Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/3134312e3139332e32312e302f32342d3234203d3e203436393937.roa
File: 3134312e3139332e32312e302f32342d3234203d3e203436393937.roa (raw, json)
Hash identifier: JCPTaiuqBFjXvIB2DMTQpkJfoDAdGmPlUrrzhq6FKJg=
Subject key identifier: A8:46:38:9D:45:7D:55:0F:1E:FD:3A:41:0C:37:6F:00:CA:6C:04:4D
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 6D1EB79D705389E48E72347D298F6B05F72890B7
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/3134312e3139332e32312e302f32342d3234203d3e203436393937.roa
Signing time: Mon 28 Feb 2022 01:00:07 +0000
ROA not before: Mon 28 Feb 2022 00:55:07 +0000
ROA not after: Mon 27 Feb 2023 01:00:07 +0000
asID: 46997
IP address blocks: 141.193.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:1e:b7:9d:70:53:89:e4:8e:72:34:7d:29:8f:6b:05:f7:28:90:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Feb 28 00:55:07 2022 GMT
Not After : Feb 27 01:00:07 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3b:6a:6c:88:f6:ac:ad:b9:2a:c7:de:de:fc:
bc:04:64:89:d9:82:7a:46:81:c9:b5:b5:4d:33:90:
31:ee:2d:0e:29:41:82:3b:a0:9c:61:97:74:1b:89:
db:4d:5f:dc:6f:be:b5:98:84:2b:4d:78:8e:06:df:
f2:38:66:30:3d:30:2f:ba:55:64:56:f0:45:7c:9b:
7b:cc:c8:4a:33:9d:3f:11:8f:51:95:6f:9a:51:07:
cc:a0:f0:db:c4:7a:be:fc:4a:bf:08:ca:7e:b4:03:
b8:c4:a6:af:26:dc:eb:1c:34:77:a3:c7:4f:2b:e1:
78:d6:9d:63:ad:f5:56:2a:11:d2:24:d3:c9:e0:43:
de:19:c9:ae:ff:d1:cb:13:16:c0:fb:5a:cd:47:b8:
cb:e9:b2:64:ad:9d:e7:83:8e:b7:23:47:4a:54:c6:
39:83:2b:75:3b:66:91:3f:fe:d8:35:88:99:f9:3f:
b8:31:eb:cf:f4:b7:25:e7:db:e8:ff:17:5b:cb:41:
db:57:33:2c:cb:df:13:12:dc:2a:20:d1:df:68:ac:
5e:6d:68:65:92:cd:c6:c4:0c:bc:01:e3:e5:8f:87:
c2:0f:5b:13:99:b7:de:b3:5a:57:c1:00:08:1d:27:
32:65:8c:16:2a:a0:e1:89:ce:71:b2:b9:c6:9a:95:
0e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:46:38:9D:45:7D:55:0F:1E:FD:3A:41:0C:37:6F:00:CA:6C:04:4D
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/3134312e3139332e32312e302f32342d3234203d3e203436393937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.193.21.0/24
Signature Algorithm: sha256WithRSAEncryption
32:44:47:02:92:22:8a:2a:d9:24:03:cf:1a:be:be:3e:fa:76:
89:78:7a:c2:ba:59:ca:86:c1:da:98:e3:ee:48:09:aa:0f:7e:
7e:2e:e9:87:a2:6e:01:9a:a8:47:ff:b7:85:f0:82:0a:0b:6a:
36:cf:f7:7a:3f:26:a8:89:84:3d:45:56:a6:28:35:7b:fb:db:
0c:d0:d4:1b:b5:c5:bf:13:62:ff:a0:00:9e:5b:8e:d2:02:a4:
84:70:8c:e8:d5:c3:29:be:cd:48:50:87:6e:68:b6:d2:1f:a2:
14:5b:52:f9:26:0e:16:ff:6e:97:89:5f:56:03:56:3a:55:a4:
b9:8f:2d:84:6e:89:45:a6:cc:b7:42:71:05:b6:10:cb:31:72:
f5:04:69:47:a0:0b:60:73:f8:a0:22:64:52:30:d2:f6:a1:f7:
9d:f9:c1:5c:06:f4:e8:aa:b0:44:d2:38:bd:34:8c:40:79:e9:
5b:ad:32:8a:bf:23:1a:7a:ec:56:f8:6d:ca:0b:99:d9:fa:33:
b6:9f:6d:1c:ee:77:85:21:f6:5e:85:e7:ef:38:02:96:90:7e:
