Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/95PpbpvejSxfD08Bz41rVLluykQ.roa
File:                     95PpbpvejSxfD08Bz41rVLluykQ.roa (raw, json)
Hash identifier:          aVBf6p8hokYKdLK0pUlgMVq2VsfYa83ASvxRqBg5GmU=
Subject key identifier:   F7:93:E9:6E:9B:DE:8D:2C:5F:0F:4F:01:CF:8D:6B:54:B9:6E:CA:44
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       E1
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/95PpbpvejSxfD08Bz41rVLluykQ.roa
Signing time:             Fri 01 Sep 2023 01:31:00 +0000
ROA not before:           Fri 01 Sep 2023 01:31:00 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.141.232.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225 (0xe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:31:00 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=F793E96E9BDE8D2C5F0F4F01CF8D6B54B96ECA44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6c:7f:95:36:a4:c3:21:0f:e7:bc:fb:e0:80:
                    63:8f:c6:5d:a9:78:19:e2:42:84:1a:f2:cc:9f:f3:
                    ea:44:41:3b:4c:d7:a2:99:b6:50:20:22:a9:f7:61:
                    fd:68:bb:b7:52:8c:73:71:81:51:79:1c:c8:61:38:
                    31:fa:fa:e3:19:65:f2:56:f3:e6:10:52:b6:60:e6:
                    3b:13:24:11:45:18:ac:b7:f7:1a:40:bc:09:d1:7c:
                    47:ec:88:56:de:7b:5c:be:3d:5b:69:a1:a8:e0:2d:
                    0a:58:d4:b1:55:52:46:dc:f5:0f:3b:1f:2e:26:1f:
                    99:2c:70:c5:4e:5b:13:fb:7f:0c:e1:9e:fe:b7:7b:
                    24:a4:2d:4b:4b:04:01:3e:01:79:80:be:a9:4f:f9:
                    50:90:6c:7c:74:3e:58:20:46:77:05:c6:58:9a:4f:
                    ca:e1:7a:7f:82:8e:2b:45:2c:5f:98:3a:c3:e4:74:
                    41:fd:79:3d:9d:b2:e1:51:5b:08:ae:ee:78:df:c8:
                    14:fb:87:e4:60:1e:b2:c6:97:d4:63:de:b6:ad:53:
                    a8:ca:53:59:06:72:e8:05:69:fe:27:10:f5:99:c4:
                    a1:8a:d5:d1:c6:7a:5b:1a:b5:53:3f:39:75:40:10:
                    61:99:a7:57:54:aa:82:6d:99:db:f6:da:ce:ac:f6:
                    0e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:93:E9:6E:9B:DE:8D:2C:5F:0F:4F:01:CF:8D:6B:54:B9:6E:CA:44
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/95PpbpvejSxfD08Bz41rVLluykQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.141.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:e0:1f:cc:56:4c:fd:6b:3d:64:bf:c9:95:b3:83:63:37:7e:
         02:55:41:92:67:c1:49:89:fb:ec:5a:84:b7:6a:9a:31:0d:00:
         55:35:f9:1a:01:7a:64:2a:76:0a:da:58:61:0b:02:e5:55:96:
         f8:95:34:4d:22:ab:59:95:55:1d:ae:06:ae:74:01:bf:53:5b:
         33:06:cb:be:62:f7:30:67:12:31:33:a3:77:28:b9:84:00:90:
         e2:36:ee:2a:19:0f:31:43:eb:1e:4b:89:e5:81:77:1e:fa:83:
         37:c6:dc:7b:b3:8a:8a:eb:d2:3e:ac:90:7a:e5:cb:96:69:a3:
         f9:5a:57:56:a4:46:0b:ea:0f:59:76:6c:a6:2a:21:5a:d0:d1:
         bc:9e:84:9a:ba:10:b9:6d:2a:46:a3:be:c7:88:72:68:4f:14:
         48:e2:27:e7:d9:95:2a:a9:f1:c0:29:9a:b2:96:a0:6a:da:f2:
         ec:73:23:9d:47:95:97:bb:02:21:59:1b:78:36:20:d4:80:57:
         50:e6:ac:b3:33:56:b0:d7:dd:06:36:29:77:8f:16:08:4a:e3:
         fb:44:50:2d:2a:88:27:8e:f6:90:44:51:e6:48:95:5b:0b:e6:
         11:a2:6a:5a:e8:fd:73:b8:d6:32:43:a4:71:3c:32:65:02:5a:
         c2:12:75:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org