Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/_qq3IJMl4Y9iW2B0SDWQRI4Yuyw.roa
File:                     _qq3IJMl4Y9iW2B0SDWQRI4Yuyw.roa (raw, json)
Hash identifier:          ELevtCq6JHM1lI3uQoBjyd+qj4KSLDFyEM1ohkVpTjU=
Subject key identifier:   FE:AA:B7:20:93:25:E1:8F:62:5B:60:74:48:35:90:44:8E:18:BB:2C
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0108
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/_qq3IJMl4Y9iW2B0SDWQRI4Yuyw.roa
Signing time:             Fri 01 Sep 2023 01:34:21 +0000
ROA not before:           Fri 01 Sep 2023 01:34:21 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.198.64.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 264 (0x108)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Sep  1 01:34:21 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=FEAAB7209325E18F625B6074483590448E18BB2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cb:d4:cf:5b:bc:50:94:ec:b7:1a:f3:50:7f:
                    42:03:f6:d7:42:b3:ee:e1:15:a1:e6:98:a1:93:59:
                    4b:2e:0b:f8:3f:1d:83:19:27:95:0e:8f:a3:ad:0f:
                    7f:b7:7e:fa:a6:4e:ab:f5:5a:b5:1b:b7:03:0d:72:
                    ff:ab:14:8e:55:c4:bd:4d:cc:a3:f5:f4:31:25:ff:
                    10:94:59:b5:81:8f:74:ff:df:69:f3:cf:bb:2a:d0:
                    02:f2:69:3b:be:40:17:9f:58:84:36:ba:86:7f:8d:
                    52:7e:21:c5:45:1f:a4:08:95:f4:81:ad:b4:bd:d1:
                    cc:ae:88:6e:82:d3:0e:a7:6c:9f:8c:d7:7d:ad:0f:
                    e8:52:38:a7:47:8e:d1:77:80:bd:d0:73:22:97:af:
                    84:ac:40:93:e2:1d:49:90:0f:16:8d:c4:34:e2:4f:
                    76:07:e4:fb:99:38:64:06:ef:78:73:91:fc:85:20:
                    b0:36:d8:ed:29:1a:85:2b:9a:a7:20:08:a3:dd:fd:
                    45:6f:93:74:40:fb:18:a0:ae:61:d0:0f:7a:c9:b5:
                    f1:e4:be:fb:49:a5:9a:9d:bb:fe:10:85:4a:c2:94:
                    a4:39:46:2e:50:a2:60:a2:57:c2:54:34:1e:9c:c7:
                    54:a1:5a:1d:38:be:b9:28:c0:68:55:01:95:f2:a0:
                    95:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:AA:B7:20:93:25:E1:8F:62:5B:60:74:48:35:90:44:8E:18:BB:2C
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/_qq3IJMl4Y9iW2B0SDWQRI4Yuyw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.198.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b5:ef:26:2d:93:ce:bc:cc:03:04:65:81:81:0d:b4:bb:5a:c2:
         48:0b:5d:19:d2:26:7e:94:88:2d:95:55:b6:9d:36:46:c5:05:
         06:3d:ac:e2:6e:0f:88:b1:83:5a:18:bd:58:bc:6b:13:95:6f:
         6b:ee:b6:7f:9e:d4:b6:9c:63:62:47:dc:a9:f1:60:fc:fe:03:
         59:6c:a9:27:46:b4:40:2d:ed:b8:6b:20:43:1a:d4:99:78:a1:
         53:f9:cf:a5:67:01:66:be:df:20:c8:7d:63:22:8b:fb:c7:dd:
         f2:6a:ef:91:91:53:48:c3:da:22:e2:f6:73:05:ad:ef:bc:a3:
         1e:06:b8:1b:17:e9:99:00:eb:59:fc:6a:41:f7:0c:7e:bc:a7:
         00:00:2e:4a:25:35:f8:19:72:f2:f6:3c:c6:4f:79:6f:75:3d:
         c3:af:cd:cc:8e:1e:fa:8e:c5:f3:46:a7:98:ca:53:d7:91:66:
         42:71:06:0d:b4:ed:5b:ad:ad:e8:0e:0b:45:33:b9:2a:48:0d:
         bb:7c:ca:df:38:e1:f1:fd:01:c9:7c:20:f2:ae:f7:e0:cd:5b:
         65:36:f0:fe:ba:05:30:ec:37:69:ac:fd:4e:c3:2c:24:b6:ee:
         a2:04:03:dd:20:38:af:33:fe:e5:99:40:d1:18:a3:25:ea:e7:
         0f:58:e8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org