Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/q_U370cLuJeG5nEyBwNuCOKysvQ.roa
File:                     q_U370cLuJeG5nEyBwNuCOKysvQ.roa (raw, json)
Hash identifier:          DtdkfDM/be3NeznZuaL4ACBAnM9DBApfb0ivP1nkI10=
Subject key identifier:   AB:F5:37:EF:47:0B:B8:97:86:E6:71:32:07:03:6E:08:E2:B2:B2:F4
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       3D
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/q_U370cLuJeG5nEyBwNuCOKysvQ.roa
Signing time:             Tue 11 Oct 2022 09:36:12 +0000
ROA not before:           Tue 11 Oct 2022 09:36:12 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        210.238.18.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct 11 09:36:12 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=ABF537EF470BB89786E6713207036E08E2B2B2F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:f4:74:81:4a:fd:f3:93:0b:6c:e3:8c:5f:88:
                    30:e5:dc:7e:fb:9c:e2:b9:eb:62:72:e5:78:e2:f2:
                    86:c2:15:42:e2:1e:ce:ed:ae:9d:2f:9f:43:04:4f:
                    a2:a1:d3:ea:7b:a4:33:6e:70:59:5f:06:80:58:bc:
                    2b:3b:6c:d6:e1:d2:81:0c:ab:91:d4:72:30:bd:58:
                    5f:27:17:d9:0d:fd:1d:d3:4b:c2:0a:39:51:bc:47:
                    a0:23:2c:e5:73:85:30:c7:9a:0a:52:1c:b7:6f:0f:
                    fb:a1:77:91:8f:65:c0:b4:12:5c:0d:a4:72:fb:a2:
                    0e:30:d2:ca:88:b2:8c:66:3e:a3:c7:8b:e2:2b:47:
                    f7:25:42:5b:fc:0a:db:7d:ae:1f:fc:12:e0:bd:af:
                    d3:aa:3e:ea:81:51:33:49:95:47:cf:e5:9b:5e:dc:
                    b5:01:cd:44:e1:4f:f0:f1:91:ec:b4:c9:d1:06:89:
                    10:9c:ed:27:08:48:f7:7b:07:a5:bd:bb:17:09:04:
                    45:10:b7:c0:8f:54:49:cc:31:ab:83:84:bd:74:e3:
                    08:1d:db:57:a4:62:f0:ba:35:58:fb:39:14:26:82:
                    fb:28:a5:93:7b:8b:36:cb:d9:2b:6f:28:fc:f6:f4:
                    eb:11:a6:f2:42:ac:c2:c2:32:8b:40:95:eb:87:29:
                    52:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F5:37:EF:47:0B:B8:97:86:E6:71:32:07:03:6E:08:E2:B2:B2:F4
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/q_U370cLuJeG5nEyBwNuCOKysvQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.238.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:71:36:b6:71:da:a8:58:0a:56:72:10:1c:92:d1:b0:87:c4:
         9d:54:1a:fe:86:1b:a9:15:7d:86:51:de:90:70:67:55:19:86:
         92:cb:d4:6d:37:57:a2:00:05:36:98:49:57:65:48:33:37:95:
         08:86:9a:7f:2f:ec:89:eb:ca:86:f7:15:fa:8c:94:be:b5:ad:
         7e:8b:a9:8a:0c:98:84:c1:03:76:9b:42:42:ba:c1:9e:37:f7:
         08:ad:2b:bf:5d:46:0c:d5:a3:68:75:73:0a:f5:4e:fc:90:be:
         a5:2a:79:68:fb:e9:42:25:de:60:a1:41:91:7b:9b:62:86:0c:
         3d:d1:30:ec:b6:62:1b:b1:3c:3e:fa:77:39:50:f4:55:c8:ac:
         eb:d8:36:8d:42:bd:bc:f9:61:e6:31:03:2f:46:c1:1f:7b:b3:
         72:06:87:d7:5a:fe:fc:29:06:6e:82:e0:b7:01:5a:46:4d:d4:
         1e:81:bc:74:c9:bf:f3:67:87:69:09:9c:46:35:02:92:28:ab:
         b5:26:d6:30:7d:35:70:27:6d:5c:d3:81:2e:c9:fa:e2:f1:67:
         ad:8c:43:f2:41:d3:1e:b5:17:f2:f2:95:97:77:ed:01:b7:fe:
         97:42:d0:97:36:8a:77:35:82:01:6c:48:70:44:4a:5a:dc:55:
         c6:d3:50:1d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org