Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/1uVqbbKNdH6_qoVIee3t-SgD2s0.roa
File:                     1uVqbbKNdH6_qoVIee3t-SgD2s0.roa (raw, json)
Hash identifier:          sTVIjiQ1c9Zce9qmyEOYwX1pJap/ZwR1xy4FbPw/4F4=
Subject key identifier:   D6:E5:6A:6D:B2:8D:74:7E:BF:AA:85:48:79:ED:ED:F9:28:03:DA:CD
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0160
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/1uVqbbKNdH6_qoVIee3t-SgD2s0.roa
Signing time:             Sun 01 Oct 2023 01:35:47 +0000
ROA not before:           Sun 01 Oct 2023 01:35:47 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        222.225.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352 (0x160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:35:47 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=D6E56A6DB28D747EBFAA854879EDEDF92803DACD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9f:78:30:84:37:37:48:8f:2f:32:90:e8:2e:
                    0d:25:6b:d5:e6:c8:70:93:04:b6:9f:4c:29:d9:fe:
                    57:34:6c:0c:b6:0b:da:b3:2f:c6:7d:4b:3a:58:8b:
                    40:4e:11:78:bd:d0:bc:0f:c4:8a:cd:34:17:1e:f4:
                    89:e6:d9:fb:15:67:80:76:37:20:e5:8a:9b:4b:ff:
                    2f:ec:c1:6d:fb:e0:01:dc:5b:38:ad:70:f8:dc:8b:
                    de:21:be:83:5a:fc:df:d9:5b:04:fc:9e:a1:b2:59:
                    97:81:25:a9:d9:f8:db:39:4f:b0:8b:42:80:fe:bc:
                    2f:42:5d:74:9e:4d:35:3f:05:22:c3:0b:3e:1c:84:
                    4e:23:a4:2e:41:35:9d:27:8a:99:21:ac:a3:4e:de:
                    37:cd:94:6d:00:3e:5e:78:7d:2a:4b:ba:bb:70:0c:
                    c1:fb:b1:f8:42:9e:09:53:2e:2f:b5:e5:cb:83:72:
                    e6:70:b4:2d:cb:f6:1c:6a:03:3a:c7:b2:e7:0b:7f:
                    9e:f9:05:2e:34:cc:e4:00:59:42:86:7b:52:71:6e:
                    b8:e2:a6:d0:6e:5c:8c:5e:9d:ed:40:14:ec:c2:f1:
                    84:e0:c7:11:6e:11:4f:be:58:c1:4a:38:c7:45:b2:
                    c2:fe:28:b7:1e:71:79:93:85:e9:df:2f:34:86:0c:
                    30:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E5:6A:6D:B2:8D:74:7E:BF:AA:85:48:79:ED:ED:F9:28:03:DA:CD
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/1uVqbbKNdH6_qoVIee3t-SgD2s0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.225.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         78:62:25:dc:0b:a1:7f:ba:18:fc:52:23:f4:0d:fe:41:53:be:
         20:ce:82:c8:85:ba:f1:da:99:3b:a0:ee:32:23:10:07:61:a8:
         04:7c:ba:fa:c4:95:54:5f:6e:52:b8:86:ba:7f:42:c7:0b:d4:
         fc:59:e9:26:13:10:1d:8e:6c:c6:52:d3:70:d5:5a:4b:e1:27:
         da:3d:c1:91:83:21:f4:d1:86:7f:38:36:a9:e8:47:80:75:91:
         35:5d:a2:a5:56:5d:95:04:8b:0c:9f:8e:b0:73:f3:22:66:e8:
         52:b9:af:1c:13:ac:7b:04:44:02:27:8c:eb:b2:75:06:38:54:
         1b:5a:72:ff:14:21:12:c5:ef:ed:07:c8:cc:fd:09:d3:36:ac:
         46:e5:32:a5:a6:47:2f:7b:47:eb:90:62:16:84:ad:88:58:c3:
         2a:05:fa:54:93:cc:25:5f:c2:a3:24:39:0b:b2:74:6b:00:4c:
         0d:b5:7c:4a:3c:8c:5d:e3:b4:cd:93:11:64:6e:61:c7:97:8a:
         04:56:7a:18:bc:3f:f7:1d:0b:0f:5f:d1:a1:66:89:b4:54:c7:
         e0:85:06:29:38:ef:b4:9b:80:72:f7:de:2f:97:91:c9:02:48:
         ac:3e:2e:16:73:18:31:bd:d9:e2:36:43:c6:64:79:38:07:de:
         19:6f:3b:25
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzc2
MUEzQTlGQUU4N0Y4RjA2OUQ2ODI0NzFDQkUxQzkzNUZCRTMyMTAeFw0yMzEwMDEw
MTM1NDdaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEQ2RTU2QTZEQjI4RDc0
N0VCRkFBODU0ODc5RURFREY5MjgwM0RBQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKn3gwhDc3SI8vMpDoLg0la9XmyHCTBLafTCnZ/lc0bAy2C9qz
L8Z9SzpYi0BOEXi90LwPxIrNNBce9Inm2fsVZ4B2NyDliptL/y/swW374AHcWzit
cPjci94hvoNa/N/ZWwT8nqGyWZeBJanZ+Ns5T7CLQoD+vC9CXXSeTTU/BSLDCz4c
hE4jpC5BNZ0nipkhrKNO3jfNlG0APl54fSpLurtwDMH7sfhCnglTLi+15cuDcuZw
tC3L9hxqAzrHsucLf575BS40zOQAWUKGe1JxbrjiptBuXIxene1AFOzC8YTgxxFu
EU++WMFKOMdFssL+KLcecXmThenfLzSGDDBfAgMBAAGjggInMIICIzAdBgNVHQ4E
FgQU1uVqbbKNdH6/qoVIee3t+SgD2s0wHwYDVR0jBBgwFoAUx2Gjqfrof48GnWgk
ccvhyTX74yEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMzQ3L3gyR2pxZnJvZjQ4R25XZ2tjY3ZoeVRYNzR5RS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3gyR2pxZnJvZjQ4R25XZ2tjY3Zo
eVRYNzR5RS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMzM0Ny8xdVZxYmJLTmRINl9xb1ZJZWUzdC1TZ0QyczAu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTAL
BAIAATAFAwMA3uEwDQYJKoZIhvcNAQELBQADggEBAHhiJdwLoX+6GPxSI/QN/kFT
viDOgsiFuvHamTug7jIjEAdhqAR8uvrElVRfblK4hrp/QscL1PxZ6SYTEB2ObMZS
03DVWkvhJ9o9wZGDIfTRhn84NqnoR4B1kTVdoqVWXZUEiwyfjrBz8yJm6FK5rxwT
rHsERAInjOuydQY4VBtacv8UIRLF7+0HyMz9CdM2rEblMqWmRy97R+uQYhaErYhY
wyoF+lSTzCVfwqMkOQuydGsATA21fEo8jF3jtM2TEWRuYceXigRWehi8P/cdCw9f
0aFmibRUx+CFBik477SbgHL33i+XkckCSKw+LhZzGDG92eI2Q8ZkeTgH3hlvOyU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org