4c:b9:18:7f:a9:89:57:52:c7:fa:c9:9e:1f:4d:ca:1e:11:74:
44:a0:a5:d7:6a:d8:56:60:bc:2a:1e:b6:99:39:04:b5:ed:76:
24:15:bc:f2
-----BEGIN CERTIFICATE-----
MIIG8jCCBdqgAwIBAgIUbR63nXBTieSOcjR9KY9rBfcokLcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDEwODM5OENBOTg4MzgyQzJBNTA5QkZEQjM5RTE0NkE3
NkNGOURFMDAeFw0yMjAyMjgwMDU1MDdaFw0yMzAyMjcwMTAwMDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzAzQjZBNkM4OEY2QUNBREI5
MkFDN0RFREVGQ0JDMDQ2NDg5RDk4MjdBNDY4MUM5QjVCNTREMzM5MDMxRUUyRDBF
Mjk0MTgyM0JBMDlDNjE5Nzc0MUI4OURCNEQ1RkRDNkZCRUI1OTg4NDJCNEQ3ODhF
MDZERkYyMzg2NjMwM0QzMDJGQkE1NTY0NTZGMDQ1N0M5QjdCQ0NDODRBMzM5RDNG
MTE4RjUxOTU2RjlBNTEwN0NDQTBGMERCQzQ3QUJFRkM0QUJGMDhDQTdFQjQwM0I4
QzRBNkFGMjZEQ0VCMUMzNDc3QTNDNzRGMkJFMTc4RDY5RDYzQURGNTU2MkExMUQy
MjREM0M5RTA0M0RFMTlDOUFFRkZEMUNCMTMxNkMwRkI1QUNENDdCOENCRTlCMjY0
QUQ5REU3ODM4RUI3MjM0NzRBNTRDNjM5ODMyQjc1M0I2NjkxM0ZGRUQ4MzU4ODk5
RjkzRkI4MzFFQkNGRjRCNzI1RTdEQkU4RkYxNzVCQ0I0MURCNTczMzJDQ0JERjEz
MTJEQzJBMjBEMURGNjhBQzVFNkQ2ODY1OTJDREM2QzQwQ0JDMDFFM0U1OEY4N0My
MEY1QjEzOTlCN0RFQjM1QTU3QzEwMDA4MUQyNzMyNjU4QzE2MkFBMEUxODlDRTcx
QjJCOUM2OUE5NTBFM0YwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwDtqbIj2rK25Ksfe3vy8BGSJ2YJ6RoHJtbVNM5Ax7i0OKUGCO6Cc
YZd0G4nbTV/cb761mIQrTXiOBt/yOGYwPTAvulVkVvBFfJt7zMhKM50/EY9RlW+a
UQfMoPDbxHq+/Eq/CMp+tAO4xKavJtzrHDR3o8dPK+F41p1jrfVWKhHSJNPJ4EPe
Gcmu/9HLExbA+1rNR7jL6bJkrZ3ng463I0dKVMY5gyt1O2aRP/7YNYiZ+T+4MevP
9Lcl59vo/xdby0HbVzMsy98TEtwqINHfaKxebWhlks3GxAy8AePlj4fCD1sTmbfe
s1pXwQAIHScyZYwWKqDhic5xsrnGmpUOPwIDAQABo4ICADCCAfwwHQYDVR0OBBYE
FKhGOJ1FfVUPHv06QQw3bwDKbARNMB8GA1UdIwQYMBaAFAEIOYypiDgsKlCb/bOe
FGp2z53gMA4GA1UdDwEB/wQEAwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzov
L3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTE0RTc1MDAwMC8wLzAx
MDgzOThDQTk4ODM4MkMyQTUwOUJGREIzOUUxNDZBNzZDRjlERTAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9zYWt1eWEubmF0Lm1vZS9y
ZXBvL05BVE9DQS8wLzAxMDgzOThDQTk4ODM4MkMyQTUwOUJGREIzOUUxNDZBNzZD
RjlERTAuY2VyMIGLBggrBgEFBQcBCwR/MH0wewYIKwYBBQUHMAuGb3JzeW5jOi8v
cnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxMTRFNzUwMDAwLzAvMzEz
NDMxMmUzMTM5MzMyZTMyMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM2Mzkz
OTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAjcEVMA0GCSqGSIb3DQEBCwUAA4IBAQAyREcCkiKKKtkk
A88avr4++naJeHrCulnKhsHamOPuSAmqD35+LumHom4BmqhH/7eF8IIKC2o2z/d6
PyaoiYQ9RVamKDV7+9sM0NQbtcW/E2L/oACeW47SAqSEcIzo1cMpvs1IUIduaLbS
H6IUW1L5Jg4W/26XiV9WA1Y6VaS5jy2EbolFpsy3QnEFthDLMXL1BGlHoAtgc/ig
ImRSMNL2ofed+cFcBvToqrBE0ji9NIxAeelbrTKKvyMaeuxW+G3KC5nZ+jO2n20c
7neFIfZehefvOAKWkH5MuRh/qYlXUsf6yZ4fTcoeEXREoKXXathWYLwqHraZOQS1
7XYkFbzy
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:50 2024 by rpki-client on console-ams.rpki-client.org