Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/3134312e3139332e32312e3132382f32362d3236203d3e20323035303538.roa
File: 3134312e3139332e32312e3132382f32362d3236203d3e20323035303538.roa (raw, json)
Hash identifier: Ly4wrDEwl8yPOL85l5NjAcLfK/4qAD98CcXu4L2j5tM=
Subject key identifier: AF:D4:B0:D1:C5:B7:03:F9:41:97:8C:96:BE:E3:25:FB:B9:3C:8B:93
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 5C77EAD8BCFE1D220EA67D8E11E21EB68218D76E
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/3134312e3139332e32312e3132382f32362d3236203d3e20323035303538.roa
Signing time: Mon 28 Feb 2022 01:00:02 +0000
ROA not before: Mon 28 Feb 2022 00:55:02 +0000
ROA not after: Mon 27 Feb 2023 01:00:02 +0000
asID: 205058
IP address blocks: 141.193.21.128/26 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:77:ea:d8:bc:fe:1d:22:0e:a6:7d:8e:11:e2:1e:b6:82:18:d7:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Feb 28 00:55:02 2022 GMT
Not After : Feb 27 01:00:02 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bd:86:b3:bb:37:d7:6c:7c:80:b5:39:7d:b5:
61:89:78:2e:40:ef:ae:56:fd:87:fd:78:c6:34:32:
ba:ee:3a:73:6c:45:af:f9:99:70:7c:d1:6b:e4:f4:
4a:cf:16:5f:79:f7:8c:ae:37:87:0a:7f:dc:a4:97:
d8:8e:15:0d:b8:f9:87:7a:68:8c:ed:f6:25:01:94:
eb:6a:95:b4:f0:82:2a:6f:43:66:fd:4f:c4:c2:3f:
f8:77:bd:ad:ac:b2:8a:ab:3c:ae:0d:e7:d0:48:95:
38:78:7f:4e:75:0f:e5:02:d8:6c:e1:a4:7e:83:f5:
a5:56:d2:98:b3:09:7d:c6:dd:fa:40:8b:0e:d8:1c:
b0:5c:f5:cc:0c:6f:c9:04:86:87:35:f1:b1:1e:47:
59:7e:7b:0b:1f:7d:3c:17:56:bf:1f:79:09:15:0f:
67:85:4d:27:e4:18:99:86:e8:05:99:10:99:46:b8:
4c:14:20:9d:9c:4e:27:5a:ab:dd:f0:7b:c2:0c:c9:
c4:1a:b6:9b:08:a5:62:c7:6d:c6:7e:4b:ea:fb:8d:
86:b9:3c:48:f7:4f:25:23:20:29:f2:97:c7:f9:2d:
d2:4d:87:91:24:ae:3c:a6:50:dc:69:f4:58:ea:23:
64:a2:65:ef:8d:a7:19:93:cd:9f:89:51:55:2d:9f:
9c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D4:B0:D1:C5:B7:03:F9:41:97:8C:96:BE:E3:25:FB:B9:3C:8B:93
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/3134312e3139332e32312e3132382f32362d3236203d3e20323035303538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.193.21.128/26
Signature Algorithm: sha256WithRSAEncryption
85:ad:39:ee:c1:47:43:75:95:23:b3:a4:2a:41:1f:c7:ae:31:
5b:d7:6e:74:28:99:60:b3:52:bf:e0:c6:b5:9d:0c:84:d0:42:
3d:74:f9:f9:2f:bd:81:7f:ca:ea:fe:8b:1d:2b:e4:8b:ca:3c:
39:85:d8:e9:7a:d2:f1:3b:88:16:4d:af:61:1f:2b:9e:bb:76:
c4:aa:c9:62:ac:0e:9d:76:04:bb:44:a8:f2:78:53:9a:48:d5:
12:2c:67:60:82:74:dc:54:c5:94:8a:f1:45:58:a7:09:81:60:
67:68:bc:d7:96:e7:5a:6c:43:62:d0:41:38:47:66:5b:14:77:
bd:84:6c:17:f1:d0:53:f2:02:47:5c:4f:33:85:56:56:3a:73:
66:2f:fb:2c:d2:57:0f:fc:38:35:f4:ea:31:dd:46:cb:97:41:
51:ef:7d:64:eb:23:49:cb:fb:64:19:3f:55:e5:b5:2a:ff:d2:
5b:08:6e:55:8e:1e:3f:6c:f0:6a:14:6f:0e:48:ae:f0:71:4c:
71:3c:96:6d:b3:5b:13:62:86:1f:66:ba:44:94:de:f2:2f:2b:
f0:76:1c:50:c2:fc:73:3b:bb:ab:3c:09:8a:57:aa:f2:82:73:
02:6f:8a:b0:f8:84:a7:58:62:b0:b9:3a:32:cd:c7:05:2c:20:
f3:c9:81:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:50 2024 by rpki-client on console-ams.rpki-client.org