Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/zvSBY6xuYQ9NywrW7ZW-yBFIwk0.roa
File:                     zvSBY6xuYQ9NywrW7ZW-yBFIwk0.roa (raw, json)
Hash identifier:          izjv65aubf4Ovbg9f9hK8v3HAr/IEiFjCZs0Ol8BZLw=
Subject key identifier:   CE:F4:81:63:AC:6E:61:0F:4D:CB:0A:D6:ED:95:BE:C8:11:48:C2:4D
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       86
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/zvSBY6xuYQ9NywrW7ZW-yBFIwk0.roa
Signing time:             Tue 18 Oct 2022 02:24:15 +0000
ROA not before:           Tue 18 Oct 2022 02:24:15 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        210.253.162.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:24:15 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=CEF48163AC6E610F4DCB0AD6ED95BEC81148C24D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:86:ee:45:ac:be:01:f1:58:30:e9:82:54:d6:
                    09:a5:57:9f:1b:5c:df:a0:ce:f3:de:c8:4e:40:d4:
                    da:ce:27:0e:cc:21:10:82:72:9c:b8:8e:0c:27:22:
                    e2:d5:23:ab:3d:66:e1:e7:9b:bb:4d:0f:0b:1b:25:
                    cd:ba:99:a0:10:d7:9f:88:f9:a2:5f:35:52:64:97:
                    d8:dd:2f:f4:a9:4e:56:b2:cf:d0:10:da:97:53:c7:
                    10:bf:f8:bc:2c:6c:1a:31:d4:01:16:48:02:26:9b:
                    ec:7f:c7:3f:40:16:40:ad:7b:a4:da:58:31:28:fd:
                    1f:e2:d8:9d:f4:34:6c:43:5e:48:3b:46:17:b6:47:
                    ae:61:f1:be:8b:6c:ad:24:77:ed:8c:fd:c9:36:c8:
                    5f:02:ec:82:79:d3:cc:00:e8:20:24:f3:07:11:82:
                    15:81:d8:98:55:c6:1c:68:72:9e:16:e9:e1:78:0e:
                    b9:29:83:76:18:e6:e6:85:09:9e:ae:3d:33:1c:d9:
                    1e:76:ce:22:76:af:7e:90:29:6d:4d:0e:48:0c:7c:
                    22:78:d0:a8:2a:de:05:7b:53:e6:bf:25:d5:04:73:
                    50:ae:3c:8a:f5:be:c8:6b:a8:ba:12:27:5c:10:f2:
                    24:83:fb:ff:c8:c1:0c:05:c2:7b:49:d1:07:03:aa:
                    8a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F4:81:63:AC:6E:61:0F:4D:CB:0A:D6:ED:95:BE:C8:11:48:C2:4D
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/zvSBY6xuYQ9NywrW7ZW-yBFIwk0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.253.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:32:f8:c1:42:68:75:16:93:05:4a:1f:50:10:e5:53:61:09:
         d7:b9:8c:e9:c4:13:a1:1d:23:ff:92:c0:5c:25:47:56:ea:24:
         ea:a0:3e:33:0e:c0:ac:08:88:f3:94:3d:4f:6b:df:48:55:40:
         e7:b9:f2:24:07:61:68:8e:e5:6e:23:ff:7d:22:a1:cd:d6:b8:
         57:7e:df:73:68:d8:24:78:01:a2:ad:4e:97:66:7b:fb:92:3b:
         89:73:f7:1f:b8:70:3a:7e:8a:7a:86:32:09:68:1d:d4:c0:15:
         6b:fa:e5:f3:de:f9:e4:68:a8:4b:2e:7a:87:a6:0e:51:9a:65:
         fc:b9:4a:4a:d6:14:8b:78:a4:2b:bb:9c:7f:a6:d0:de:b8:9d:
         a4:0b:e5:d9:2a:27:9b:a5:ac:db:da:73:fd:b5:eb:f9:10:e1:
         eb:6e:e5:e9:81:e8:fc:c5:af:52:83:67:d8:9d:30:fe:78:5a:
         a0:d4:63:1c:ed:0d:4e:84:88:bd:d8:1e:f2:92:73:fb:22:61:
         52:9f:3d:8c:3e:03:cb:a9:df:6a:26:62:2a:c9:9d:aa:d9:a3:
         e9:60:12:e3:0d:0a:37:95:d9:bb:b4:2a:1e:ce:3f:f0:84:84:
         90:5a:32:90:86:83:b3:3c:6b:5f:5e:c0:06:62:6f:f4:a0:43:
         44:a0:26:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org