Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/N8QRiO9ZECl6QeUA2wkop9CPHWk.roa
File:                     N8QRiO9ZECl6QeUA2wkop9CPHWk.roa (raw, json)
Hash identifier:          XpuzCrn2CABbKIL2jJEIC/pJgiGvlGfldr4T35JYtHY=
Subject key identifier:   37:C4:11:88:EF:59:10:29:7A:41:E5:00:DB:09:28:A7:D0:8F:1D:69
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       F4
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/N8QRiO9ZECl6QeUA2wkop9CPHWk.roa
Signing time:             Fri 01 Sep 2023 01:33:12 +0000
ROA not before:           Fri 01 Sep 2023 01:33:12 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.158.0.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:33:12 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=37C41188EF5910297A41E500DB0928A7D08F1D69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ae:34:1c:7e:0f:3e:3b:00:1e:24:be:36:3c:
                    88:cd:4a:33:0b:e7:41:eb:30:32:b5:da:39:d0:ae:
                    26:94:11:ca:6c:a3:7c:45:ee:2d:86:47:bc:82:85:
                    b0:71:d7:dd:31:68:db:13:08:5b:c2:26:76:ac:1f:
                    62:84:05:f4:96:0c:74:66:77:e7:7a:57:c6:5c:19:
                    35:d0:a9:64:53:e4:3f:33:27:21:8c:f1:99:d3:54:
                    a6:38:1f:7c:ab:53:b1:02:58:9d:b5:f9:40:9b:d2:
                    df:f0:64:c6:43:bd:bc:42:0a:eb:90:9e:3e:28:fe:
                    3f:6d:19:b7:88:5b:d5:89:7f:46:73:05:42:7d:91:
                    9e:cf:33:36:d9:d0:25:aa:54:f1:f7:c3:ec:98:0f:
                    f3:fd:7c:90:13:d5:48:74:df:7b:5c:70:5e:0d:3b:
                    14:c5:5a:8b:13:0d:e8:f8:67:96:8f:23:38:b3:ff:
                    df:c9:41:a2:10:6e:d9:e0:50:f1:96:79:36:43:76:
                    d5:31:6d:01:8d:01:3b:3a:3e:77:94:47:92:9a:43:
                    98:fc:83:f4:f6:9e:74:52:7a:18:4d:be:d2:06:9d:
                    cf:bd:cb:61:b2:c2:fb:ee:ac:1a:26:07:c9:99:48:
                    31:65:e4:2d:81:fb:57:26:e5:88:9c:34:34:43:bf:
                    c6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C4:11:88:EF:59:10:29:7A:41:E5:00:DB:09:28:A7:D0:8F:1D:69
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/N8QRiO9ZECl6QeUA2wkop9CPHWk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.158.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         97:3c:b7:7f:f1:f1:d7:c2:69:4c:e5:21:d2:7d:23:54:b3:c6:
         d3:c5:ba:9c:61:7a:c4:18:d1:73:8d:c0:70:bb:e7:52:19:44:
         46:6f:b8:66:b8:11:88:52:82:bf:48:1a:01:99:d2:6e:cd:1c:
         0e:d0:b1:26:ce:23:60:4e:77:fa:c7:bc:a6:08:bc:c1:ba:b4:
         b6:65:80:a4:f8:c0:15:82:bd:e9:b8:c9:ea:b0:56:cc:fa:68:
         26:aa:9a:4a:f1:33:1c:12:cf:a1:da:55:6a:77:33:70:f6:ec:
         0a:71:b1:a3:6a:18:04:b8:c8:bb:5c:5e:18:0c:9f:fd:98:64:
         2b:c6:fd:18:e1:fc:e1:c2:e1:b9:e4:79:92:50:d8:68:d7:6a:
         1f:5c:54:41:3a:7f:e7:91:7d:c1:43:d3:1e:4b:f1:e8:ef:41:
         83:bd:fd:13:06:58:df:90:25:a3:74:1a:b9:8b:00:3c:74:99:
         dc:16:4b:c6:f9:9b:99:a8:90:d4:a3:29:c2:24:a4:c2:84:57:
         b9:7b:53:4f:86:77:f1:dc:4b:bb:29:e7:b5:d3:0b:e5:d2:5b:
         c8:57:52:ac:84:d7:0f:51:29:84:bd:6c:d4:21:5c:8c:84:ed:
         28:cb:77:0d:e4:ca:84:b3:be:22:d4:4c:5e:ea:c0:2c:f2:3e:
         d1:f3:58:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org