Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/I1w5qK_g64ArUqPqPhhru_axoUI.roa
File:                     I1w5qK_g64ArUqPqPhhru_axoUI.roa (raw, json)
Hash identifier:          hFZ0D0AV8wd9qrrtEpJb96m/M2D/19xBSobAJFRCo4o=
Subject key identifier:   23:5C:39:A8:AF:E0:EB:80:2B:52:A3:EA:3E:18:6B:BB:F6:B1:A1:42
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       B1
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/I1w5qK_g64ArUqPqPhhru_axoUI.roa
Signing time:             Tue 18 Oct 2022 02:38:26 +0000
ROA not before:           Tue 18 Oct 2022 02:38:26 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        211.7.128.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 18 02:38:26 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=235C39A8AFE0EB802B52A3EA3E186BBBF6B1A142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:72:e8:c5:93:29:bd:4f:2b:18:0f:87:8c:0e:
                    a6:1a:9c:f7:77:78:8b:96:42:79:9e:df:aa:d8:28:
                    b8:5a:fc:88:12:1d:81:57:5f:b1:b5:a7:02:46:f9:
                    15:7c:64:66:67:f1:55:4d:1e:e5:69:31:35:6c:59:
                    ef:44:38:c0:8f:41:50:b0:af:39:4d:3b:3a:ed:fc:
                    a6:86:26:cb:03:5d:92:98:ae:c3:61:c2:0c:20:89:
                    0f:93:5f:f7:aa:5a:b8:e0:c0:46:4d:88:93:b0:a3:
                    67:c4:98:ae:f7:d7:90:92:53:ee:57:d0:48:47:b3:
                    e5:df:73:4e:33:ce:a9:a7:a0:86:09:f6:98:59:f9:
                    f4:d1:99:60:07:9f:85:f4:8e:20:ff:a9:7b:43:7b:
                    08:83:99:93:5e:74:2e:fa:87:46:85:04:ad:bf:32:
                    2b:4e:0b:2b:b7:8f:29:40:ab:c9:06:99:6e:bd:fc:
                    5e:03:e9:ae:86:c0:36:e2:f0:68:c1:68:ff:89:ce:
                    ae:d7:4b:8a:7e:a3:d7:f2:55:45:b5:53:e0:87:ab:
                    b9:4a:17:c8:78:a4:12:03:98:4e:6d:f0:08:7c:67:
                    d4:89:ed:de:31:b2:4d:05:04:72:11:42:e9:0a:4f:
                    49:33:51:7e:6e:0d:1d:40:63:71:5c:2a:65:f7:71:
                    3d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:5C:39:A8:AF:E0:EB:80:2B:52:A3:EA:3E:18:6B:BB:F6:B1:A1:42
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/I1w5qK_g64ArUqPqPhhru_axoUI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.7.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         bb:59:d2:14:7d:b1:4b:bc:91:9a:40:30:2b:14:bd:54:62:de:
         35:4b:e9:bf:36:2e:ad:19:22:b2:16:fb:bc:c7:88:99:0f:6a:
         ed:e4:5d:ca:ca:f3:b5:7c:d6:9a:2f:52:46:1e:88:e7:0a:b3:
         38:e3:70:0e:a3:6d:b0:a6:5e:1c:73:31:30:f2:3b:c6:59:03:
         60:89:48:ba:af:1c:a3:83:f2:78:f4:61:e2:ec:93:63:f7:42:
         10:e9:d9:2e:8a:94:bd:b4:d3:b5:13:d9:56:f3:0f:dd:56:50:
         5f:3c:ee:fb:c1:c8:1d:e0:4b:97:e0:cf:2a:5d:08:91:5e:73:
         7c:3b:e6:67:27:5f:1f:18:42:34:eb:91:b2:14:34:0d:66:da:
         40:48:48:b4:43:64:49:f5:d9:61:b7:c8:26:88:6b:dc:6d:8a:
         4b:fe:4a:99:aa:98:ce:32:35:c0:50:23:4e:f9:d1:e2:34:be:
         70:86:25:00:01:90:aa:1d:b9:a3:5a:5d:60:b1:c6:c3:b6:8a:
         25:c5:dc:60:ea:c8:e5:25:99:1e:72:fb:63:92:a7:4b:c3:f3:
         f9:d8:cd:ce:f7:22:7b:01:f9:33:02:e9:2a:02:d6:87:21:b7:
         5b:32:9f:9a:34:21:8e:3d:4b:3b:ae:ce:6f:93:ec:ac:e5:eb:
         e4:0c:e2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org