Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/l3u-NYbkGeye-TLh6aiynZmu-WQ.roa
File:                     l3u-NYbkGeye-TLh6aiynZmu-WQ.roa (raw, json)
Hash identifier:          gcg/iX8WZg0tlxVAvudDrTqogn3Jq8XlTW1/JY1aKOU=
Subject key identifier:   97:7B:BE:35:86:E4:19:EC:9E:F9:32:E1:E9:A8:B2:9D:99:AE:F9:64
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0113
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/l3u-NYbkGeye-TLh6aiynZmu-WQ.roa
Signing time:             Fri 01 Sep 2023 01:34:26 +0000
ROA not before:           Fri 01 Sep 2023 01:34:26 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.189.128.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275 (0x113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:34:26 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=977BBE3586E419EC9EF932E1E9A8B29D99AEF964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d9:3b:d0:2d:0d:b5:73:fb:bb:b6:c5:e4:c7:
                    8c:98:46:6b:2b:6f:08:00:64:e4:d5:59:67:cf:a7:
                    14:1a:9c:10:e9:19:02:3a:e8:55:2a:32:b2:9d:95:
                    3d:2f:ad:bb:ac:1e:f7:bd:f5:0d:6d:29:c1:ad:24:
                    50:84:6e:b6:6c:ee:18:ed:50:8e:63:50:cc:ce:06:
                    fc:9e:9d:d2:4e:99:56:2e:cf:5c:d4:cb:a5:b9:94:
                    74:6b:e0:a0:d6:35:f5:1d:89:40:9f:cc:b6:65:28:
                    be:fa:06:ff:ea:3b:de:ff:3b:b2:6c:ad:12:8e:a4:
                    e9:d5:89:9f:14:17:6a:73:3d:1e:77:a4:66:3a:b2:
                    69:d4:9a:2a:6a:f3:0f:77:35:66:b6:39:8c:45:e0:
                    00:b9:c2:f1:74:ad:34:39:76:8d:86:65:8c:8b:d8:
                    4e:28:88:3c:09:f5:31:f9:7f:a9:67:06:05:e6:1a:
                    c7:8d:d1:6c:55:61:64:91:86:d8:92:43:9c:df:2d:
                    67:0a:6c:65:36:e1:9d:69:2b:ff:75:77:f5:02:d4:
                    0b:a4:00:4a:81:98:af:ad:53:1e:30:5f:d6:cc:d1:
                    c3:99:80:64:17:bb:a8:2e:05:3a:96:e8:cc:a9:7c:
                    09:8c:4e:4e:ce:8a:83:2e:83:e5:6a:ab:c8:11:c8:
                    b7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:7B:BE:35:86:E4:19:EC:9E:F9:32:E1:E9:A8:B2:9D:99:AE:F9:64
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/l3u-NYbkGeye-TLh6aiynZmu-WQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.189.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         17:10:1c:bc:4f:f4:5b:a5:33:81:fa:fc:4f:df:8d:9f:ee:b6:
         8d:04:cd:13:df:b3:55:70:52:b0:95:e1:d4:84:60:a0:c0:1b:
         29:a4:1b:53:22:09:22:dc:5b:57:55:b0:4f:9c:34:da:87:2e:
         52:f5:94:b8:8d:4b:d8:64:c7:c6:2a:49:67:42:bd:68:1b:8a:
         4d:4e:f1:ef:b2:f0:58:a2:ef:e4:90:a6:4a:a7:cc:7b:95:0b:
         ef:16:a5:ff:7b:bb:94:40:8c:51:b8:55:42:ff:38:46:69:c2:
         92:6c:e8:b9:f5:79:d2:d3:98:80:74:55:25:c6:4a:81:c5:48:
         a8:11:2f:93:eb:91:b2:54:f4:42:c3:25:dc:24:dc:31:a8:16:
         95:42:e8:9d:3c:7f:0f:4c:3a:7d:54:68:62:fc:31:ef:67:6c:
         a2:91:9e:4d:01:bb:52:f2:1c:be:b4:1a:81:d6:3f:be:15:31:
         5a:3e:f3:61:98:4e:54:1c:62:60:18:e3:de:c1:bd:64:0a:be:
         3d:df:43:93:29:94:18:17:0e:14:cc:65:ad:ad:fa:ba:b6:fe:
         a4:d2:5e:ee:ab:c2:bd:f9:2a:03:27:85:a5:fc:73:cf:f5:a8:
         26:19:0a:d1:36:87:d4:af:7d:37:c2:5c:63:e1:41:06:a1:22:
         30:d7:9c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org