Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/2Q9Gd7AJh1-uoKYhPJJHJY1QFWA.roa
File:                     2Q9Gd7AJh1-uoKYhPJJHJY1QFWA.roa (raw, json)
Hash identifier:          Ogc2WD5n43MthP7xCYyeBUnXFZ3SERwu4vrdCXd8Eeg=
Subject key identifier:   D9:0F:46:77:B0:09:87:5F:AE:A0:A6:21:3C:92:47:25:8D:50:15:60
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       73
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/2Q9Gd7AJh1-uoKYhPJJHJY1QFWA.roa
Signing time:             Tue 18 Oct 2022 02:18:15 +0000
ROA not before:           Tue 18 Oct 2022 02:18:15 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        211.7.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:18:15 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=D90F4677B009875FAEA0A6213C9247258D501560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a2:eb:a2:c6:7a:d0:0d:6d:40:eb:f8:32:ce:
                    42:f1:78:f9:8f:04:4b:79:77:ea:32:07:25:95:af:
                    ae:4f:0c:29:c8:7a:87:95:96:b2:32:92:da:02:7a:
                    6d:c3:99:6c:6d:76:c9:21:3d:9c:66:b5:50:09:5c:
                    ba:e9:21:1f:d8:b5:f7:55:a3:82:30:da:9a:cc:ae:
                    e8:ce:1e:c8:b1:c1:e2:5d:03:86:f2:63:52:d4:d5:
                    8e:fd:39:c8:13:6d:46:5b:8a:6a:20:06:05:89:ba:
                    ec:1d:98:68:fe:dc:6c:a3:75:bb:7c:ea:b5:0b:6e:
                    01:79:36:a0:2d:97:20:f5:d8:85:69:02:fb:ef:9b:
                    af:c2:37:49:03:04:1e:c5:36:0c:17:5c:9f:67:9c:
                    5d:ca:ad:68:24:e9:33:ce:91:db:b1:c7:22:b7:6c:
                    bf:c6:04:6b:89:13:be:3a:09:c0:37:dd:94:1e:62:
                    f9:7f:b3:cf:86:ae:5c:44:4d:79:70:0e:75:78:0a:
                    c8:8e:c5:14:b6:c2:0c:2e:2b:91:f7:2a:3c:6d:15:
                    f7:2f:9f:d0:32:39:ca:bd:a7:72:29:2b:30:3c:e6:
                    4f:ee:d3:00:ad:4a:2a:28:dc:43:87:a0:93:2e:54:
                    17:19:e7:a6:49:ac:01:0f:3f:29:6c:ce:f6:34:07:
                    b2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:0F:46:77:B0:09:87:5F:AE:A0:A6:21:3C:92:47:25:8D:50:15:60
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/2Q9Gd7AJh1-uoKYhPJJHJY1QFWA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.7.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:2b:22:46:c2:20:57:81:81:98:db:35:aa:a2:2c:40:81:4c:
         d1:43:2b:49:5a:0e:c2:4d:06:8c:87:83:11:31:91:f1:99:75:
         b1:e5:0b:43:c2:60:b6:ec:cc:cd:38:30:43:f0:c7:58:8d:8b:
         2e:6b:13:e9:c8:12:ba:21:b4:4d:bb:51:90:ca:74:54:a6:81:
         b6:8f:a0:ef:04:69:a9:c7:f2:eb:ba:3d:9a:a2:a5:c0:26:69:
         d0:59:da:76:6c:bd:52:70:37:e9:a3:c0:c8:d5:13:52:b0:4b:
         ec:f6:03:a5:d6:91:fa:6d:bd:91:ec:01:62:40:4f:56:06:3c:
         f2:34:cc:98:66:fe:a3:56:11:5d:a7:43:fc:07:de:03:14:3d:
         63:d3:d5:82:64:be:74:fb:9b:75:aa:0a:40:ac:e4:9d:f6:b9:
         1c:61:f1:c4:d8:f8:6f:b9:13:df:17:cf:24:ae:be:d8:f3:54:
         36:42:c8:be:4c:f2:d7:d7:0c:62:72:58:d1:f7:69:09:f7:ea:
         61:e4:69:8d:95:0e:54:ef:e9:f0:ef:11:de:e6:e7:43:2c:3e:
         55:11:41:6e:38:15:77:0d:a1:52:f7:b8:ea:c2:9c:7a:b0:ca:
         53:a9:d1:13:d8:fe:03:c9:8b:53:eb:ce:a1:8f:ef:46:85:5a:
         ae:34:a4:73
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBczANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNzYx
QTNBOUZBRTg3RjhGMDY5RDY4MjQ3MUNCRTFDOTM1RkJFMzIxMB4XDTIyMTAxODAy
MTgxNVoXDTIzMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoRDkwRjQ2NzdCMDA5ODc1
RkFFQTBBNjIxM0M5MjQ3MjU4RDUwMTU2MDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOii66LGetANbUDr+DLOQvF4+Y8ES3l36jIHJZWvrk8MKch6h5WW
sjKS2gJ6bcOZbG12ySE9nGa1UAlcuukhH9i191WjgjDamsyu6M4eyLHB4l0DhvJj
UtTVjv05yBNtRluKaiAGBYm67B2YaP7cbKN1u3zqtQtuAXk2oC2XIPXYhWkC+++b
r8I3SQMEHsU2DBdcn2ecXcqtaCTpM86R27HHIrdsv8YEa4kTvjoJwDfdlB5i+X+z
z4auXERNeXAOdXgKyI7FFLbCDC4rkfcqPG0V9y+f0DI5yr2ncikrMDzmT+7TAK1K
KijcQ4egky5UFxnnpkmsAQ8/KWzO9jQHslECAwEAAaOCAigwggIkMB0GA1UdDgQW
BBTZD0Z3sAmHX66gpiE8kkcljVAVYDAfBgNVHSMEGDAWgBTHYaOp+uh/jwadaCRx
y+HJNfvjITAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTMzNDcveDJHanFmcm9mNDhHbldna2Njdmh5VFg3NHlFLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveDJHanFmcm9mNDhHbldna2Njdmh5
VFg3NHlFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEzMzQ3LzJROUdkN0FKaDEtdW9LWWhQSkpISlkxUUZXQS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADTB70wDQYJKoZIhvcNAQELBQADggEBAK0rIkbCIFeBgZjbNaqiLECB
TNFDK0laDsJNBoyHgxExkfGZdbHlC0PCYLbszM04MEPwx1iNiy5rE+nIErohtE27
UZDKdFSmgbaPoO8EaanH8uu6PZqipcAmadBZ2nZsvVJwN+mjwMjVE1KwS+z2A6XW
kfptvZHsAWJAT1YGPPI0zJhm/qNWEV2nQ/wH3gMUPWPT1YJkvnT7m3WqCkCs5J32
uRxh8cTY+G+5E98XzySuvtjzVDZCyL5M8tfXDGJyWNH3aQn36mHkaY2VDlTv6fDv
Ed7m50MsPlURQW44FXcNoVL3uOrCnHqwylOp0RPY/gPJi1PrzqGP70aFWq40pHM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org