Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/nRpCThcpnIIkUr1Yne4dKOSiqhY.roa
File:                     nRpCThcpnIIkUr1Yne4dKOSiqhY.roa (raw, json)
Hash identifier:          XC7QtLkKDqIs5QIOVdeP+huxYjh8EZAyN/jx31DGIog=
Subject key identifier:   9D:1A:42:4E:17:29:9C:82:24:52:BD:58:9D:EE:1D:28:E4:A2:AA:16
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       015D
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/nRpCThcpnIIkUr1Yne4dKOSiqhY.roa
Signing time:             Sun 01 Oct 2023 01:35:46 +0000
ROA not before:           Sun 01 Oct 2023 01:35:46 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        218.230.0.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349 (0x15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:35:46 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=9D1A424E17299C822452BD589DEE1D28E4A2AA16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:17:97:03:6d:5e:bc:0e:07:d3:2d:57:70:b2:
                    49:57:8b:1d:8b:46:19:f0:1e:d1:1e:bd:26:ee:38:
                    53:ed:3c:24:12:b5:37:63:56:f9:7f:88:da:43:42:
                    f8:ec:11:32:fb:d1:fd:95:46:5b:42:9f:28:cb:b8:
                    77:29:67:ab:2a:b8:af:f1:32:d8:48:e6:cd:63:d2:
                    1d:0b:b8:e0:db:4c:6d:71:3b:fe:c6:7b:f4:9a:45:
                    82:c8:c7:e7:05:e1:22:b0:60:c2:ce:57:d2:b2:50:
                    bd:74:58:28:83:10:5a:10:dd:b6:01:7a:23:da:0e:
                    58:ac:a9:8a:7c:82:d0:c3:ad:42:81:09:b3:38:2d:
                    d9:4e:23:94:b7:d9:bc:d9:83:ae:7a:a2:d5:74:ac:
                    8a:e9:e4:b7:c4:ab:7b:c5:7d:78:24:94:94:a9:a8:
                    8d:46:a1:c8:2d:4b:ad:99:c7:e4:2c:a3:2a:06:d6:
                    3e:8c:09:8a:94:96:65:09:94:0e:36:a8:e0:05:95:
                    d1:12:81:a0:a6:79:7a:3f:fc:cc:d0:82:ce:43:f1:
                    e8:11:45:c9:e9:62:5e:c2:9e:b8:7f:5c:a6:26:65:
                    d5:f8:13:ed:d6:c7:6b:be:03:20:ae:87:ec:33:4d:
                    34:33:25:dd:de:17:30:e9:45:44:fe:fe:8f:6a:67:
                    4b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:1A:42:4E:17:29:9C:82:24:52:BD:58:9D:EE:1D:28:E4:A2:AA:16
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/nRpCThcpnIIkUr1Yne4dKOSiqhY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.230.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         1c:2b:d6:20:81:53:af:49:53:55:3e:27:db:31:f6:93:9b:ab:
         19:45:51:3f:ad:a3:12:6e:a9:82:e6:5f:94:2f:4d:a0:65:da:
         1a:2f:f0:dc:9f:56:83:c7:0f:c2:7e:e3:fd:6f:38:c7:5b:a3:
         81:97:97:09:ad:5f:58:db:bb:bf:44:7f:ec:11:42:58:12:3d:
         07:c5:03:14:77:84:53:6b:c2:33:63:00:bc:ac:96:09:00:db:
         df:f0:4b:95:ef:ec:56:38:f4:04:85:09:ce:3f:75:24:8f:e7:
         54:a9:0f:f4:9f:51:ca:7b:e1:10:35:9b:94:26:80:46:b5:f1:
         a1:ac:ee:92:b6:87:cc:8e:43:42:fa:ab:68:97:f7:2f:7c:a2:
         2e:d1:b2:39:3b:c2:27:48:d7:74:95:97:08:a8:10:30:86:71:
         b9:df:44:c9:5e:87:45:23:74:88:a0:85:17:f7:fc:90:05:24:
         ed:58:f0:9d:33:08:03:a3:97:c4:44:52:b6:af:95:78:f6:56:
         e8:26:dc:6a:ef:23:03:8e:a0:96:e5:d0:36:77:f0:34:0c:a1:
         3a:c3:a9:4b:48:06:98:c6:ab:b8:01:2a:ba:e7:d0:57:f7:0e:
         00:cf:4e:3a:1b:e9:38:cd:06:9c:48:ed:a7:81:67:59:5d:3d:
         38:e0:1b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org