Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/T91K-Aw2RaZ1a38JxgmwgowCN_0.roa
File:                     T91K-Aw2RaZ1a38JxgmwgowCN_0.roa (raw, json)
Hash identifier:          YEYiW1O4Ad8r2KUmdR9TAraqj+ClwC+VyktosJ+gjGI=
Subject key identifier:   4F:DD:4A:F8:0C:36:45:A6:75:6B:7F:09:C6:09:B0:82:8C:02:37:FD
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0134
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/T91K-Aw2RaZ1a38JxgmwgowCN_0.roa
Signing time:             Sun 01 Oct 2023 01:30:50 +0000
ROA not before:           Sun 01 Oct 2023 01:30:50 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        210.253.138.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 308 (0x134)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:30:50 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=4FDD4AF80C3645A6756B7F09C609B0828C0237FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:71:55:a5:d1:b8:d7:15:ad:28:43:bb:cf:4f:
                    f3:a3:db:d6:a2:57:97:06:d3:89:a9:fe:7f:04:b4:
                    03:e8:48:87:33:6f:eb:fc:3e:53:e9:50:f1:f8:0a:
                    6e:aa:91:9b:25:95:0f:8e:a8:58:88:44:19:fe:06:
                    4f:76:9f:26:b0:e1:8b:9a:41:cf:e5:47:8d:ae:10:
                    2d:55:5b:0f:aa:74:fa:e1:e9:e6:1a:f9:a5:4b:ff:
                    94:69:17:2a:ef:59:50:26:db:30:5d:12:b3:c3:63:
                    96:b8:25:eb:37:ef:7b:fb:58:9d:2a:0a:87:12:2c:
                    30:ca:ae:fb:da:c1:87:a1:91:e4:8a:20:30:6b:e2:
                    a5:63:1d:7e:63:d4:33:05:c1:81:bb:29:be:f1:f5:
                    78:2f:cb:1b:7c:6a:1b:48:e6:4b:21:5c:d4:5d:4d:
                    23:06:9b:41:8c:dc:59:68:31:62:bb:04:41:1a:43:
                    ff:49:68:03:b4:a1:e6:a8:c2:7b:65:b1:09:68:76:
                    84:0d:6d:ac:83:93:f6:4f:84:a6:32:6a:eb:f5:05:
                    5a:57:ab:9d:38:ef:32:d3:ac:ef:c7:9e:7c:56:36:
                    11:ed:91:67:25:f3:5e:f7:81:c1:f7:1a:9f:fb:7d:
                    9d:a3:a8:d8:34:c0:91:66:b9:67:41:17:d4:1e:10:
                    67:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:DD:4A:F8:0C:36:45:A6:75:6B:7F:09:C6:09:B0:82:8C:02:37:FD
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/T91K-Aw2RaZ1a38JxgmwgowCN_0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.253.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:1b:29:7a:7c:b8:05:41:3a:65:5f:11:cf:81:54:72:1f:38:
         a5:34:60:fb:fb:2b:0b:67:e0:45:62:3b:03:38:38:0e:cf:c3:
         ff:8d:b2:2e:d1:9d:c1:73:5c:b6:c9:5b:79:64:1c:a3:9c:ea:
         93:be:03:f4:41:67:df:a7:21:82:c8:f8:10:28:d4:61:31:42:
         9d:79:7d:ff:d2:61:83:d9:30:b7:c4:5b:30:78:55:39:9c:ef:
         1e:a0:aa:a5:51:ef:1c:99:95:e2:a0:c9:e2:8e:d9:82:db:41:
         3a:67:06:22:93:32:d7:f7:7e:87:90:1b:89:73:b8:86:ab:e4:
         30:d2:c9:a3:bd:2d:b1:fa:0b:53:0d:b7:c7:0e:2a:7e:1d:a1:
         d2:61:53:7a:74:f8:ca:84:ae:58:fe:21:f4:47:5c:b2:64:f5:
         88:53:6c:9f:14:d0:54:89:15:ed:e1:5e:46:30:53:f6:b6:f6:
         46:25:d1:64:62:42:36:f7:54:0f:c1:8b:80:ea:0e:e1:a7:ea:
         aa:4f:fe:02:ed:bf:24:13:e0:6c:f9:21:33:7b:76:70:58:cc:
         8f:ae:3e:ca:8f:c1:51:03:91:8f:7e:cb:09:fb:7c:d4:ed:72:
         02:db:d5:ae:7b:d8:79:16:d4:4d:da:5e:0f:37:3d:7d:e8:c3:
         ff:db:a0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org