Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ms8l-i0pXsrJVfXPpPLcTki4uCg.roa
File:                     ms8l-i0pXsrJVfXPpPLcTki4uCg.roa (raw, json)
Hash identifier:          KgSDQRdQMQDVzHzUdiWVIccGX5uyO2qfwNA88BiNwDs=
Subject key identifier:   9A:CF:25:FA:2D:29:5E:CA:C9:55:F5:CF:A4:F2:DC:4E:48:B8:B8:28
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       EE
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ms8l-i0pXsrJVfXPpPLcTki4uCg.roa
Signing time:             Fri 01 Sep 2023 01:33:09 +0000
ROA not before:           Fri 01 Sep 2023 01:33:09 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.235.192.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:33:09 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=9ACF25FA2D295ECAC955F5CFA4F2DC4E48B8B828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:18:d8:05:33:cd:86:86:1a:a9:c0:93:7a:5f:
                    0d:52:71:63:e8:22:0b:1f:4f:25:2e:ea:05:43:78:
                    4f:90:41:3b:fa:0b:8d:84:fc:c8:53:b8:1d:d3:5f:
                    35:41:16:f1:db:cb:b2:d7:96:98:8c:21:0c:ee:fa:
                    c1:e9:eb:59:33:64:94:4b:de:ff:9a:13:0f:e5:33:
                    32:86:37:dd:97:16:d1:5c:a2:da:d1:f7:30:03:52:
                    67:57:f3:15:20:8d:4a:f7:e9:c7:20:44:b5:fd:6f:
                    2d:d0:34:30:4e:cf:5b:cb:7e:84:8c:88:0e:2d:16:
                    86:e2:ea:ab:e6:38:3d:4f:f2:08:4e:df:83:68:e3:
                    2f:89:47:bf:e2:7b:07:13:b3:74:79:da:57:b4:13:
                    80:ab:6e:07:a1:c6:d7:c6:eb:11:11:d7:2a:dc:48:
                    2e:55:26:f0:cd:92:5d:7b:c6:93:4e:1f:02:a5:9b:
                    60:66:ca:3a:f9:20:fb:21:fa:f5:5e:e3:ce:13:26:
                    a1:e2:ac:ab:4b:a1:17:95:a1:a3:4c:e8:1c:80:68:
                    c9:bc:25:93:bf:b3:0c:d8:b9:35:9c:b4:76:52:9b:
                    ad:75:2c:5f:44:70:c1:3f:22:70:c2:93:d1:af:58:
                    6d:f0:c3:1b:b7:64:fe:dd:59:31:94:19:ba:eb:37:
                    6d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:CF:25:FA:2D:29:5E:CA:C9:55:F5:CF:A4:F2:DC:4E:48:B8:B8:28
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ms8l-i0pXsrJVfXPpPLcTki4uCg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.235.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         27:46:da:b0:f9:4d:f3:87:01:5a:72:56:6f:82:a7:18:2e:ff:
         e9:a7:45:c8:41:c4:8a:bd:3a:16:49:a2:31:4b:f5:86:cc:4b:
         de:cc:ea:8f:8d:77:ef:89:20:e5:83:e0:4a:35:ce:c6:f5:ee:
         97:30:86:ad:a3:22:08:8c:31:ba:64:23:c2:81:5e:2d:d8:e0:
         8c:86:f0:8b:7c:61:70:fb:de:2f:74:6b:0c:37:92:dc:34:a8:
         94:b6:e4:60:4e:3d:ce:8c:59:80:cf:be:f2:ab:0a:36:fe:96:
         20:ec:8c:60:4d:2a:cb:66:63:8a:0f:ac:98:cf:3d:5f:f3:c2:
         e2:94:b2:49:36:9c:69:cd:c2:80:14:74:35:51:eb:c0:b6:6d:
         18:06:50:0d:52:45:a3:75:5f:b6:a2:c0:6b:e9:23:2b:e7:55:
         1f:7f:7d:57:db:e5:27:28:14:d5:c6:0c:0d:da:95:ab:77:d5:
         ab:4f:32:84:31:43:1a:2f:4d:f8:9d:70:fd:26:f9:bb:12:fa:
         b1:12:20:0e:4a:ba:57:64:8c:3f:1c:65:68:37:ab:a9:91:58:
         67:96:95:af:92:18:f5:ff:02:1d:ce:26:61:44:85:aa:af:89:
         32:ce:18:36:58:e8:22:ed:5f:d6:04:83:76:9d:e4:36:66:ed:
         76:fc:53:0c
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzc2
MUEzQTlGQUU4N0Y4RjA2OUQ2ODI0NzFDQkUxQzkzNUZCRTMyMTAeFw0yMzA5MDEw
MTMzMDlaFw0yNDA4MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDlBQ0YyNUZBMkQyOTVF
Q0FDOTU1RjVDRkE0RjJEQzRFNDhCOEI4MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpGNgFM82GhhqpwJN6Xw1ScWPoIgsfTyUu6gVDeE+QQTv6C42E
/MhTuB3TXzVBFvHby7LXlpiMIQzu+sHp61kzZJRL3v+aEw/lMzKGN92XFtFcotrR
9zADUmdX8xUgjUr36ccgRLX9by3QNDBOz1vLfoSMiA4tFobi6qvmOD1P8ghO34No
4y+JR7/iewcTs3R52le0E4CrbgehxtfG6xER1yrcSC5VJvDNkl17xpNOHwKlm2Bm
yjr5IPsh+vVe484TJqHirKtLoReVoaNM6ByAaMm8JZO/swzYuTWctHZSm611LF9E
cME/InDCk9GvWG3wwxu3ZP7dWTGUGbrrN22RAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUms8l+i0pXsrJVfXPpPLcTki4uCgwHwYDVR0jBBgwFoAUx2Gjqfrof48GnWgk
ccvhyTX74yEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMzQ3L3gyR2pxZnJvZjQ4R25XZ2tjY3ZoeVRYNzR5RS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3gyR2pxZnJvZjQ4R25XZ2tjY3Zo
eVRYNzR5RS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMzM0Ny9tczhsLWkwcFhzckpWZlhQcFBMY1RraTR1Q2cu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQG0uvAMA0GCSqGSIb3DQEBCwUAA4IBAQAnRtqw+U3zhwFaclZvgqcY
Lv/pp0XIQcSKvToWSaIxS/WGzEvezOqPjXfviSDlg+BKNc7G9e6XMIatoyIIjDG6
ZCPCgV4t2OCMhvCLfGFw+94vdGsMN5LcNKiUtuRgTj3OjFmAz77yqwo2/pYg7Ixg
TSrLZmOKD6yYzz1f88LilLJJNpxpzcKAFHQ1UevAtm0YBlANUkWjdV+2osBr6SMr
51Uff31X2+UnKBTVxgwN2pWrd9WrTzKEMUMaL034nXD9Jvm7EvqxEiAOSrpXZIw/
HGVoN6upkVhnlpWvkhj1/wIdziZhRIWqr4kyzhg2WOgi7V/WBIN2neQ2Zu12/FMM
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org