Route Origin Authorization
$ rpki-client -vvf rpki.apernet.io/repo/APERNET/1/323430363a343434303a36303a3a2f34342d3434203d3e20333936333033.roa
File: 323430363a343434303a36303a3a2f34342d3434203d3e20333936333033.roa (raw, json)
Hash identifier: 9XCeQLluoR2uKtqbugdFvG6PNdEYhFaEYsf2M+QnJWo=
Subject key identifier: BD:AC:54:8F:34:10:32:B7:FC:2D:94:2D:8C:55:4F:76:8E:9D:5A:E9
Certificate issuer: /CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
Certificate serial: 0952A0DBD48E11C49D8FD2FAC6829AD2078FD8E6
Authority key identifier: FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
Subject info access: rsync://rpki.apernet.io/repo/APERNET/1/323430363a343434303a36303a3a2f34342d3434203d3e20333936333033.roa
Signing time: Sun 27 Oct 2024 05:00:00 +0000
ROA not before: Sun 27 Oct 2024 04:55:00 +0000
ROA not after: Mon 27 Oct 2025 05:00:00 +0000
asID: 396303
IP address blocks: 2406:4440:60::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl
rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 Nov 2024 20:40:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:52:a0:db:d4:8e:11:c4:9d:8f:d2:fa:c6:82:9a:d2:07:8f:d8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
Validity
Not Before: Oct 27 04:55:00 2024 GMT
Not After : Oct 27 05:00:00 2025 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c9:f0:c8:63:07:22:2f:3e:f4:cd:23:18:d8:
52:01:19:0d:e9:4a:34:e4:3e:69:f6:d1:84:90:5f:
d2:7c:8d:1a:03:13:74:5d:eb:ac:d4:f8:9f:e7:3c:
63:56:b2:ab:23:9b:9f:bd:42:b8:bd:88:c1:fe:8e:
e5:54:4e:ae:fa:bd:b2:45:71:8d:79:1e:85:b3:c8:
3c:20:b6:2d:b0:ff:19:c4:0a:3a:9b:1d:3a:6b:db:
92:0c:d1:e5:9b:93:0a:1d:f0:11:ac:fc:e8:28:5d:
12:e6:4e:f6:1f:ec:b4:4b:bf:89:0d:fa:48:48:df:
36:46:d8:52:ca:23:2f:4d:a7:37:5a:ab:c0:f6:44:
7f:46:ff:97:66:a9:6d:1b:8d:2b:13:a7:ad:e1:62:
63:82:ae:7d:c8:1d:04:4d:7c:fd:69:e2:b8:cd:90:
5c:d9:16:f9:5f:b9:6a:e8:86:b7:cc:d9:21:0a:47:
e8:a4:2a:95:4f:45:67:95:b1:ea:6e:1d:60:8a:80:
d5:21:d6:7a:5e:ef:d0:ba:c6:25:5a:22:1d:4f:9a:
76:67:ae:c4:d8:c1:4f:a3:da:ff:6d:a6:53:2a:b7:
c0:ef:1e:9f:89:b9:6f:95:80:46:cd:a8:7b:16:59:
d5:85:b1:2e:15:30:56:b5:c6:c0:77:44:ae:eb:9c:
2c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AC:54:8F:34:10:32:B7:FC:2D:94:2D:8C:55:4F:76:8E:9D:5A:E9
X509v3 Authority Key Identifier:
keyid:FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/1/323430363a343434303a36303a3a2f34342d3434203d3e20333936333033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:4440:60::/44
Signature Algorithm: sha256WithRSAEncryption
6c:06:dc:ba:27:05:ae:b3:d5:f2:41:a9:ae:b2:64:8f:71:5c:
34:ed:95:d2:3b:18:7b:08:2a:1a:33:e9:33:a8:3e:fc:44:7b:
9d:cc:7e:19:25:5c:d3:10:9e:7a:0f:34:06:d9:00:4b:83:d7:
de:4f:05:cf:ea:e6:d0:43:2c:2c:bb:d4:44:8d:a4:cb:7f:8a:
2d:92:e5:51:14:08:9e:87:f9:a7:ac:bc:72:a5:80:f6:c3:17:
5b:3c:f9:98:3f:ce:b1:37:28:68:0c:0c:21:ab:4b:00:1c:3a:
b1:fb:c7:1c:06:fb:28:46:65:fa:77:ee:37:40:09:31:f9:c6:
80:66:8e:1d:b2:ed:b7:00:86:13:dc:56:53:1a:af:9a:cb:3a:
8c:cb:6f:a0:18:c2:09:56:32:87:09:9f:77:8b:3e:98:07:da:
62:51:78:76:a9:56:60:e9:02:2d:cf:dc:74:4d:a9:7e:71:d3:
ab:88:37:af:85:ee:d5:8b:4f:cc:12:67:49:75:02:f2:78:b4:
f0:d5:69:ff:0f:5c:d1:91:46:ad:da:a7:d9:97:2c:43:dd:69:
2d:cb:e3:2a:54:f4:29:a9:79:07:59:38:d4:92:c7:4d:4e:0a:
0d:14:23:e4:17:ed:f2:13:5f:ba:0a:57:d4:e4:e1:b5:6c:65:
14:b3:77:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:05:52 2024 by rpki-client on console-fra.rpki-client.org