Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/6U8EkrZWfWdYfwWv0gTEHUUPKjM.roa
File:                     6U8EkrZWfWdYfwWv0gTEHUUPKjM.roa (raw, json)
Hash identifier:          909swzh0hPPB8cn7fQz2B28sUlEyDpv4/LayMh6sdko=
Subject key identifier:   E9:4F:04:92:B6:56:7D:67:58:7F:05:AF:D2:04:C4:1D:45:0F:2A:33
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       016F
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/6U8EkrZWfWdYfwWv0gTEHUUPKjM.roa
Signing time:             Sun 01 Oct 2023 01:35:52 +0000
ROA not before:           Sun 01 Oct 2023 01:35:52 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        210.254.64.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 367 (0x16f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:35:52 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=E94F0492B6567D67587F05AFD204C41D450F2A33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:49:5d:0c:91:b3:0a:29:6e:c7:65:69:da:b6:
                    73:36:a6:10:3a:90:a0:64:0d:3c:4e:c7:87:e0:5e:
                    4e:b5:76:6d:71:c5:4e:ed:38:a5:59:38:45:07:72:
                    ed:a8:eb:de:1a:67:28:51:1a:6a:bb:09:32:1a:b5:
                    2e:99:82:56:8f:64:94:3e:6c:1c:f6:d5:26:76:26:
                    8c:e1:0d:13:55:b3:c1:d1:95:7f:0d:5c:76:59:8e:
                    8f:32:f1:b4:e3:22:b2:c6:88:95:d3:f9:b9:86:49:
                    6a:b0:de:05:c5:40:f5:90:c0:a2:86:17:8c:25:db:
                    d9:2e:7b:20:59:fd:4a:98:64:aa:7c:88:b9:74:e8:
                    13:ba:3c:bc:e1:91:57:c1:bc:ea:22:e0:36:f2:6e:
                    d8:73:36:ad:43:46:c2:75:17:0b:13:22:9f:91:15:
                    eb:a6:44:f0:ae:22:1c:fe:ba:08:b2:f3:1f:ee:2e:
                    a1:c3:15:48:71:ec:bc:41:75:5e:3f:7c:02:91:99:
                    c8:54:df:e0:c0:cf:17:29:ce:49:e9:a1:06:86:4b:
                    be:ca:99:4e:04:8c:f2:27:1f:42:fd:4a:bb:39:ef:
                    0a:e8:ef:aa:bd:33:f9:0d:e7:58:79:09:96:4b:c4:
                    2f:7e:82:8e:4b:fd:6e:bc:af:40:63:e2:bf:70:2b:
                    6e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:4F:04:92:B6:56:7D:67:58:7F:05:AF:D2:04:C4:1D:45:0F:2A:33
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/6U8EkrZWfWdYfwWv0gTEHUUPKjM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.254.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7e:5b:2e:87:bc:0f:d4:9f:6d:fc:30:01:f7:44:67:5c:9f:ef:
         37:22:bc:47:ab:7e:62:ef:1f:5c:7b:02:94:40:f6:58:61:78:
         71:b6:4e:e8:af:7b:bf:42:32:46:ea:12:c2:37:c3:a5:0a:c1:
         b8:ce:42:58:c2:ef:54:a1:7d:ae:c0:16:38:fe:23:92:90:24:
         7d:05:d8:22:ed:49:dc:79:df:c0:6a:81:b7:d4:50:19:6e:9b:
         35:c1:31:ff:c5:b0:59:c4:50:66:f5:62:df:69:cc:39:c8:b8:
         9d:39:ab:c3:9c:1a:80:76:e4:9b:59:39:0a:d5:5f:71:67:4b:
         f2:ad:0e:0b:af:7a:65:8b:cd:64:9b:3f:a8:fe:07:70:f3:c8:
         0b:ee:15:3d:08:39:e1:7a:a1:00:17:39:a6:7e:85:9b:b1:6b:
         e9:32:97:af:82:f2:3c:01:ea:05:88:b3:a1:0d:0b:ca:d2:9f:
         e1:a0:ae:5d:43:8a:28:87:c6:93:2a:12:97:fb:09:36:45:30:
         5c:15:02:70:36:81:97:a6:24:91:92:bd:61:2a:2b:a5:17:9e:
         48:46:66:01:72:d0:2e:b4:6a:07:78:3d:6f:d8:43:91:50:b0:
         47:ce:38:ea:cd:de:98:82:87:64:48:0b:ea:6a:f5:48:69:05:
         f6:26:b1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org