Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/3133342e3139352e3130302e302f32332d3233203d3e20333936393832.roa
File: 3133342e3139352e3130302e302f32332d3233203d3e20333936393832.roa (raw, json)
Hash identifier: Mq3oyVOIlYD6oYkN9NCmKsWATMB+G2vXM2wIkiR0suk=
Subject key identifier: C2:7F:C7:DF:E2:FC:1C:F9:DF:88:35:61:0E:B7:15:23:AB:21:9F:45
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 03C40A8DF67E076898821EF113DFA4EE0E7B37C6
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/3133342e3139352e3130302e302f32332d3233203d3e20333936393832.roa
Signing time: Sun 24 Jul 2022 02:00:00 +0000
ROA not before: Sun 24 Jul 2022 01:55:00 +0000
ROA not after: Sun 23 Jul 2023 02:00:00 +0000
asID: 396982
IP address blocks: 134.195.100.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:c4:0a:8d:f6:7e:07:68:98:82:1e:f1:13:df:a4:ee:0e:7b:37:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Jul 24 01:55:00 2022 GMT
Not After : Jul 23 02:00:00 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:41:31:af:69:d1:a6:76:a4:af:45:5a:7c:ce:
a1:a3:8c:78:b5:1e:bf:49:a8:f3:22:4e:73:8e:8a:
c4:1d:14:dc:8a:a9:11:0e:06:40:3b:43:f3:ff:44:
9e:ec:54:53:b4:fd:27:ed:ae:62:f5:e9:25:a6:d1:
99:97:b3:8a:d1:20:fa:a2:69:6e:ec:74:85:55:c3:
ee:26:f5:6a:23:03:54:f2:a5:a4:03:08:87:37:ae:
a0:3e:20:46:81:9e:ef:71:3f:26:25:54:ce:d9:b6:
3d:59:c2:c8:3d:e4:07:ab:2c:69:c2:0b:61:e3:30:
eb:54:31:4e:8f:04:9d:d2:67:d2:80:45:58:bd:b9:
07:fb:48:bc:6f:62:37:ff:8b:70:ad:62:0d:ff:cd:
90:f5:fb:b6:18:ef:56:7e:b0:32:ef:3e:c2:86:86:
ef:30:70:91:5e:6e:d0:63:46:4b:ed:92:60:11:39:
ea:fa:ff:85:ca:89:19:9c:c3:46:3f:f3:aa:cc:87:
b9:e4:e8:5f:94:2f:37:7e:14:58:20:8b:f0:70:f1:
80:9a:fa:3e:c7:85:5c:c4:99:d1:89:55:28:67:a9:
d7:34:8b:eb:47:aa:6f:c5:ef:2d:22:eb:e4:ed:b7:
64:2d:87:3f:0a:47:05:d9:ca:63:76:a7:09:bb:fb:
02:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7F:C7:DF:E2:FC:1C:F9:DF:88:35:61:0E:B7:15:23:AB:21:9F:45
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/3133342e3139352e3130302e302f32332d3233203d3e20333936393832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.195.100.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:95:ca:bf:f3:0c:89:30:e7:84:6b:6e:5b:44:07:aa:15:1a:
8a:bb:c1:dd:be:a9:5d:fb:2b:2b:f0:c0:d9:ee:9f:07:93:be:
ec:b5:77:5d:7a:6b:68:45:7e:26:8d:5b:2f:70:cd:d4:82:f9:
65:23:3a:e6:a6:e7:1f:a0:29:e7:3e:49:71:27:48:f0:7d:a0:
0e:66:dc:3f:d0:fc:cd:4e:04:89:5f:e1:6e:90:9b:6d:12:b9:
cf:6d:10:38:ad:5a:f2:42:8e:c0:b7:8e:9c:88:fb:9c:b9:aa:
42:76:4d:29:0f:b7:47:53:80:e6:ad:79:50:fe:81:9c:7a:77:
0a:23:f4:90:0d:bc:0f:30:f7:63:20:33:76:46:86:53:55:e3:
ad:f2:37:40:b6:a7:27:dd:be:1e:90:2e:0d:9a:dd:1a:c9:11:
4c:25:f5:36:62:44:d0:60:80:ac:69:96:e0:cd:a3:92:7f:55:
d7:72:d5:25:90:33:c9:23:4e:fc:0a:1e:2b:8b:98:16:d9:52:
dd:2d:89:cc:e0:f4:a9:11:72:db:58:d8:2b:f6:88:04:c8:47:
6c:e4:8f:d2:20:f0:c4:6b:84:36:c2:48:2d:6c:a2:0d:43:2b:
28:8d:00:70:ae:5a:4d:f9:2c:8b:cb:db:6a:bf:68:ae:6e:d7:
1d:cb:f5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org