Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/nmeTcKUMqCh4g1MYi3eB-lU0LhU.roa
File:                     nmeTcKUMqCh4g1MYi3eB-lU0LhU.roa (raw, json)
Hash identifier:          c6y4ZyDYPsea5EB3vwDIh30tU9n/i62Tq6ySHTPv9m0=
Subject key identifier:   9E:67:93:70:A5:0C:A8:28:78:83:53:18:8B:77:81:FA:55:34:2E:15
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0107
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/nmeTcKUMqCh4g1MYi3eB-lU0LhU.roa
Signing time:             Fri 01 Sep 2023 01:33:20 +0000
ROA not before:           Fri 01 Sep 2023 01:33:20 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.188.144.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:33:20 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=9E679370A50CA828788353188B7781FA55342E15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:80:97:c1:d1:a7:c3:da:bf:6e:2d:cf:ff:4c:
                    7f:c2:1b:b5:b5:d9:73:87:bd:5e:14:28:f3:63:18:
                    02:5a:bc:54:3b:1b:d0:3f:a4:4c:14:3c:79:6f:7f:
                    fb:51:18:b2:56:2c:42:2a:af:a8:94:24:5f:0b:d5:
                    f4:a0:fc:5b:4a:b9:59:8a:ac:f5:45:01:9d:2d:a3:
                    d4:ef:2a:6d:0b:1f:91:db:6f:ea:fe:ff:2a:20:b9:
                    54:c7:58:0b:70:14:3f:7f:04:40:28:3d:5b:85:36:
                    45:a7:5e:73:05:43:98:3f:3a:cf:35:a8:f5:d4:5a:
                    27:02:35:de:31:44:7a:67:35:28:6f:ca:01:26:ac:
                    3a:93:b4:51:9a:94:a6:9b:49:d9:42:43:96:2a:47:
                    99:ce:98:df:11:a6:e1:c0:12:cc:f1:de:45:8e:af:
                    a2:24:48:c8:3a:83:00:17:e9:8d:46:30:74:0f:59:
                    09:a3:e3:56:4c:6c:9f:c1:2c:1d:03:c0:a3:76:84:
                    75:23:6f:49:83:86:3b:30:8b:c5:87:c3:41:e1:ae:
                    0c:2b:00:ad:6f:37:9e:fb:90:ce:8e:85:49:ec:b6:
                    4a:f5:8b:e9:7e:73:a9:4c:08:c7:bd:77:da:c2:13:
                    72:78:cd:0f:ed:b7:6a:09:92:e0:f3:09:42:0e:05:
                    d7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:67:93:70:A5:0C:A8:28:78:83:53:18:8B:77:81:FA:55:34:2E:15
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/nmeTcKUMqCh4g1MYi3eB-lU0LhU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:86:69:c1:da:fb:a6:bf:f9:1d:55:02:7a:9f:2b:17:9d:b8:
         4e:b6:5b:55:9d:74:79:62:89:4d:90:ed:6f:6f:f9:46:8a:99:
         8a:24:eb:bc:38:5d:53:80:52:11:93:ab:c5:78:e7:3d:0a:ef:
         66:7e:9a:dc:a2:36:76:59:6f:d0:fe:1d:2a:40:e8:0c:0a:bf:
         cf:c2:10:ea:81:d5:cd:04:77:f0:dd:f5:42:ea:f2:34:01:94:
         76:aa:66:29:3b:73:02:9b:92:aa:00:d1:8e:53:66:eb:bb:b2:
         a3:e1:9f:84:d4:e6:69:24:a3:b1:d3:37:d0:4d:0c:83:88:c4:
         ab:e4:d1:b4:9f:6d:37:85:86:be:21:6b:e7:94:4d:40:54:0e:
         64:98:57:d4:e4:84:43:48:d8:d8:c5:3a:2c:b7:09:7d:93:9b:
         ee:20:98:dd:ed:bd:29:2e:ad:14:e6:d9:e2:ac:c7:2a:35:54:
         16:f5:cd:d9:a1:58:b7:f0:7f:17:8b:d7:1a:07:00:7b:d6:9a:
         72:75:db:a8:ea:71:04:62:31:ae:ff:7f:35:3e:d0:7c:ad:5b:
         60:ff:ba:86:f4:ce:89:39:c2:b3:2c:51:78:df:0a:f7:5c:96:
         61:48:32:07:90:76:2b:c9:a2:44:8d:a9:f0:96:6f:e7:e9:8c:
         41:cf:58:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org