Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/958/hFY0oN0kir99P4i2FcwgR7XNWk8.roa
File:                     hFY0oN0kir99P4i2FcwgR7XNWk8.roa (raw, json)
Hash identifier:          +NPjl5/KHQWQG3dEEke3Fas5cJ411Mu8qTqGBImFzrQ=
Subject key identifier:   84:56:34:A0:DD:24:8A:BF:7D:3F:88:B6:15:CC:20:47:B5:CD:5A:4F
Certificate issuer:       /CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
Certificate serial:       8E
Authority key identifier: 99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/hFY0oN0kir99P4i2FcwgR7XNWk8.roa
Signing time:             Thu 29 Feb 2024 01:30:37 +0000
ROA not before:           Thu 29 Feb 2024 01:30:37 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     38631
IP address blocks:        203.104.128.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
        Validity
            Not Before: Feb 29 01:30:37 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=845634A0DD248ABF7D3F88B615CC2047B5CD5A4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:47:c1:9d:94:6e:d4:85:8d:f7:9b:4f:cf:08:
                    92:5d:24:92:c5:16:c6:c7:ac:0f:34:8b:09:70:c4:
                    38:62:f0:9f:f3:a9:47:94:ae:00:34:d5:d2:26:bb:
                    fc:71:5a:ff:38:03:a6:bb:00:96:76:d3:f2:a7:30:
                    02:f5:88:99:59:fe:47:30:fa:8e:b0:8e:3a:d7:4a:
                    b9:18:79:5f:d0:17:16:c0:2e:13:d7:20:1a:47:54:
                    b2:2b:02:7e:f3:0c:c1:f4:d3:fa:7a:32:48:28:26:
                    24:94:45:9c:ab:e3:47:4c:6e:db:b7:eb:b7:53:59:
                    e5:77:7d:bd:71:e0:5b:f0:d8:2f:6f:10:70:21:cb:
                    ed:f8:ec:96:a1:69:ae:4f:86:c4:25:2e:b5:d3:47:
                    88:29:2b:ad:05:38:14:93:7c:80:04:72:14:be:bd:
                    3c:20:27:69:8a:4a:ea:6b:c5:58:9e:f1:e3:12:88:
                    3a:33:c6:6b:55:49:68:55:23:03:67:5e:58:2d:1b:
                    32:81:84:a2:d1:55:40:bb:98:fa:4e:7e:6c:b1:7b:
                    ea:72:a8:b7:1f:b7:8c:29:e8:b1:da:fa:df:b7:71:
                    9f:5c:dc:11:1d:73:e4:81:30:97:c0:7c:62:e6:f7:
                    43:db:a1:55:f5:8b:cc:32:a6:f3:82:fa:8d:6f:d2:
                    41:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:56:34:A0:DD:24:8A:BF:7D:3F:88:B6:15:CC:20:47:B5:CD:5A:4F
            X509v3 Authority Key Identifier:
                keyid:99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/hFY0oN0kir99P4i2FcwgR7XNWk8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.104.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         52:52:52:b5:f4:66:19:d3:f2:f4:d1:8b:f3:17:82:5a:f5:21:
         74:07:10:eb:98:67:3f:ae:f6:77:77:f2:93:d2:f4:2d:10:dc:
         d1:f1:29:ec:69:a4:be:86:db:88:e9:bc:02:c4:18:eb:af:43:
         fe:64:37:c7:15:f1:f6:15:85:14:44:c4:53:ea:09:40:b8:74:
         b7:ec:4e:4e:45:66:33:1e:69:0a:ca:92:62:b6:94:40:f0:f2:
         7e:25:7e:59:23:75:ac:b4:5f:10:48:5f:2f:94:47:fd:3b:e0:
         b9:4c:5e:1f:48:41:5a:6e:42:4f:b3:fa:dd:20:6e:e4:b3:a0:
         56:e8:99:ee:07:03:9d:64:f9:c8:32:d2:1b:d6:14:88:39:b5:
         b0:3c:66:3f:c7:e4:36:4c:7c:e2:80:15:66:6b:97:e9:2c:b2:
         7b:d7:99:5b:4d:fb:48:9f:8c:c1:f6:86:c5:0f:ad:50:a0:e6:
         46:39:33:29:e3:1f:73:ab:36:34:92:03:17:ad:7c:3f:94:1f:
         00:a6:95:0d:0f:80:95:ae:4c:50:4d:19:24:d9:2f:6d:c0:b1:
         b4:4a:e2:22:f7:dd:7a:15:aa:8b:4e:8d:85:77:da:e7:84:d5:
         f5:87:ab:ad:3c:96:cc:f8:1a:04:c3:54:27:69:f7:99:18:49:
         4d:33:e2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 11:54:47 2024 by rpki-client on console-fra.rpki-client.org