Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ldUNMBbrU1KmkRwTKDhCt-z9laU.roa
File:                     ldUNMBbrU1KmkRwTKDhCt-z9laU.roa (raw, json)
Hash identifier:          Dn2upBFyxYvjOPwAuEil4ZR2q7NHuHaWTQbeNJUPDzk=
Subject key identifier:   95:D5:0D:30:16:EB:53:52:A6:91:1C:13:28:38:42:B7:EC:FD:95:A5
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       EC
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ldUNMBbrU1KmkRwTKDhCt-z9laU.roa
Signing time:             Fri 01 Sep 2023 01:33:08 +0000
ROA not before:           Fri 01 Sep 2023 01:33:08 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.235.158.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:33:08 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=95D50D3016EB5352A6911C13283842B7ECFD95A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0d:b1:51:48:97:f0:ef:9a:25:6c:47:81:5e:
                    99:a4:34:08:e7:26:f7:ae:c3:aa:b0:30:c5:92:14:
                    cb:ec:d9:04:5b:59:5c:c5:3e:39:b7:09:70:40:7a:
                    44:bb:4e:c7:c9:62:09:fb:6a:fa:1f:30:b2:80:3b:
                    c0:1b:50:08:f2:b3:9a:36:ba:14:07:9c:f3:cd:cc:
                    c5:f8:32:be:c4:5f:34:23:be:ab:96:35:ce:f5:8e:
                    9b:ba:51:7e:24:6e:30:7a:96:04:ce:0d:88:4f:f3:
                    a1:5b:e3:91:5f:f9:40:b5:ca:e1:cd:1a:84:1c:49:
                    05:e1:2d:12:0f:04:8a:b2:c1:99:3c:34:5c:27:8b:
                    21:5f:01:b7:6d:56:e8:64:55:b2:77:d5:2e:2d:2a:
                    e0:a5:cb:c4:7e:b3:53:ea:45:65:d4:c2:9e:1f:81:
                    d8:b8:4e:15:47:f1:a9:a1:7a:d0:76:f9:f8:03:99:
                    1f:cb:e2:f3:e6:03:1d:8b:13:4a:a2:60:01:38:6d:
                    80:26:20:ab:8f:a6:20:ea:9b:a6:c3:99:40:e1:28:
                    55:0d:08:8d:0f:18:31:4e:76:89:24:1e:d1:54:05:
                    13:ab:45:27:38:a7:7f:f6:e5:64:65:28:f0:45:39:
                    45:ee:e5:1f:ca:0c:a9:38:08:e0:f4:79:af:8c:27:
                    60:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D5:0D:30:16:EB:53:52:A6:91:1C:13:28:38:42:B7:EC:FD:95:A5
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ldUNMBbrU1KmkRwTKDhCt-z9laU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.235.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:a0:78:f5:44:6b:a9:b0:bc:25:be:e7:3e:36:87:fb:ed:c5:
         57:8f:7e:7e:8e:ec:30:c9:60:99:44:c2:d7:c3:fe:03:b2:27:
         1f:e0:fa:7f:65:63:b7:a3:68:2b:45:ce:4d:31:b3:ef:93:f2:
         25:4c:89:42:b9:b2:11:be:8b:2c:99:05:27:3e:14:2b:ca:12:
         84:c2:35:4c:e6:3c:c8:4a:fb:1c:34:12:37:bb:45:cd:ac:21:
         3d:ab:0c:c3:85:a6:ad:90:77:3d:da:03:a6:7b:cd:eb:69:89:
         9f:00:57:f8:fc:36:f4:d6:ee:25:70:95:6b:ae:3e:05:75:d9:
         93:55:49:2a:0f:de:e4:ae:94:3d:dc:7b:b6:e1:48:25:71:c2:
         ca:dc:5a:d9:b4:8b:94:f4:80:20:30:03:7c:cb:84:7c:f6:12:
         0a:ab:53:23:5c:30:93:a9:18:54:77:7f:9e:cf:98:7f:e9:44:
         89:eb:f6:f6:09:26:96:ee:4d:e1:7d:09:d5:a4:df:7d:ea:8d:
         fc:60:6a:60:55:2e:e6:cd:70:0e:61:40:ac:a5:41:22:80:5a:
         4c:80:06:1c:ac:71:0b:23:35:40:c6:b9:27:d6:31:36:bb:98:
         4c:0f:18:97:ca:07:15:63:97:72:f5:9a:ba:97:9d:10:97:7e:
         19:ee:35:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org