Route Origin Authorization

$ rpki-client -vvf rpki.apernet.io/repo/APERNET/1/323430363a343434303a38303a3a2f34342d3438203d3e203436393937.roa
File:                     323430363a343434303a38303a3a2f34342d3438203d3e203436393937.roa (raw, json)
Hash identifier:          PWbi1odhaoaRDlAALK8/ApDLf1Qesl8Vt8U8dLB5EBU=
Subject key identifier:   04:80:A4:09:03:CA:DF:71:9E:18:F7:9D:09:C2:82:66:A2:A6:E9:29
Certificate issuer:       /CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
Certificate serial:       79193ADEF330D180F33AD1664E58A4AB765C4C82
Authority key identifier: FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
Subject info access:      rsync://rpki.apernet.io/repo/APERNET/1/323430363a343434303a38303a3a2f34342d3438203d3e203436393937.roa
Signing time:             Wed 19 Feb 2025 07:00:00 +0000
ROA not before:           Wed 19 Feb 2025 06:55:00 +0000
ROA not after:            Thu 19 Feb 2026 07:00:00 +0000
asID:                     46997
IP address blocks:        2406:4440:80::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:19:3a:de:f3:30:d1:80:f3:3a:d1:66:4e:58:a4:ab:76:5c:4c:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
        Validity
            Not Before: Feb 19 06:55:00 2025 GMT
            Not After : Feb 19 07:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:60:37:ce:db:90:f9:f1:94:b0:52:0d:da:2d:
                    1b:81:32:00:fb:19:e6:22:39:ba:d1:be:44:8f:61:
                    b6:6e:95:68:b0:75:0a:9b:33:95:35:e7:0a:4d:55:
                    bc:f1:f6:d4:c1:3f:3f:39:be:85:2a:f4:e7:f6:bf:
                    54:a6:f1:1f:6f:a3:dc:10:7a:39:88:94:33:6e:c5:
                    7d:0a:b1:69:52:09:ab:9a:c7:fb:64:43:fc:9b:ca:
                    1a:35:42:dc:5d:f7:b4:45:9b:00:2e:3e:9d:a1:7a:
                    b8:26:21:02:6e:9e:b3:93:72:13:e7:0b:5c:14:85:
                    59:52:ac:0a:b8:2c:a9:71:3d:0e:ee:9e:37:19:e5:
                    3d:15:04:47:73:2c:71:0e:8c:ce:eb:23:88:a1:25:
                    ce:b8:f4:20:a3:50:e9:2e:64:62:66:ba:35:9c:70:
                    a5:65:b4:9f:48:0a:96:10:c6:5e:a4:7c:6f:56:ab:
                    8c:d3:00:17:a7:4c:3c:fa:7a:4f:d6:e7:24:fd:82:
                    38:06:25:35:94:a0:cd:1b:75:33:45:23:b7:c7:69:
                    2b:83:45:28:9b:b9:fa:c3:d1:15:85:cb:03:ac:44:
                    de:9f:9b:62:3b:7f:2b:ad:35:d9:7c:c4:3f:67:06:
                    b1:e2:f9:c3:ec:ab:11:ca:f4:25:a2:98:bc:77:ac:
                    f0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:80:A4:09:03:CA:DF:71:9E:18:F7:9D:09:C2:82:66:A2:A6:E9:29
            X509v3 Authority Key Identifier:
                keyid:FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/1/323430363a343434303a38303a3a2f34342d3438203d3e203436393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:4440:80::/44

    Signature Algorithm: sha256WithRSAEncryption
         2a:eb:24:c0:88:3b:38:2f:84:4c:a6:be:57:07:f1:25:66:3d:
         05:22:da:a4:29:51:a9:82:c4:b1:ab:fc:78:8b:b9:c7:19:0b:
         a1:8d:7b:cf:8d:b1:56:d9:df:e8:8e:9a:01:21:f9:9d:73:ee:
         7a:c9:29:c7:e6:32:97:11:be:95:19:eb:0f:63:ee:f8:55:53:
         53:3c:f0:e3:51:dc:0c:54:f4:6a:86:86:9a:87:2e:27:72:d3:
         67:b0:9c:cb:ad:7c:7c:40:8b:82:70:f3:1d:98:f7:f8:64:58:
         ae:63:e4:e8:37:4c:58:42:f1:56:3c:c6:90:a3:78:cd:5b:6d:
         c2:ca:b5:f3:43:26:23:44:26:3e:fe:ce:1e:ab:6a:ab:0e:c2:
         c7:38:04:de:a5:e2:5c:51:51:a1:01:89:20:90:08:29:5c:69:
         e3:71:5f:45:84:1b:0e:50:a3:e1:b4:f0:cb:6a:90:43:a2:6d:
         ce:b8:e8:8e:5e:ee:c3:93:ad:42:2d:e5:b5:a4:19:12:43:d9:
         dc:d6:c0:18:a0:e9:c0:28:cf:63:28:b5:6f:c2:36:b1:6c:b1:
         3a:a9:f8:33:3d:14:38:14:48:4a:29:07:a4:b5:01:e6:35:b8:
         89:a8:dd:3f:51:3b:4d:ff:ef:9d:c3:25:b7:c6:79:76:64:be:
         51:75:fd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----