Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/khoNCAXUOXv0yrzIPCv8JJpJzeI.roa
File:                     khoNCAXUOXv0yrzIPCv8JJpJzeI.roa (raw, json)
Hash identifier:          5D3Gma4HaVIqNKaLkZ6aDxHKhqJI2Lo6C79yGsABA2c=
Subject key identifier:   92:1A:0D:08:05:D4:39:7B:F4:CA:BC:C8:3C:2B:FC:24:9A:49:CD:E2
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0157
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/khoNCAXUOXv0yrzIPCv8JJpJzeI.roa
Signing time:             Sun 01 Oct 2023 01:35:44 +0000
ROA not before:           Sun 01 Oct 2023 01:35:44 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        218.225.81.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 343 (0x157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:35:44 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=921A0D0805D4397BF4CABCC83C2BFC249A49CDE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4f:a3:cf:1b:6d:4d:c6:c7:0e:27:5a:b0:91:
                    9c:09:57:ae:5a:e4:a1:90:88:5e:ee:cc:d6:ab:aa:
                    6d:18:c0:bf:2b:30:8d:3a:6f:c9:19:31:f2:f9:d8:
                    7f:1a:ea:8f:67:f8:7a:30:62:fb:31:29:bc:dc:83:
                    33:a5:36:78:09:33:9c:6a:7f:57:83:ef:4e:72:26:
                    99:a6:ac:f9:7c:86:45:c7:e1:32:6b:3b:ee:fd:3e:
                    07:3c:d8:82:6c:81:21:9d:cb:30:96:62:ee:a9:d6:
                    19:34:a0:ae:67:80:7a:54:60:b5:a8:9b:49:4e:ce:
                    e4:89:d5:a6:cc:ad:b1:1d:a5:c5:ae:8c:91:98:53:
                    71:db:1c:cd:08:15:e2:9d:4b:13:fb:ab:e9:e5:c9:
                    d0:3c:84:6a:a6:d1:ff:bf:41:f4:45:84:55:49:09:
                    db:1a:c6:4a:73:4a:b2:9b:3a:2c:9d:d3:b4:ab:1d:
                    08:4e:87:66:be:de:8e:14:48:cd:29:d9:90:da:a1:
                    64:e2:18:73:eb:58:80:6c:e0:7f:bd:cc:db:7d:c7:
                    ce:78:ec:4f:f4:cb:b2:1f:0e:18:29:2e:64:9e:f8:
                    2f:45:a6:7c:83:ac:45:88:5c:ed:f7:5b:59:14:b0:
                    ab:e4:9e:de:99:84:99:e6:f4:35:41:2e:4b:35:22:
                    6a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:1A:0D:08:05:D4:39:7B:F4:CA:BC:C8:3C:2B:FC:24:9A:49:CD:E2
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/khoNCAXUOXv0yrzIPCv8JJpJzeI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.225.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:72:78:23:82:dc:33:df:6e:68:78:5f:97:d3:e2:3b:96:05:
         51:12:2e:bf:38:4b:12:0f:a9:d3:cc:ea:33:07:4d:a3:1f:7b:
         03:41:ad:ef:50:24:64:c4:b0:61:11:92:de:1b:c6:8f:30:49:
         7e:ba:fc:66:45:5b:2a:cd:cf:f4:f6:e7:ee:6e:ce:02:42:cb:
         6e:bf:9a:a8:f2:31:4a:11:3e:12:da:4f:6c:af:3b:b5:64:73:
         a1:e8:8c:55:2f:d9:de:5f:cb:d0:f9:dc:df:a1:3f:0d:e4:a2:
         61:bb:46:77:71:ab:ee:75:de:19:a5:81:5f:43:9f:be:db:ce:
         58:1d:99:05:6b:61:19:88:c9:5a:ea:64:4f:6e:15:32:d5:1f:
         e0:7e:8a:b6:78:dd:e2:c6:b8:c0:06:f4:be:57:a7:89:21:52:
         fb:47:19:d4:ed:92:e0:3a:10:be:ff:2a:af:21:b5:8c:42:92:
         17:7a:58:81:58:38:04:38:6b:87:33:6f:52:de:19:8c:e5:71:
         6b:5e:81:b2:74:e8:6b:a3:68:8f:78:b2:aa:44:e0:be:66:a9:
         b9:3d:b0:29:88:34:22:c0:f4:c1:c4:0a:a9:5b:40:f3:96:6c:
         5d:6c:c1:5f:e3:03:ab:be:12:e0:22:e7:06:a6:23:5d:1a:6d:
         e9:8d:c3:3e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzc2
MUEzQTlGQUU4N0Y4RjA2OUQ2ODI0NzFDQkUxQzkzNUZCRTMyMTAeFw0yMzEwMDEw
MTM1NDRaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDkyMUEwRDA4MDVENDM5
N0JGNENBQkNDODNDMkJGQzI0OUE0OUNERTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHT6PPG21NxscOJ1qwkZwJV65a5KGQiF7uzNarqm0YwL8rMI06
b8kZMfL52H8a6o9n+HowYvsxKbzcgzOlNngJM5xqf1eD705yJpmmrPl8hkXH4TJr
O+79Pgc82IJsgSGdyzCWYu6p1hk0oK5ngHpUYLWom0lOzuSJ1abMrbEdpcWujJGY
U3HbHM0IFeKdSxP7q+nlydA8hGqm0f+/QfRFhFVJCdsaxkpzSrKbOiyd07SrHQhO
h2a+3o4USM0p2ZDaoWTiGHPrWIBs4H+9zNt9x8547E/0y7IfDhgpLmSe+C9FpnyD
rEWIXO33W1kUsKvknt6ZhJnm9DVBLks1Imp/AgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUkhoNCAXUOXv0yrzIPCv8JJpJzeIwHwYDVR0jBBgwFoAUx2Gjqfrof48GnWgk
ccvhyTX74yEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMzQ3L3gyR2pxZnJvZjQ4R25XZ2tjY3ZoeVRYNzR5RS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3gyR2pxZnJvZjQ4R25XZ2tjY3Zo
eVRYNzR5RS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMzM0Ny9raG9OQ0FYVU9YdjB5cnpJUEN2OEpKcEp6ZUku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQA2uFRMA0GCSqGSIb3DQEBCwUAA4IBAQDScngjgtwz325oeF+X0+I7
lgVREi6/OEsSD6nTzOozB02jH3sDQa3vUCRkxLBhEZLeG8aPMEl+uvxmRVsqzc/0
9ufubs4CQstuv5qo8jFKET4S2k9srzu1ZHOh6IxVL9neX8vQ+dzfoT8N5KJhu0Z3
cavudd4ZpYFfQ5++285YHZkFa2EZiMla6mRPbhUy1R/gfoq2eN3ixrjABvS+V6eJ
IVL7RxnU7ZLgOhC+/yqvIbWMQpIXeliBWDgEOGuHM29S3hmM5XFrXoGydOhro2iP
eLKqROC+Zqm5PbApiDQiwPTBxAqpW0DzlmxdbMFf4wOrvhLgIucGpiNdGm3pjcM+
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org