Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/h6Kf_4lvZS2kNoqR5r4X1RYDVDk.roa
File:                     h6Kf_4lvZS2kNoqR5r4X1RYDVDk.roa (raw, json)
Hash identifier:          KWlNc58GIO3FNDerwDidRl9cS3VCK9V+2HhDwiiA1dg=
Subject key identifier:   87:A2:9F:FF:89:6F:65:2D:A4:36:8A:91:E6:BE:17:D5:16:03:54:39
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       34
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/h6Kf_4lvZS2kNoqR5r4X1RYDVDk.roa
Signing time:             Tue 11 Oct 2022 09:34:19 +0000
ROA not before:           Tue 11 Oct 2022 09:34:19 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        210.235.158.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 11 09:34:19 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=87A29FFF896F652DA4368A91E6BE17D516035439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:da:ab:c2:4d:ce:ba:6c:e4:cc:ff:79:8d:fd:
                    68:6a:85:f9:4c:06:85:b1:ff:2e:c5:15:39:c2:f8:
                    ea:04:42:62:35:67:b5:e4:c3:13:52:8a:da:d9:c5:
                    74:cd:dc:b6:bd:89:2d:22:6c:c9:0f:06:a4:67:ee:
                    53:52:3a:d8:80:e7:39:48:42:03:02:ee:95:0c:0b:
                    5c:5d:6e:4d:3d:51:e8:ba:8a:64:9b:1a:d7:7f:e7:
                    3a:4f:8b:f6:1d:96:7d:c3:14:9d:c9:e3:43:9f:fd:
                    2a:31:ad:c6:05:c5:81:22:f9:08:75:5f:b2:59:eb:
                    90:ae:d8:0d:da:b2:1b:e9:f1:c2:33:5a:40:62:c7:
                    dc:56:75:6a:4d:4b:cb:e1:18:b7:2f:04:b7:19:c2:
                    7e:77:bb:66:af:c0:69:e9:72:69:3d:43:e1:5a:5c:
                    2b:bb:02:24:55:e0:96:77:17:02:cb:78:93:aa:f9:
                    22:62:35:57:ff:57:2f:d6:84:a2:b5:82:cc:33:05:
                    9b:85:61:00:e7:49:3b:08:9b:fb:87:ac:a5:54:d8:
                    96:bc:c4:d8:6a:74:ae:44:e8:db:41:08:af:ad:ba:
                    63:db:c9:1b:28:d8:07:fc:8d:cc:5a:19:31:e0:10:
                    fb:93:fb:64:61:3f:5c:16:d6:b5:c5:c2:a9:98:57:
                    b3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A2:9F:FF:89:6F:65:2D:A4:36:8A:91:E6:BE:17:D5:16:03:54:39
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/h6Kf_4lvZS2kNoqR5r4X1RYDVDk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.235.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cb:22:0d:06:80:5e:32:63:ae:99:d4:d8:55:91:f6:08:cf:ef:
         ed:7b:9c:97:79:3a:69:60:be:c7:4a:5f:0b:17:d1:08:fe:b2:
         df:ac:f1:0e:d8:f9:07:12:77:ea:ff:23:cf:58:28:c0:c9:3a:
         80:6c:d7:5d:71:d3:c5:b3:92:8c:ec:c1:b6:35:8f:18:cd:08:
         1c:86:fa:1f:7b:24:70:a7:83:b9:f7:58:86:d8:25:5b:cd:58:
         18:a5:0e:49:65:37:76:3b:31:f6:ce:62:e8:ef:ea:27:13:ef:
         ab:61:81:5f:94:a8:25:87:89:81:c9:ca:ed:9f:e7:ea:91:a2:
         8f:11:7a:83:4a:d1:81:45:f7:84:d9:db:f4:fb:ee:6c:f8:76:
         df:63:56:d1:c1:bd:c1:4b:5c:45:f7:f1:b1:a6:d7:30:3e:0d:
         a4:70:12:52:82:c1:dd:3a:6d:fe:f6:65:b9:b8:9a:45:ea:03:
         f4:ec:02:81:99:da:b1:9b:f7:f1:15:80:f0:cb:d6:13:0f:5f:
         6d:0a:79:77:df:d1:a8:32:03:86:e0:e6:da:82:f6:32:65:5c:
         ce:a5:69:84:f4:4c:22:f9:b5:5f:87:1b:ff:39:8f:a3:77:56:
         db:32:96:48:49:60:a8:f7:f7:3f:f1:09:96:22:25:1a:2a:2c:
         b5:04:ee:43
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org