Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/LhdphmfiOU8kfo4cmO2bpUDcNW8.roa
File:                     LhdphmfiOU8kfo4cmO2bpUDcNW8.roa (raw, json)
Hash identifier:          qM/Nfk+aWZSPj1cdQSd5KWiLz1VsaQRKJJdyXiQZl6g=
Subject key identifier:   2E:17:69:86:67:E2:39:4F:24:7E:8E:1C:98:ED:9B:A5:40:DC:35:6F
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       4F
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/LhdphmfiOU8kfo4cmO2bpUDcNW8.roa
Signing time:             Tue 11 Oct 2022 09:46:20 +0000
ROA not before:           Tue 11 Oct 2022 09:46:20 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        210.188.144.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 11 09:46:20 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=2E17698667E2394F247E8E1C98ED9BA540DC356F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:05:8f:2c:71:6e:f0:d4:4d:f7:6f:e4:b5:71:
                    1b:d4:c1:2f:7b:6d:90:a7:ba:ef:b3:e6:a9:06:fa:
                    b0:7b:42:f4:36:58:36:d2:41:ac:09:e5:ea:94:a7:
                    41:92:86:ec:e8:dd:f1:6b:11:12:26:27:d9:17:63:
                    46:e7:95:aa:ee:5a:5e:df:dc:96:0a:a7:33:5d:f0:
                    c2:4d:13:10:6a:8a:5e:82:be:24:03:7c:48:63:87:
                    f2:90:81:b1:59:86:59:c8:99:7e:49:ce:07:7c:36:
                    b1:f8:31:33:88:c2:52:e1:a6:a7:33:e9:3f:65:57:
                    5b:be:60:4b:c8:a4:cc:45:6f:93:40:04:97:b6:e4:
                    4a:b3:dc:9d:b3:34:d1:51:4b:c6:c8:bd:f5:71:08:
                    2e:50:59:95:90:dc:d0:0c:42:ab:30:0c:77:fb:8a:
                    a7:88:52:0d:e4:dd:70:e7:7c:fe:af:9b:5a:e1:97:
                    df:b2:a1:24:21:b9:b4:04:13:b7:50:6c:88:36:b1:
                    77:d3:5e:7b:78:a7:8f:ea:06:bd:af:a2:4b:56:81:
                    43:65:3f:37:79:74:d3:71:55:80:75:7d:9d:d7:d5:
                    0c:85:6d:64:7c:4e:01:a3:17:af:6b:47:90:d7:4e:
                    99:c3:4f:26:f6:01:58:56:0f:36:1e:b2:ca:23:e6:
                    65:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:17:69:86:67:E2:39:4F:24:7E:8E:1C:98:ED:9B:A5:40:DC:35:6F
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/LhdphmfiOU8kfo4cmO2bpUDcNW8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:e6:07:db:d0:4f:5b:d3:5a:ad:88:c4:f9:84:62:65:1b:cb:
         41:98:22:ac:ec:d9:9a:a6:ee:60:aa:0a:68:06:a7:75:ad:14:
         30:60:b3:2a:f6:2e:28:aa:c1:f9:e7:28:b6:97:6a:d2:8c:be:
         d2:50:15:f1:27:82:2e:17:23:03:1b:8a:e1:80:da:7e:e0:e3:
         39:de:3c:de:a9:18:7e:ff:1b:5f:bb:99:4b:d6:0a:7b:19:65:
         70:0b:3d:66:a2:09:50:d4:f7:26:a6:ce:a5:ba:37:cc:88:03:
         cc:ed:b8:a3:b8:84:55:dc:43:d9:3a:2c:0c:0c:e1:70:09:93:
         c3:f5:96:bb:05:5c:a7:5a:db:07:f6:24:46:e8:36:ab:b6:cf:
         94:c3:4c:06:2b:86:57:71:e7:c6:60:24:20:77:ca:54:97:3b:
         09:67:e9:15:88:39:54:ba:73:ad:db:b6:99:86:93:c8:ee:24:
         a1:63:53:8b:bc:0e:61:4b:76:55:a9:23:ad:fc:2e:2a:a6:be:
         5f:a7:b3:c3:c8:57:36:14:97:14:50:ba:43:b7:c0:32:a2:f4:
         06:e2:22:1d:64:3d:26:66:79:fe:e3:36:f2:06:b1:c5:94:22:
         af:68:6e:45:0d:d3:ec:24:ed:10:ed:4b:33:68:1f:1b:68:d4:
         5f:15:95:cc
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBTzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNzYx
QTNBOUZBRTg3RjhGMDY5RDY4MjQ3MUNCRTFDOTM1RkJFMzIxMB4XDTIyMTAxMTA5
NDYyMFoXDTIzMDkxNTAxMzAwM1owMzExMC8GA1UEAxMoMkUxNzY5ODY2N0UyMzk0
RjI0N0U4RTFDOThFRDlCQTU0MERDMzU2RjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMAFjyxxbvDUTfdv5LVxG9TBL3ttkKe677PmqQb6sHtC9DZYNtJB
rAnl6pSnQZKG7Ojd8WsREiYn2RdjRueVqu5aXt/clgqnM13wwk0TEGqKXoK+JAN8
SGOH8pCBsVmGWciZfknOB3w2sfgxM4jCUuGmpzPpP2VXW75gS8ikzEVvk0AEl7bk
SrPcnbM00VFLxsi99XEILlBZlZDc0AxCqzAMd/uKp4hSDeTdcOd8/q+bWuGX37Kh
JCG5tAQTt1BsiDaxd9Nee3inj+oGva+iS1aBQ2U/N3l003FVgHV9ndfVDIVtZHxO
AaMXr2tHkNdOmcNPJvYBWFYPNh6yyiPmZYUCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQuF2mGZ+I5TyR+jhyY7ZulQNw1bzAfBgNVHSMEGDAWgBTHYaOp+uh/jwadaCRx
y+HJNfvjITAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTMzNDcveDJHanFmcm9mNDhHbldna2Njdmh5VFg3NHlFLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveDJHanFmcm9mNDhHbldna2Njdmh5
VFg3NHlFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEzMzQ3L0xoZHBobWZpT1U4a2ZvNGNtTzJicFVEY05XOC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAHSvJAwDQYJKoZIhvcNAQELBQADggEBAKnmB9vQT1vTWq2IxPmEYmUb
y0GYIqzs2Zqm7mCqCmgGp3WtFDBgsyr2LiiqwfnnKLaXatKMvtJQFfEngi4XIwMb
iuGA2n7g4znePN6pGH7/G1+7mUvWCnsZZXALPWaiCVDU9yamzqW6N8yIA8ztuKO4
hFXcQ9k6LAwM4XAJk8P1lrsFXKda2wf2JEboNqu2z5TDTAYrhldx58ZgJCB3ylSX
Owln6RWIOVS6c63btpmGk8juJKFjU4u8DmFLdlWpI638Liqmvl+ns8PIVzYUlxRQ
ukO3wDKi9AbiIh1kPSZmef7jNvIGscWUIq9obkUN0+wk7RDtSzNoHxto1F8Vlcw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org