Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ycYnDNJg6ULgJUVwxlN82J0BuMY.roa
File:                     ycYnDNJg6ULgJUVwxlN82J0BuMY.roa (raw, json)
Hash identifier:          s6w8vqdiEcmO5Uj2zKgF5cYZqYeG5H/m/oOlrD5CcsY=
Subject key identifier:   C9:C6:27:0C:D2:60:E9:42:E0:25:45:70:C6:53:7C:D8:9D:01:B8:C6
Certificate issuer:       /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial:       011B
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ycYnDNJg6ULgJUVwxlN82J0BuMY.roa
Signing time:             Sun 01 Oct 2023 01:30:38 +0000
ROA not before:           Sun 01 Oct 2023 01:30:38 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        211.7.40.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
        Validity
            Not Before: Oct  1 01:30:38 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=C9C6270CD260E942E0254570C6537CD89D01B8C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e2:8d:b9:17:ca:e4:c7:c8:8e:9d:88:94:e8:
                    1c:59:51:b0:ab:04:4e:3d:71:38:b8:0a:83:40:01:
                    b0:4f:4a:c8:da:c0:fd:e2:27:f0:be:1e:ef:ee:01:
                    f3:67:6f:8e:3f:53:ab:69:13:61:a7:c5:5a:03:b4:
                    f5:2d:ab:41:29:ae:3d:c1:3b:27:bf:c5:69:64:23:
                    dd:ce:df:61:d7:65:a8:64:20:dc:19:ff:bd:2f:6b:
                    11:90:85:7c:fe:67:8c:d3:ed:4a:07:51:12:e8:77:
                    bc:c8:87:2e:5c:5e:63:54:72:52:cc:50:83:9f:8d:
                    2a:95:ea:d2:b2:06:a2:82:f9:f8:c1:b8:a1:26:f9:
                    23:a7:e4:14:d6:5f:1f:63:14:7f:a9:0f:33:ed:74:
                    3c:b1:c9:63:6e:91:45:90:4d:90:ab:b9:c9:98:a7:
                    c2:48:32:cd:1d:cd:8a:c5:60:15:9b:c6:6d:08:9c:
                    8f:22:c2:e8:22:ae:f4:ea:de:84:7b:5a:28:73:a2:
                    f1:e4:a3:cd:ac:07:bf:3c:fa:62:ca:4f:1a:5f:42:
                    a0:03:0a:7a:d8:27:a6:be:df:16:5e:00:2c:95:39:
                    ac:1d:4e:40:02:18:a9:f0:3c:ec:dd:45:da:fc:a0:
                    37:1b:6d:a6:d6:be:3d:66:99:a4:de:ad:8b:58:b3:
                    10:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C6:27:0C:D2:60:E9:42:E0:25:45:70:C6:53:7C:D8:9D:01:B8:C6
            X509v3 Authority Key Identifier:
                keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ycYnDNJg6ULgJUVwxlN82J0BuMY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.7.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:1b:94:81:9a:09:fe:66:7f:0e:ee:6c:79:0e:4e:1b:4b:fa:
         fd:bb:ec:27:d9:13:33:85:e7:e8:84:f6:5e:8e:a1:77:6e:94:
         c3:f0:37:b0:00:f3:0e:e5:94:99:29:65:15:7f:90:ce:4b:18:
         5b:b5:b7:26:b1:72:bf:eb:c6:08:e6:97:de:ac:c2:e3:9a:67:
         93:7f:21:e3:dd:92:3d:42:50:11:9e:fd:bb:63:02:13:60:52:
         1f:a3:4c:9b:4e:81:b2:c6:b8:2d:86:41:29:49:1d:63:72:bd:
         b1:a1:8e:6d:d0:d6:3e:5a:c2:4a:91:b1:26:8b:45:5c:be:4f:
         71:7d:2d:3e:f6:c0:14:d1:75:8b:47:e6:d4:42:4e:6f:22:25:
         cb:4b:9c:30:3e:e8:df:aa:0e:93:25:9c:7c:6f:c4:c4:82:1c:
         65:d9:ca:da:80:87:a1:28:0e:bc:5d:7f:18:2e:66:32:40:15:
         34:da:e6:be:59:74:f6:58:7c:a6:00:45:42:2d:3a:a4:9f:76:
         da:93:7d:50:3e:e1:ab:97:04:24:68:45:aa:0d:33:65:03:d7:
         6e:c1:0e:d5:15:b3:c6:89:75:d4:22:c5:42:91:5a:1f:43:03:
         31:49:ff:dc:ef:c5:a9:7c:62:c0:76:46:79:d8:c4:b6:ad:cd:
         00:e8:f5:b2
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICARswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzc2
MUEzQTlGQUU4N0Y4RjA2OUQ2ODI0NzFDQkUxQzkzNUZCRTMyMTAeFw0yMzEwMDEw
MTMwMzhaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEM5QzYyNzBDRDI2MEU5
NDJFMDI1NDU3MEM2NTM3Q0Q4OUQwMUI4QzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC34o25F8rkx8iOnYiU6BxZUbCrBE49cTi4CoNAAbBPSsjawP3i
J/C+Hu/uAfNnb44/U6tpE2GnxVoDtPUtq0Eprj3BOye/xWlkI93O32HXZahkINwZ
/70vaxGQhXz+Z4zT7UoHURLod7zIhy5cXmNUclLMUIOfjSqV6tKyBqKC+fjBuKEm
+SOn5BTWXx9jFH+pDzPtdDyxyWNukUWQTZCrucmYp8JIMs0dzYrFYBWbxm0InI8i
wugirvTq3oR7WihzovHko82sB788+mLKTxpfQqADCnrYJ6a+3xZeACyVOawdTkAC
GKnwPOzdRdr8oDcbbabWvj1mmaTerYtYsxBjAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUycYnDNJg6ULgJUVwxlN82J0BuMYwHwYDVR0jBBgwFoAUx2Gjqfrof48GnWgk
ccvhyTX74yEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMzQ3L3gyR2pxZnJvZjQ4R25XZ2tjY3ZoeVRYNzR5RS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3gyR2pxZnJvZjQ4R25XZ2tjY3Zo
eVRYNzR5RS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMzM0Ny95Y1luRE5KZzZVTGdKVVZ3eGxOODJKMEJ1TVku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQB0wcoMA0GCSqGSIb3DQEBCwUAA4IBAQCbG5SBmgn+Zn8O7mx5Dk4b
S/r9u+wn2RMzhefohPZejqF3bpTD8DewAPMO5ZSZKWUVf5DOSxhbtbcmsXK/68YI
5pferMLjmmeTfyHj3ZI9QlARnv27YwITYFIfo0ybToGyxrgthkEpSR1jcr2xoY5t
0NY+WsJKkbEmi0Vcvk9xfS0+9sAU0XWLR+bUQk5vIiXLS5wwPujfqg6TJZx8b8TE
ghxl2cragIehKA68XX8YLmYyQBU02ua+WXT2WHymAEVCLTqkn3bak31QPuGrlwQk
aEWqDTNlA9duwQ7VFbPGiXXUIsVCkVofQwMxSf/c78WpfGLAdkZ52MS2rc0A6PWy
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org