Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/958/R2jZ3Pif-EwJrEPTBdcc5XBHWOg.roa
File:                     R2jZ3Pif-EwJrEPTBdcc5XBHWOg.roa (raw, json)
Hash identifier:          s/92BeXv+NrJx24W2HoPk8cdcPn9MLk9/P19bR8Efdo=
Subject key identifier:   47:68:D9:DC:F8:9F:F8:4C:09:AC:43:D3:05:D7:1C:E5:70:47:58:E8
Certificate issuer:       /CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
Certificate serial:       8C
Authority key identifier: 99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/R2jZ3Pif-EwJrEPTBdcc5XBHWOg.roa
Signing time:             Thu 29 Feb 2024 01:30:37 +0000
ROA not before:           Thu 29 Feb 2024 01:30:37 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     38631
IP address blocks:        203.104.144.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140 (0x8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
        Validity
            Not Before: Feb 29 01:30:37 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=4768D9DCF89FF84C09AC43D305D71CE5704758E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5d:74:d9:59:6a:41:fa:b3:d4:bd:72:7e:56:
                    77:17:3b:d2:91:61:e4:1c:bd:6f:33:ff:3b:83:47:
                    66:03:f6:d5:ea:f3:1d:ae:96:15:c6:a8:2f:d3:6b:
                    7d:c5:5f:77:1a:32:a9:07:5a:f4:e1:a7:d9:a4:a2:
                    4b:95:5e:c4:d9:2e:30:47:e6:8f:82:cd:37:8a:e4:
                    86:b5:90:5f:9c:16:2d:79:f5:ec:08:cd:23:dd:02:
                    f3:8e:b9:e8:7c:0d:95:f8:70:f3:27:31:c3:c1:18:
                    8a:89:85:a5:d2:b8:a7:81:73:64:2d:0e:3a:72:05:
                    84:97:f3:80:a2:fa:c7:66:48:76:27:3d:67:56:be:
                    59:7d:a2:06:4c:a7:0d:c4:28:d4:48:3d:48:bf:6f:
                    6b:ee:9c:7e:92:d7:a6:f4:d7:94:ab:b8:c2:cc:f2:
                    d4:1c:67:bd:46:63:b7:96:4f:94:23:59:15:f0:fa:
                    a8:81:15:2d:a3:f8:a0:6a:68:cc:1d:75:95:c8:21:
                    f9:75:98:31:58:cd:5f:e5:06:4f:0a:77:cc:ed:52:
                    2e:98:27:4e:e5:51:4f:2a:2b:27:2e:0b:66:74:f7:
                    30:7d:40:10:96:28:83:2c:77:d1:88:c3:9c:83:3a:
                    2e:08:74:fc:96:47:5f:c0:88:8a:ed:92:75:79:23:
                    61:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:68:D9:DC:F8:9F:F8:4C:09:AC:43:D3:05:D7:1C:E5:70:47:58:E8
            X509v3 Authority Key Identifier:
                keyid:99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/R2jZ3Pif-EwJrEPTBdcc5XBHWOg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.104.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         07:f0:0a:4f:84:c5:95:70:55:bd:63:d8:42:cf:b3:bd:52:e2:
         5a:c2:ac:98:f0:c3:01:9f:b2:5e:1d:d6:0e:4b:c5:5e:47:20:
         40:4b:4d:dd:a9:be:c7:f5:16:05:85:e8:80:6c:3f:8b:ae:76:
         7d:96:36:4c:7d:3b:2c:96:b7:59:7f:22:de:94:56:08:af:1d:
         cd:53:3a:86:b9:ee:3b:9a:f2:e8:4a:90:29:6e:96:88:f2:0d:
         47:dd:d8:1f:c5:30:6b:49:2b:a7:f7:87:ef:f0:6c:32:ef:3e:
         80:63:74:30:9e:4c:49:10:cf:01:d8:e8:b3:c1:8c:98:75:7a:
         43:e4:27:33:b3:28:56:b0:b6:99:96:03:18:d0:cb:2d:55:d5:
         21:fd:e3:9b:35:81:62:fa:49:fb:8d:91:9d:80:10:3d:3a:52:
         d0:d9:5a:38:f3:d1:bd:8d:60:5e:9c:6e:a4:86:31:ee:42:d2:
         1a:8e:83:52:51:06:ca:c3:8a:a3:67:e8:e2:d2:9c:07:3f:c1:
         5f:68:1d:8f:fb:e8:a6:fa:5c:00:b6:41:5d:99:aa:25:f7:95:
         3f:61:8c:e1:06:97:ac:be:52:b8:44:a4:32:74:58:dd:49:e7:
         6d:66:c7:cc:4f:a9:08:a2:3c:f4:78:fc:51:94:4a:7c:97:c6:
         17:83:5e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 10:20:59 2024 by rpki-client on console-ams.rpki-client.org