Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/958/v_hbC66phVVUU7Clg3hsR6RLGqY.roa
File:                     v_hbC66phVVUU7Clg3hsR6RLGqY.roa (raw, json)
Hash identifier:          xv2e0Y96H0nQ5PIBdh6xNIk17L6Ww0c9hyyH+tE79Xk=
Subject key identifier:   BF:F8:5B:0B:AE:A9:85:55:54:53:B0:A5:83:78:6C:47:A4:4B:1A:A6
Certificate issuer:       /CN=7DF54AA100E9F4B66535E920EB89E2E14BCACDB0
Certificate serial:       3E
Authority key identifier: 7D:F5:4A:A1:00:E9:F4:B6:65:35:E9:20:EB:89:E2:E1:4B:CA:CD:B0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ffVKoQDp9LZlNekg64ni4UvKzbA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/v_hbC66phVVUU7Clg3hsR6RLGqY.roa
Signing time:             Thu 29 Feb 2024 01:30:39 +0000
ROA not before:           Thu 29 Feb 2024 01:30:39 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     38631
IP address blocks:        147.92.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DF54AA100E9F4B66535E920EB89E2E14BCACDB0
        Validity
            Not Before: Feb 29 01:30:39 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=BFF85B0BAEA985555453B0A583786C47A44B1AA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d2:69:11:53:74:ab:6c:de:ab:41:ce:2f:19:
                    f7:ef:3b:4a:d7:7f:5a:09:68:22:2c:5b:d4:15:b9:
                    9d:1e:28:c4:fa:74:45:f3:3c:d6:cf:2d:15:8a:25:
                    ac:9a:cf:d5:83:52:79:23:cb:59:49:2d:01:49:d6:
                    ef:30:ed:5f:35:93:3d:92:7d:41:e6:73:b6:e1:4b:
                    2d:a2:a4:00:14:4d:35:22:0f:3f:e2:88:50:01:55:
                    63:80:1b:dd:68:e8:4d:b6:fc:26:3f:64:2a:1e:6e:
                    d2:b2:88:90:2f:0b:3e:95:a5:69:bd:f8:8c:53:c8:
                    6c:59:3e:27:ff:7f:a2:81:16:e6:0f:af:b4:1e:33:
                    05:ea:2f:f9:3d:81:a3:6e:7d:5a:d5:7a:b5:16:aa:
                    69:70:04:a5:0f:e8:4e:bb:6e:92:b9:22:3d:b4:2e:
                    cc:5b:9d:e9:96:dd:74:46:77:40:75:e4:2f:f2:ca:
                    d5:b9:a0:5b:2d:94:7f:24:bf:31:5c:34:db:3e:5c:
                    d4:98:7e:0f:d6:9b:90:be:11:46:e5:9a:91:61:a7:
                    61:af:75:a4:d3:94:d9:62:78:7d:5c:c2:6b:c0:64:
                    49:4c:6b:ce:3e:c3:e9:ee:ef:fe:b1:84:81:6e:a3:
                    76:ac:f8:f4:57:7c:fa:68:4a:2b:a2:fc:64:a9:da:
                    f9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F8:5B:0B:AE:A9:85:55:54:53:B0:A5:83:78:6C:47:A4:4B:1A:A6
            X509v3 Authority Key Identifier:
                keyid:7D:F5:4A:A1:00:E9:F4:B6:65:35:E9:20:EB:89:E2:E1:4B:CA:CD:B0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/ffVKoQDp9LZlNekg64ni4UvKzbA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ffVKoQDp9LZlNekg64ni4UvKzbA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/v_hbC66phVVUU7Clg3hsR6RLGqY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.92.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         63:97:e9:42:7a:d5:7c:5b:79:a3:0e:83:f1:44:73:2c:d0:1e:
