Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/32332e3234372e3133362e302f32322d3234203d3e203136353039.roa
File: 32332e3234372e3133362e302f32322d3234203d3e203136353039.roa (raw, json)
Hash identifier: b3jlvQrlPrWIyUofj+MLBhm8GMWQfHNV9XLfbjKJ764=
Subject key identifier: DC:FD:35:58:58:3F:9B:92:35:9B:E3:7D:C8:02:AA:11:26:91:48:AE
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 5ACFD0093CFCEC046854F609DA8380193432D97C
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/32332e3234372e3133362e302f32322d3234203d3e203136353039.roa
Signing time: Wed 18 May 2022 18:31:17 +0000
ROA not before: Wed 18 May 2022 18:26:17 +0000
ROA not after: Wed 17 May 2023 18:31:17 +0000
asID: 16509
IP address blocks: 23.247.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:cf:d0:09:3c:fc:ec:04:68:54:f6:09:da:83:80:19:34:32:d9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: May 18 18:26:17 2022 GMT
Not After : May 17 18:31:17 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:80:af:f8:41:3e:27:70:c7:ff:be:89:e2:9e:
9e:13:5a:b0:dd:2e:e1:0c:04:e0:2b:2f:c5:c1:37:
79:05:6b:c3:df:36:20:bd:38:af:80:6e:05:e6:61:
a0:f0:21:0b:9d:91:e8:b5:9a:d3:94:f3:91:e6:e6:
c7:80:77:73:b3:45:5d:60:2a:e3:4a:fa:f0:50:fc:
aa:e9:49:fc:45:b4:28:b5:57:3f:9c:ba:f2:fd:74:
8b:db:bb:52:f8:d2:c2:a8:9a:95:eb:c9:33:7a:ed:
02:11:c7:8c:3d:39:73:b0:22:49:a9:d7:d9:06:7a:
0c:ca:ef:d9:a3:ed:9c:f2:f1:d9:e2:6d:50:e0:46:
2f:95:68:1c:34:04:ce:4b:bf:e0:cc:ed:62:4b:f3:
71:6f:2e:6c:23:ce:9c:1f:ca:be:19:68:46:21:04:
46:4c:be:fd:be:ec:71:72:9d:ef:71:d5:76:12:b2:
79:ab:81:bd:0c:df:69:e3:60:c2:51:cb:15:04:14:
65:39:d3:0d:bf:8e:02:b7:52:c5:d8:9f:5b:10:41:
10:fb:ce:fc:ee:41:da:09:46:20:23:16:7d:6e:29:
ba:26:a3:73:86:ba:4a:0c:13:f5:02:ea:4c:23:38:
84:93:cb:61:35:0c:97:c8:82:26:d0:da:27:f4:66:
bd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FD:35:58:58:3F:9B:92:35:9B:E3:7D:C8:02:AA:11:26:91:48:AE
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/32332e3234372e3133362e302f32322d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.247.136.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:0c:3f:10:76:a3:88:2d:05:0e:1c:b0:e8:9e:64:8e:c0:dd:
99:47:2c:4b:d7:2e:a8:c8:2a:9a:bf:a4:c9:0f:62:a3:ef:f0:
35:57:f8:f4:11:42:18:e4:dd:a6:ae:c4:6f:b1:b4:81:83:21:
1c:b2:d7:ed:30:70:a2:ea:4d:82:23:fe:8b:c1:b9:b0:07:67:
f1:db:41:3f:96:73:b1:61:ba:70:aa:f7:87:98:5d:82:5e:1f:
ce:8a:c3:af:96:4e:ba:a7:d6:71:c4:3d:5e:e7:ab:ba:c1:cd:
ea:36:83:b8:72:97:49:2b:b8:64:91:ca:88:c0:cd:c9:fb:10:
c0:ac:52:d9:e7:a1:4d:e0:cd:e4:a3:36:fc:aa:09:02:70:16:
12:d7:d9:ff:a6:1e:38:01:54:53:3d:c0:05:ae:2f:81:2b:1d:
7e:1d:95:a0:fa:e6:28:59:86:c9:bf:0f:f0:ea:f6:cc:60:10:
b6:7d:ca:79:a2:e7:bf:43:4e:24:bc:dd:d4:81:23:55:2d:40:
66:5a:5b:e6:32:9d:58:7b:3a:a9:7f:9f:95:90:25:8a:b6:be:
6e:bc:dc:43:fc:e2:79:20:e0:e9:fc:61:38:3f:d8:aa:29:ff:
d8:72:0f:bf:06:a7:d2:ed:dc:84:08:2b:7e:06:3f:b2:33:a0:
47:11:80:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:50 2024 by rpki-client on console-ams.rpki-client.org