Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/r7VDX3y7xIQU0MSKm4LDphyHNu0.roa
File:                     r7VDX3y7xIQU0MSKm4LDphyHNu0.roa (raw, json)
Hash identifier:          ev8Pv+twO0bmx8wNGdzLXtiGl7j0qqL6U1Edqy1k6AM=
Subject key identifier:   AF:B5:43:5F:7C:BB:C4:84:14:D0:C4:8A:9B:82:C3:A6:1C:87:36:ED
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       EA
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/r7VDX3y7xIQU0MSKm4LDphyHNu0.roa
Signing time:             Fri 01 Sep 2023 01:33:07 +0000
ROA not before:           Fri 01 Sep 2023 01:33:07 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.141.247.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:33:07 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=AFB5435F7CBBC48414D0C48A9B82C3A61C8736ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4d:a6:b5:34:9f:27:54:2a:38:1d:e6:30:b4:
                    49:a7:5e:58:3a:b8:cb:7f:bb:70:2e:d7:b5:57:a0:
                    42:75:4e:a9:ab:e4:4c:8b:1d:1f:b0:21:53:d9:a2:
                    33:73:f0:ce:11:0e:10:aa:1d:2b:a2:b0:a7:c5:e9:
                    c5:39:c5:a8:a4:0d:ec:e9:2a:99:45:56:d8:5b:a3:
                    d6:ad:3a:a1:46:71:34:8b:46:73:9f:ed:e6:40:db:
                    79:e4:29:82:06:73:47:72:61:3f:80:e9:20:51:9a:
                    9e:ec:1a:b2:b3:9f:a4:cf:0c:a4:d1:d9:c1:8e:46:
                    91:8e:1b:8b:e5:2f:bd:dc:8e:6d:93:44:76:2d:90:
                    ec:ef:5e:b1:0d:9b:99:45:f0:da:cf:fc:a5:47:dc:
                    bf:56:41:8b:a9:38:cd:97:6f:bb:d1:db:32:d2:52:
                    54:bf:57:86:81:85:a4:a5:86:c9:37:e2:55:59:28:
                    de:d7:98:a8:40:7a:61:5e:d7:d6:17:bc:fb:12:7a:
                    cd:19:3d:6e:45:52:33:62:54:86:2a:06:0e:69:ae:
                    27:98:8a:71:46:6f:3b:86:99:ba:d7:d5:2f:b2:5c:
                    09:27:dd:cc:2d:1a:2e:a1:3d:a4:d8:2b:0f:ce:78:
                    e8:76:9b:35:3a:47:a1:65:5e:43:49:09:0a:dc:1e:
                    37:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B5:43:5F:7C:BB:C4:84:14:D0:C4:8A:9B:82:C3:A6:1C:87:36:ED
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/r7VDX3y7xIQU0MSKm4LDphyHNu0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.141.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:28:d5:04:18:62:59:22:93:80:72:9a:99:bb:df:7e:06:a1:
         8f:52:bc:a6:43:00:74:7a:a3:c6:d2:0e:92:0e:82:8b:04:ad:
         2c:d3:f4:59:a3:a1:8e:a2:ce:eb:08:5c:99:ab:84:0f:a1:2f:
         f3:fa:78:cf:aa:aa:aa:f9:7f:4d:75:6c:ec:c6:d5:20:89:47:
         5d:e5:ee:65:1b:3c:13:3c:99:75:70:57:7a:e3:3e:e4:9e:b4:
         5a:37:27:60:62:79:25:79:5f:db:33:02:1c:df:36:70:1b:0a:
         f7:ca:20:7b:8b:e4:a6:57:9b:ba:bc:12:75:1a:08:4e:53:3b:
         19:ff:8a:0c:0b:b8:5a:73:fd:20:c5:34:1d:89:c7:d1:5f:b2:
         31:31:1b:be:87:28:e4:e4:47:e9:22:24:6f:5b:f4:cb:d4:b4:
         5c:a7:28:2c:6c:be:f6:46:31:b2:77:64:87:b1:d8:13:fc:4a:
         32:f7:e8:bb:6b:cd:7a:73:c1:ed:be:a9:e5:90:8b:12:ce:80:
         8d:63:e1:f7:82:28:3d:87:f7:42:ab:b6:2d:12:92:09:28:c8:
         20:ee:75:d3:af:05:6b:86:90:f1:f9:18:28:21:47:9e:c6:71:
         67:a5:96:a1:69:39:d6:76:f5:9e:21:ac:69:24:93:01:e5:87:
         d2:e8:f8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org