Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/qxTeAc3B8l3P1rx5JF_nlHeNnhg.roa
File:                     qxTeAc3B8l3P1rx5JF_nlHeNnhg.roa (raw, json)
Hash identifier:          /oOGIsfvc4GHSM2C8MZ+Io7hgr1gNFunPC4V9pC1LyI=
Subject key identifier:   AB:14:DE:01:CD:C1:F2:5D:CF:D6:BC:79:24:5F:E7:94:77:8D:9E:18
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       4B
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/qxTeAc3B8l3P1rx5JF_nlHeNnhg.roa
Signing time:             Tue 11 Oct 2022 09:44:17 +0000
ROA not before:           Tue 11 Oct 2022 09:44:17 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        210.188.134.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 11 09:44:17 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=AB14DE01CDC1F25DCFD6BC79245FE794778D9E18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7c:09:1c:b1:1a:8f:14:e9:da:e8:41:f1:13:
                    a2:02:a2:a8:5e:fb:37:5c:8b:2e:c9:54:78:33:96:
                    f4:8c:b3:ff:bf:33:af:49:86:58:5c:6b:61:6c:0c:
                    d9:35:32:53:fe:66:dc:a7:56:c4:7a:18:79:3e:71:
                    c6:e4:c2:9e:0f:d8:1e:4b:ce:ce:bd:d9:57:5f:6e:
                    85:0b:4f:5d:0d:80:0b:e5:b9:e0:bd:28:df:d9:6f:
                    dd:9f:67:ea:46:92:9a:bb:a7:7b:6e:95:44:25:dc:
                    68:87:85:dc:c8:0f:79:fb:be:20:c2:e4:27:b8:a1:
                    48:fa:21:a1:87:71:bf:cc:ab:3e:ff:3d:f3:a5:2c:
                    92:ab:2c:2b:49:5d:47:f5:0c:25:f0:ca:d8:4a:1b:
                    0a:c4:39:50:d7:ff:e8:eb:0a:e6:fd:b4:01:ca:df:
                    55:21:ed:35:73:c7:c1:4c:9a:e9:77:af:39:64:22:
                    25:23:7d:77:da:c4:28:5c:2c:67:b6:52:08:8f:bf:
                    40:3a:7a:7c:3b:3c:2d:b0:a1:73:37:3a:c3:23:18:
                    da:f0:b3:4b:c6:d5:75:53:1d:4f:23:8e:95:fc:c7:
                    01:0f:3a:39:41:87:dc:65:fc:5e:88:3e:1f:a0:a5:
                    34:3a:5a:14:06:75:d8:94:36:f3:79:40:b4:c8:35:
                    aa:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:14:DE:01:CD:C1:F2:5D:CF:D6:BC:79:24:5F:E7:94:77:8D:9E:18
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/qxTeAc3B8l3P1rx5JF_nlHeNnhg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:15:de:a7:fb:04:45:06:cb:23:cf:6e:12:3b:f2:e2:7d:77:
         9b:c8:05:e4:30:3c:42:8b:09:79:89:c8:90:72:1a:87:82:5f:
         d2:9e:eb:f8:b3:dd:b2:80:13:7f:d0:5c:63:10:2b:62:49:31:
         0f:52:f9:1d:a8:ba:bb:17:45:aa:eb:61:6d:9c:06:08:7b:d5:
         f9:39:bc:75:3f:6c:4b:a8:fe:1a:0b:34:fc:68:41:38:31:dc:
         e1:af:c4:bf:d4:5c:79:33:ea:df:15:5d:f4:a4:21:2b:85:fc:
         80:84:2c:08:7c:1a:cd:a5:a4:3c:e2:62:1d:ed:ad:52:04:f6:
         52:f7:5c:99:7e:21:47:99:03:8a:58:e0:ca:24:43:20:ce:88:
         9c:9e:e9:a3:45:06:7d:09:62:c2:3b:8d:be:42:6a:68:61:34:
         85:3a:fc:86:98:b5:a1:79:73:25:ae:f1:2f:f7:4c:ce:0d:21:
         fe:53:a4:28:92:b3:b6:2f:e8:1b:7d:5a:8e:58:b2:23:a0:ff:
         9b:09:d8:99:3d:8f:72:3b:af:54:e2:8d:2d:9b:3f:dd:61:33:
         74:1b:22:dd:b1:b3:21:75:f5:90:1b:b5:27:ca:3e:44:99:b9:
         e5:55:9e:8d:11:b4:18:ca:ac:d6:42:a8:f6:0b:92:24:e3:b5:
         6b:d3:a0:19
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org