Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/O5i2bmjGga2OFdnjj_gsgY1OF9w.roa
File:                     O5i2bmjGga2OFdnjj_gsgY1OF9w.roa (raw, json)
Hash identifier:          ESZe8NCeV03zbrMjIWvaFG4F1+ghFny7cbB7ONUu+Go=
Subject key identifier:   3B:98:B6:6E:68:C6:81:AD:8E:15:D9:E3:8F:F8:2C:81:8D:4E:17:DC
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       20
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/O5i2bmjGga2OFdnjj_gsgY1OF9w.roa
Signing time:             Tue 11 Oct 2022 09:28:17 +0000
ROA not before:           Tue 11 Oct 2022 09:28:17 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        210.224.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 11 09:28:17 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=3B98B66E68C681AD8E15D9E38FF82C818D4E17DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ba:ab:e9:32:d7:c2:6e:55:e3:46:be:4a:99:
                    2b:94:d7:0d:be:90:d8:2e:22:20:24:3b:92:d0:d6:
                    2c:47:e5:9d:83:5e:6d:6d:be:f7:c1:9b:88:9a:78:
                    5b:ee:5f:99:55:93:5b:1a:b5:4a:b5:5f:fd:f1:e8:
                    53:45:c6:fa:d0:13:35:eb:11:0a:62:77:0a:49:72:
                    5a:ca:08:ca:95:15:8d:6b:0a:0a:9c:ca:d3:78:bd:
                    20:5a:d7:78:69:63:39:92:e5:83:c8:05:dd:9e:db:
                    41:fa:a6:7d:5e:59:79:0b:89:c9:48:5c:9f:23:54:
                    44:c2:26:91:ee:53:ed:16:b2:69:9e:96:c1:c2:ea:
                    89:29:b5:da:c0:1e:ce:16:cb:74:86:24:53:75:79:
                    14:55:f4:4e:d4:68:df:42:f0:fb:b1:28:47:0a:92:
                    c5:65:04:de:9e:05:53:7e:d3:7e:76:70:ea:52:06:
                    62:6f:e4:7c:7f:68:ce:59:04:2b:1b:75:80:b4:40:
                    8f:90:90:9a:10:a9:ad:84:97:31:e5:bc:3f:83:c8:
                    a7:04:5c:78:bd:d7:08:5a:f7:4c:38:85:28:de:13:
                    15:82:99:f5:1f:4e:a4:5f:87:2b:90:1d:b4:86:6b:
                    17:98:f0:b2:80:65:8c:2e:19:da:b9:8a:15:98:a9:
                    38:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:98:B6:6E:68:C6:81:AD:8E:15:D9:E3:8F:F8:2C:81:8D:4E:17:DC
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/O5i2bmjGga2OFdnjj_gsgY1OF9w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.224.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:35:c6:02:10:d7:14:ab:f9:5e:df:37:d5:e1:61:55:02:dc:
         3b:77:fb:63:b5:a8:db:ad:bf:c0:ff:7b:11:14:31:5f:14:55:
         b4:83:09:af:3f:46:18:9c:82:38:a1:48:44:1d:2d:de:ad:e7:
         76:32:49:c0:81:04:37:9a:d1:cc:97:07:1a:d9:2e:4e:92:f2:
         aa:7f:71:cb:b4:e3:6c:7a:44:bd:af:25:27:15:f8:ad:dd:7a:
         af:8b:1b:0f:14:57:6a:76:bb:ab:fa:94:6a:22:99:87:1f:ba:
         08:9c:85:bb:7e:98:cb:0c:9b:b7:b6:fd:83:28:4a:01:a3:0c:
         0d:53:36:b3:cc:82:77:6f:3c:6f:d6:93:38:d3:7c:5f:17:21:
         14:50:82:38:32:9a:6c:64:1d:0b:8a:5d:19:8e:ea:88:e9:e2:
         53:45:d6:2a:14:20:97:20:58:df:08:80:a8:4d:05:23:bf:8d:
         b1:20:9c:05:da:74:a2:8c:82:35:f4:3c:45:e1:8b:fe:22:1b:
         7a:2b:c5:dc:06:fa:55:3e:cb:52:62:13:7d:93:44:55:70:c7:
         63:66:ae:42:eb:4f:1a:c4:51:43:35:36:ae:73:8b:3a:5f:94:
         6b:0a:65:a3:79:6a:7f:b6:b1:57:88:9c:5c:0e:42:69:ba:7d:
         59:27:55:ee
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBIDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNzYx
QTNBOUZBRTg3RjhGMDY5RDY4MjQ3MUNCRTFDOTM1RkJFMzIxMB4XDTIyMTAxMTA5
MjgxN1oXDTIzMDkxNTAxMzAwM1owMzExMC8GA1UEAxMoM0I5OEI2NkU2OEM2ODFB
RDhFMTVEOUUzOEZGODJDODE4RDRFMTdEQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALS6q+ky18JuVeNGvkqZK5TXDb6Q2C4iICQ7ktDWLEflnYNebW2+
98GbiJp4W+5fmVWTWxq1SrVf/fHoU0XG+tATNesRCmJ3CklyWsoIypUVjWsKCpzK
03i9IFrXeGljOZLlg8gF3Z7bQfqmfV5ZeQuJyUhcnyNURMImke5T7RayaZ6WwcLq
iSm12sAezhbLdIYkU3V5FFX0TtRo30Lw+7EoRwqSxWUE3p4FU37TfnZw6lIGYm/k
fH9ozlkEKxt1gLRAj5CQmhCprYSXMeW8P4PIpwRceL3XCFr3TDiFKN4TFYKZ9R9O
pF+HK5AdtIZrF5jwsoBljC4Z2rmKFZipOBECAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQ7mLZuaMaBrY4V2eOP+CyBjU4X3DAfBgNVHSMEGDAWgBTHYaOp+uh/jwadaCRx
y+HJNfvjITAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTMzNDcveDJHanFmcm9mNDhHbldna2Njdmh5VFg3NHlFLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveDJHanFmcm9mNDhHbldna2Njdmh5
VFg3NHlFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEzMzQ3L081aTJibWpHZ2EyT0ZkbmpqX2dzZ1kxT0Y5dy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADS4JYwDQYJKoZIhvcNAQELBQADggEBAMA1xgIQ1xSr+V7fN9XhYVUC
3Dt3+2O1qNutv8D/exEUMV8UVbSDCa8/RhicgjihSEQdLd6t53YyScCBBDea0cyX
BxrZLk6S8qp/ccu042x6RL2vJScV+K3deq+LGw8UV2p2u6v6lGoimYcfugichbt+
mMsMm7e2/YMoSgGjDA1TNrPMgndvPG/WkzjTfF8XIRRQgjgymmxkHQuKXRmO6ojp
4lNF1ioUIJcgWN8IgKhNBSO/jbEgnAXadKKMgjX0PEXhi/4iG3orxdwG+lU+y1Ji
E32TRFVwx2NmrkLrTxrEUUM1Nq5zizpflGsKZaN5an+2sVeInFwOQmm6fVknVe4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org