Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/nYEVkAcbF3tl0ZsPX2d2_TeGKgU.roa
File:                     nYEVkAcbF3tl0ZsPX2d2_TeGKgU.roa (raw, json)
Hash identifier:          K9JN14Z4+Dai74hjgQ9iYmRqVII1PgnwH7csxMRDNWA=
Subject key identifier:   9D:81:15:90:07:1B:17:7B:65:D1:9B:0F:5F:67:76:FD:37:86:2A:05
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       0165
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/nYEVkAcbF3tl0ZsPX2d2_TeGKgU.roa
Signing time:             Sun 01 Oct 2023 01:35:49 +0000
ROA not before:           Sun 01 Oct 2023 01:35:49 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        211.1.104.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 357 (0x165)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:35:49 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=9D811590071B177B65D19B0F5F6776FD37862A05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b2:ea:54:98:84:75:2e:c7:2c:0c:bf:4e:25:
                    fa:0e:c1:b2:94:b3:99:9b:aa:35:30:2d:61:73:a2:
                    f5:1d:0b:12:46:c1:43:b7:98:27:f7:a1:0b:86:80:
                    d7:f6:04:5a:29:9f:67:9b:28:3b:17:57:a8:34:b8:
                    0a:b1:83:dc:9d:39:f2:34:32:84:f0:8b:0c:4f:20:
                    29:fe:ab:f9:6f:32:e1:db:71:26:d6:06:f6:42:e1:
                    b5:f5:88:87:e4:30:18:d9:97:c6:26:13:53:eb:3e:
                    f0:66:cc:fc:72:04:d4:d1:a0:5b:35:24:7c:a9:49:
                    f7:72:0d:6e:6f:21:94:8b:59:e1:ae:93:aa:35:d1:
                    da:9a:54:0a:76:9a:d7:b4:8f:61:d3:d4:cb:12:48:
                    65:ea:58:c8:a2:df:a7:c7:4d:f8:50:30:d8:50:2c:
                    5d:16:fc:d8:39:56:74:d7:e9:2b:c6:6c:e1:e3:7d:
                    4f:cf:ac:13:79:a6:53:a7:c1:d6:d1:a0:5e:da:5f:
                    40:4f:fd:04:28:c0:d2:a2:ab:75:4c:e7:29:52:de:
                    3f:69:50:00:1a:0f:77:7d:77:56:bd:f3:46:97:59:
                    1e:92:16:61:4a:ef:e8:07:15:6a:c0:07:8e:57:12:
                    b2:43:30:c6:aa:e9:eb:39:a0:fc:34:42:05:48:88:
                    ff:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:81:15:90:07:1B:17:7B:65:D1:9B:0F:5F:67:76:FD:37:86:2A:05
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/nYEVkAcbF3tl0ZsPX2d2_TeGKgU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.1.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         99:aa:d2:20:14:22:b6:af:bf:61:fd:5d:a3:7e:2c:f4:93:0c:
         93:4c:58:71:b3:7f:74:07:26:97:00:1c:de:b9:a7:f5:e3:65:
         75:4e:d7:88:3c:cc:24:0d:81:40:df:55:e0:aa:7a:0d:7a:ac:
         ac:7a:a4:40:0f:c5:6a:65:9b:83:6d:b4:fd:20:70:e9:9f:a5:
         8f:0b:c8:3e:90:4b:3a:67:25:34:d8:f8:cd:d3:07:48:db:0f:
         21:fc:87:83:5b:ee:3f:fd:18:4f:e2:bc:4d:a9:5d:6e:c3:bd:
         64:2c:a3:ca:bc:9e:8b:08:94:25:61:67:0e:1e:84:36:31:c5:
         10:b7:ea:81:2b:44:ca:20:4d:30:04:af:83:96:53:8e:41:0a:
         3f:34:c9:b2:04:81:8e:4b:13:78:9a:57:3e:e1:9c:eb:1f:cf:
         61:6e:ba:06:cb:e4:ab:73:5d:a5:19:3b:fa:65:e8:04:14:6b:
         ea:40:e6:5d:1c:a1:1f:91:86:da:5c:1d:ad:43:34:d7:04:0f:
         1e:c8:9d:60:16:d2:32:a9:63:a4:31:12:dd:e7:0a:65:0f:24:
         fd:50:6d:2e:57:3f:67:83:3c:61:ee:dc:aa:12:42:c2:e1:f1:
         3c:8f:d7:ab:1c:5a:ef:83:13:64:c1:8e:e5:f8:e6:0b:2c:df:
         54:c5:06:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org