Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/0TGDq7uOcquZEES9Ws7d4vZbcRQ.roa
File:                     0TGDq7uOcquZEES9Ws7d4vZbcRQ.roa (raw, json)
Hash identifier:          nuloj5+yKIL0IB8Skf6zF6Md7Cx5zXuKAAf7fpw74ZA=
Subject key identifier:   D1:31:83:AB:BB:8E:72:AB:99:10:44:BD:5A:CE:DD:E2:F6:5B:71:14
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       19
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/0TGDq7uOcquZEES9Ws7d4vZbcRQ.roa
Signing time:             Tue 11 Oct 2022 09:26:12 +0000
ROA not before:           Tue 11 Oct 2022 09:26:12 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        210.199.0.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 11 09:26:12 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=D13183ABBB8E72AB991044BD5ACEDDE2F65B7114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b6:e3:a8:8c:8f:e1:ed:79:bf:97:6e:b8:ee:
                    c6:5c:7a:07:84:68:a3:97:07:f0:c9:7a:c4:aa:35:
                    91:e5:68:ef:73:82:01:f4:52:76:2a:73:8c:98:19:
                    39:74:2c:e5:df:cf:b9:17:dc:30:4e:97:81:66:ae:
                    a9:6e:51:28:6e:b6:72:52:ec:89:10:f6:ae:e6:12:
                    2f:1d:66:52:fe:04:77:27:e4:61:9e:9c:68:f7:34:
                    bf:3d:87:68:67:7b:ed:12:3b:1a:f2:3e:c3:64:42:
                    51:1e:cb:51:8b:f0:65:9e:85:4e:23:ca:1a:6e:55:
                    c1:35:17:93:c2:44:39:21:e8:c3:ee:02:25:d6:e2:
                    49:fb:ad:05:23:40:2e:e9:da:94:7f:43:0a:19:d4:
                    77:be:df:e2:a4:00:89:08:31:70:6c:22:17:d5:d7:
                    67:07:e2:21:8a:4f:ea:db:47:c0:56:c7:7b:ec:a3:
                    92:16:52:dc:64:7c:0f:67:1b:30:07:90:4f:96:77:
                    74:2f:a3:ee:3a:7d:f5:df:b3:c3:75:ba:b9:92:b8:
                    b0:ee:d6:fd:12:cd:aa:69:e1:ef:9d:6c:08:8b:d1:
                    12:09:de:80:0a:2f:25:aa:33:12:12:f9:43:c9:06:
                    37:ab:68:e2:b0:77:d0:0d:7d:4d:33:15:7f:01:2d:
                    e8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:31:83:AB:BB:8E:72:AB:99:10:44:BD:5A:CE:DD:E2:F6:5B:71:14
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/0TGDq7uOcquZEES9Ws7d4vZbcRQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.199.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         58:53:5d:ef:88:c3:40:67:c1:82:dc:cb:56:78:e2:0f:62:84:
         52:19:a1:48:e2:be:3e:ff:63:3f:d6:08:c3:71:55:30:9d:9f:
         03:2d:20:df:97:58:5f:da:3c:1c:b3:da:10:a0:5c:c8:c5:9a:
         23:18:73:32:c4:a7:4e:26:87:83:fc:89:23:74:de:22:92:ec:
         49:a0:78:03:22:88:fe:54:71:20:5f:94:7a:3d:ce:3d:12:6a:
         3b:72:b0:15:9f:98:da:5f:d3:07:15:4c:4f:f6:21:62:2c:47:
         ea:8b:a0:87:e5:4b:d5:43:7d:0a:90:a5:a3:34:ea:f5:54:25:
         26:b3:2f:c9:d5:7f:af:f1:23:f2:44:18:a4:d7:e5:ba:da:04:
         71:58:6d:64:12:9f:5b:ab:78:0b:39:15:5d:51:75:2f:e3:21:
         c2:d3:62:34:10:0d:97:42:5d:a6:2f:92:5d:4a:3e:5e:27:46:
         77:93:fb:2d:71:84:f4:30:24:14:06:57:f5:6f:b8:9f:3f:e5:
         fd:64:6e:05:68:ab:7a:1e:e5:13:72:ea:7e:8f:c1:16:aa:a0:
         89:2c:87:4b:23:39:eb:bf:10:07:01:97:c6:fe:36:40:64:02:
         99:61:d3:f4:38:23:f5:d9:c9:74:f0:74:5d:32:19:b3:6c:ea:
         d7:87:72:8f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org