Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/z1gedbqttjKXPWhOcMcR3uvEcY0.roa
File:                     z1gedbqttjKXPWhOcMcR3uvEcY0.roa (raw, json)
Hash identifier:          dQmRo1AK2P/uWbAuUX2MhV4gj22ThAVSoqd57w/R258=
Subject key identifier:   CF:58:1E:75:BA:AD:B6:32:97:3D:68:4E:70:C7:11:DE:EB:C4:71:8D
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0138
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/z1gedbqttjKXPWhOcMcR3uvEcY0.roa
Signing time:             Sun 01 Oct 2023 01:30:52 +0000
ROA not before:           Sun 01 Oct 2023 01:30:52 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        210.253.142.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:30:52 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=CF581E75BAADB632973D684E70C711DEEBC4718D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:12:47:d1:de:85:11:e7:0f:d1:1f:5f:78:29:
                    d6:02:ed:4c:7c:93:99:42:8f:c0:d3:18:08:f1:5c:
                    85:87:25:ab:c1:eb:3b:35:f3:8c:1f:27:86:af:60:
                    df:b8:69:1b:b3:8a:aa:f2:e8:f0:b6:ed:06:83:ce:
                    9c:40:ee:53:66:4c:af:e2:13:cd:e4:00:78:1f:4b:
                    fd:7d:dd:b1:0e:6f:ca:ae:6f:a8:f4:8b:02:9c:cd:
                    69:a6:50:aa:74:84:6d:d3:a8:51:cb:65:34:7e:71:
                    11:32:11:65:52:d1:70:08:fa:70:e7:31:d2:cd:70:
                    61:1a:46:d6:80:9e:bb:3b:d2:71:12:0d:5a:a2:97:
                    d5:b9:e2:fd:5a:d4:eb:91:51:6a:54:fb:33:0f:95:
                    e0:8d:e0:34:32:aa:56:9c:00:e5:4b:32:1b:ec:21:
                    26:a6:6e:1f:c4:ef:59:1c:c2:64:b8:1a:3f:54:16:
                    d8:98:76:6c:2e:b2:08:a8:fe:f6:d6:66:5f:43:11:
                    3c:9a:52:d7:1a:f7:d8:1b:91:f9:08:f5:4a:9e:45:
                    4a:9c:d2:1d:91:48:8f:9b:1d:11:fa:c1:e9:87:8d:
                    9c:04:a7:13:70:91:33:4a:ca:d4:91:2e:9d:ab:d2:
                    4c:3d:e4:3a:1b:1f:d2:31:3b:63:67:06:1d:e8:9f:
                    41:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:58:1E:75:BA:AD:B6:32:97:3D:68:4E:70:C7:11:DE:EB:C4:71:8D
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/z1gedbqttjKXPWhOcMcR3uvEcY0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.253.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         be:78:f4:9a:35:a7:19:cc:b5:59:34:53:e7:e7:13:36:ea:84:
         25:8e:03:b6:9b:cf:b6:a9:f3:29:eb:67:d7:33:1a:f0:cf:8f:
         c1:1e:7d:d2:26:6b:a5:cc:0f:66:5e:91:4c:8f:01:7c:eb:0e:
         36:e5:f7:74:7a:2c:93:97:23:d6:07:19:27:f6:36:9a:78:0c:
         6d:fa:46:27:11:5f:3c:ab:07:fe:67:cd:5d:5a:74:f9:00:b9:
         1f:7d:f2:e3:ee:74:c0:34:2d:4f:0d:55:73:22:b0:41:d5:d1:
         eb:18:43:ee:f4:28:4b:f0:b4:9d:43:b8:d4:25:38:06:67:2b:
         ba:c7:66:52:8b:9f:b1:d9:e8:09:51:e8:01:ab:c1:ce:42:ca:
         58:77:33:32:be:4a:76:4f:76:6c:dd:61:24:d0:9d:75:b9:54:
         ff:53:f6:a1:07:1f:68:dc:68:58:17:96:46:c7:80:a7:81:a7:
         ef:5a:55:39:92:66:2e:03:06:fc:e4:44:45:04:8d:b4:ba:11:
         6c:02:a8:61:bf:df:d6:f4:e1:bb:a5:82:58:bb:80:1d:c3:f7:
         40:6a:ca:20:da:2b:54:af:9a:10:3c:3e:91:ca:fd:c9:e8:bb:
         e7:7f:b8:02:57:67:b7:ca:20:9a:d7:a2:17:5d:47:d4:ee:df:
         0f:9a:62:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org