Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/958/xhYYbMZneKoOHy8GVV9STU6HGSA.roa
File:                     xhYYbMZneKoOHy8GVV9STU6HGSA.roa (raw, json)
Hash identifier:          65ErvDYS/vN/oQ+bR5VJ9tuCtnlZ3OcA5VmhxrCS38I=
Subject key identifier:   C6:16:18:6C:C6:67:78:AA:0E:1F:2F:06:55:5F:52:4D:4E:87:19:20
Certificate issuer:       /CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
Certificate serial:       88
Authority key identifier: 99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/xhYYbMZneKoOHy8GVV9STU6HGSA.roa
Signing time:             Thu 29 Feb 2024 01:30:35 +0000
ROA not before:           Thu 29 Feb 2024 01:30:35 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     38631
IP address blocks:        119.235.235.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
        Validity
            Not Before: Feb 29 01:30:35 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=C616186CC66778AA0E1F2F06555F524D4E871920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3f:2a:6e:39:b8:0a:be:e1:84:94:6d:3f:ae:
                    5a:a7:b6:d5:6b:66:5f:bf:3a:47:22:5f:5a:06:ef:
                    7c:09:c9:85:5e:ac:46:55:83:0e:d6:65:86:a7:33:
                    ab:ec:c4:04:6e:5e:a7:0e:a0:8a:ed:3c:2b:b6:d4:
                    c8:24:5c:fd:99:a9:48:ac:92:00:5e:34:7c:47:8c:
                    09:30:9e:4c:40:de:82:1b:a8:b7:76:8e:4d:53:ce:
                    0c:56:57:ca:78:93:f5:ed:b3:4a:07:1e:6b:82:f0:
                    7a:d1:2d:99:69:c3:06:80:f5:6a:70:71:f9:00:09:
                    e1:19:ca:60:31:f4:89:9a:f4:d1:81:eb:f7:f7:72:
                    d8:47:46:e2:ae:46:4b:a4:34:c4:a6:27:4b:84:0e:
                    32:0b:36:c2:cc:fa:5f:a4:b5:95:0a:0a:7b:ad:bf:
                    0b:51:5c:32:ed:98:8a:fe:32:d6:1d:34:85:fe:76:
                    27:08:f9:a8:80:34:f9:12:66:a3:b9:46:a1:c6:ce:
                    a4:7e:95:c8:46:8b:a5:08:6d:5d:99:ca:f3:ec:68:
                    94:e1:2c:81:f1:2e:d8:eb:f4:25:79:0b:b8:99:fa:
                    2f:07:59:e4:04:cf:35:80:5d:4b:3f:be:1e:2d:97:
                    97:98:1a:19:b2:92:a9:e2:72:0b:90:bd:91:5b:56:
                    f0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:16:18:6C:C6:67:78:AA:0E:1F:2F:06:55:5F:52:4D:4E:87:19:20
            X509v3 Authority Key Identifier:
                keyid:99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/xhYYbMZneKoOHy8GVV9STU6HGSA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.235.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:85:24:fa:64:37:59:61:8f:9a:3f:98:4d:63:d8:19:5b:67:
         3b:21:17:8b:7f:59:be:1d:e8:1d:ab:f6:44:97:1b:b6:09:68:
         6f:ab:a0:54:c1:79:51:4e:7b:9e:75:0d:4c:f1:4f:bf:6a:6e:
         4e:15:d1:2c:1c:7d:8a:30:d9:b0:c1:92:79:9b:49:75:85:d6:
         15:09:35:65:78:2e:c7:0b:4d:2a:7b:71:30:93:9d:f2:6a:a8:
         14:c0:0c:31:22:20:56:52:ae:33:ff:6b:5a:79:62:20:43:81:
         b1:cb:0c:ce:03:2e:26:46:a7:fd:de:cc:f1:e8:05:48:c5:5f:
         a3:6a:2c:44:75:64:5c:6b:a4:fa:ff:96:1f:e2:d8:1a:ea:a5:
         f6:9f:78:de:9d:a5:83:9d:1a:b7:d3:76:29:3e:81:1f:c8:32:
         a9:3a:12:e4:dd:d0:9a:75:02:60:8e:46:22:b0:70:c6:30:35:
         86:4d:15:55:ca:09:3a:52:be:d3:b0:db:9c:05:4d:14:8f:c6:
         a1:91:fb:d7:51:f6:fe:d2:de:09:29:81:f9:3d:39:cf:8a:31:
         28:10:36:f8:36:cb:dc:55:c9:6e:e8:57:cf:dd:42:5f:91:93:
         d6:15:af:66:50:5a:fd:02:22:f5:01:e8:d5:22:f6:d3:01:b9:
         e7:df:c8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 11:54:47 2024 by rpki-client on console-fra.rpki-client.org