         55:32:b4:ed:fa:42:92:02:5a:56:1c:8f:01:90:db:a4:b0:b9:
         c8:68:7a:7e:49:8d:8b:ef:57:62:cc:df:f6:e6:29:b7:6f:1b:
         9a:91:b7:8f:af:e2:7d:d9:26:99:37:c0:15:6f:82:31:93:fd:
         eb:5f:12:c6:76:97:66:3d:31:b2:40:17:9b:f7:5f:67:ff:ca:
         56:ad:ad:63:a9:0c:fc:9d:9a:85:52:9c:96:d1:2b:65:01:b4:
         24:a8:b8:c6:10:c1:07:bc:39:ed:35:88:66:37:73:e0:9d:12:
         40:36:09:e1:45:25:d7:30:93:65:3c:b4:99:06:17:eb:28:32:
         0f:a5:12:f5:3f:d6:ca:a8:dc:ae:68:73:91:17:45:15:b1:13:
         10:1d:92:d7:d5:55:4a:6f:f6:2d:ef:1a:24:ac:fd:2a:4a:26:
         52:06:0b:84:b2:c2:97:69:e1:ac:e9:c2:b2:19:48:0a:fb:03:
         ca:97:55:02:e4:e5:c5:3e:2e:32:c6:00:cd:42:21:a0:9f:10:
         0d:7a:d7:8f:80:32:91:a9:4f:f8:54:53:6e:72:e2:a9:b8:01:
         27:09:05:f0:6f:ec:c4:8c:1e:a9:f7:7e:05:86:76:81:f9:3e:
         7d:63:f9:02
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBPjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3REY1
NEFBMTAwRTlGNEI2NjUzNUU5MjBFQjg5RTJFMTRCQ0FDREIwMB4XDTI0MDIyOTAx
MzAzOVoXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoQkZGODVCMEJBRUE5ODU1
NTU0NTNCMEE1ODM3ODZDNDdBNDRCMUFBNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMPSaRFTdKts3qtBzi8Z9+87Std/WgloIixb1BW5nR4oxPp0RfM8
1s8tFYolrJrP1YNSeSPLWUktAUnW7zDtXzWTPZJ9QeZztuFLLaKkABRNNSIPP+KI
UAFVY4Ab3WjoTbb8Jj9kKh5u0rKIkC8LPpWlab34jFPIbFk+J/9/ooEW5g+vtB4z
Beov+T2Bo259WtV6tRaqaXAEpQ/oTrtukrkiPbQuzFud6ZbddEZ3QHXkL/LK1bmg
Wy2UfyS/MVw02z5c1Jh+D9abkL4RRuWakWGnYa91pNOU2WJ4fVzCa8BkSUxrzj7D
6e7v/rGEgW6jdqz49Fd8+mhKK6L8ZKna+WcCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBS/+FsLrqmFVVRTsKWDeGxHpEsapjAfBgNVHSMEGDAWgBR99UqhAOn0tmU16SDr
ieLhS8rNsDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTU4L2ZmVktvUURwOUxabE5la2c2NG5pNFV2S3piQS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2ZmVktvUURwOUxabE5la2c2NG5pNFV2
S3piQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85NTgvdl9oYkM2NnBoVlZVVTdDbGczaHNSNlJMR3FZLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEB5NcgDANBgkqhkiG9w0BAQsFAAOCAQEAY5fpQnrVfFt5ow6D8URzLNAeVTK0
7fpCkgJaVhyPAZDbpLC5yGh6fkmNi+9XYszf9uYpt28bmpG3j6/ifdkmmTfAFW+C
MZP9618SxnaXZj0xskAXm/dfZ//KVq2tY6kM/J2ahVKcltErZQG0JKi4xhDBB7w5
7TWIZjdz4J0SQDYJ4UUl1zCTZTy0mQYX6ygyD6US9T/WyqjcrmhzkRdFFbETEB2S
19VVSm/2Le8aJKz9KkomUgYLhLLCl2nhrOnCshlICvsDypdVAuTlxT4uMsYAzUIh
oJ8QDXrXj4AykalP+FRTbnLiqbgBJwkF8G/sxIweqfd+BYZ2gfk+fWP5Ag==
-----END CERTIFICATE-----
Generated at Wed Jun 26 11:54:47 2024 by rpki-client on console-fra.rpki-client.org