhBtZNGK4S7Pjp_cJCtXbdYA.roa (raw, json)
Hash identifier:          zftydyJv8WziW1Oi+V5vfJVoueI/sipzdyhlXbx0XB8=
Subject key identifier:   7E:CB:4A:84:1B:59:34:62:B8:4B:B3:E3:A7:F7:09:0A:D5:DB:75:80
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       67
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/fstKhBtZNGK4S7Pjp_cJCtXbdYA.roa
Signing time:             Tue 18 Oct 2022 02:14:12 +0000
ROA not before:           Tue 18 Oct 2022 02:14:12 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        210.250.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:14:12 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=7ECB4A841B593462B84BB3E3A7F7090AD5DB7580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:88:b9:3c:6e:cb:4b:c6:e8:8c:76:ef:b1:d6:
                    63:a1:f8:93:be:d1:c5:d9:73:7a:9f:7f:0e:6a:b6:
                    a6:a0:fa:9e:76:a7:3b:e5:c3:c2:8f:01:97:3c:b7:
                    db:0b:19:06:18:bd:af:81:d2:87:da:c6:f6:32:97:
                    12:3e:69:eb:fc:92:78:eb:71:4a:93:79:54:f9:85:
                    eb:e7:13:91:a3:61:25:f9:71:b9:8f:b6:b2:6b:6e:
                    4b:89:75:e3:28:09:ec:7e:97:f2:bd:2b:08:07:26:
                    95:3b:6f:45:03:11:68:c0:c4:8b:ae:18:1a:7f:4d:
                    31:0a:48:ed:fd:89:3a:71:04:44:37:52:1f:1a:d0:
                    c0:55:db:5d:4e:6a:79:4e:3b:d2:ee:ab:15:88:c6:
                    4b:e6:ef:fa:c5:f9:86:e4:f2:0b:d2:ee:16:e8:b6:
                    cd:df:4e:b8:d6:a2:d7:a2:d8:19:61:b4:bc:de:7a:
                    c0:83:eb:c3:43:32:4a:2f:51:9d:5c:16:04:84:6d:
                    06:15:c4:ac:0d:8c:4f:a3:cf:4a:66:62:68:d1:00:
                    a4:1c:b6:09:f3:ee:26:7f:d7:c7:b9:74:9f:c7:4d:
                    4b:40:cd:f9:32:73:fe:8d:41:0a:5d:71:d2:ff:b2:
                    b4:71:3c:3c:4a:c7:b6:64:1b:5c:ce:72:d6:0a:bb:
                    26:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CB:4A:84:1B:59:34:62:B8:4B:B3:E3:A7:F7:09:0A:D5:DB:75:80
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/fstKhBtZNGK4S7Pjp_cJCtXbdYA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.250.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:5c:ed:8f:5d:a3:76:a5:d2:9f:9a:fd:11:99:4b:67:04:9d:
         e3:cf:34:c6:9a:0b:26:70:29:3f:5a:ab:66:e3:31:48:60:4b:
         d4:11:2f:c8:57:70:e8:d4:65:db:64:d0:13:7c:db:3d:19:8e:
         87:08:d8:52:45:69:df:9e:3b:58:13:40:7a:69:2c:56:6d:32:
         4e:d9:d7:52:2c:f6:87:e4:20:fd:f4:37:73:7b:9d:a3:9b:e9:
         fb:33:86:da:60:dc:fd:51:2a:4c:f1:46:cb:b7:90:ee:7a:22:
         d2:64:fc:6d:12:74:2d:42:33:bf:be:04:bd:f6:e3:75:5f:26:
         77:0a:34:51:b7:e0:0a:4d:22:dd:91:60:88:27:a7:4f:45:91:
         30:91:e2:dc:0f:02:53:f1:42:27:73:c4:3c:e0:bb:ee:33:9b:
         f7:91:a5:36:4b:69:d4:8f:93:73:2f:26:85:92:1b:51:67:75:
         70:02:e1:c6:a7:12:06:51:1e:01:ce:92:f1:cd:1c:6a:49:e2:
         8d:8e:a6:6f:df:de:1e:a1:4f:d2:bd:cb:a1:1c:cd:48:6f:83:
         0b:05:56:09:06:23:f9:73:21:45:f8:a2:09:e4:15:d7:9d:0c:
         e4:c3:33:87:fa:dc:fb:17:96:c1:bd:c5:ae:64:e3:17:96:5b:
         ca:e7:49:fd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org