Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/32332e3234372e3133362e302f32322d3234203d3e203338303038.roa
File: 32332e3234372e3133362e302f32322d3234203d3e203338303038.roa (raw, json)
Hash identifier: m3v1okyU9+I06mqIznCt6m6Qe3m+OE78mbLZY21kLLE=
Subject key identifier: 04:FC:31:92:65:85:60:2F:78:4C:36:09:2A:8D:72:5E:C7:A2:06:C1
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 3523D8501114E00711C85C7AD15FEE4DEEE713F2
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/32332e3234372e3133362e302f32322d3234203d3e203338303038.roa
Signing time: Fri 13 May 2022 12:18:30 +0000
ROA not before: Fri 13 May 2022 12:13:30 +0000
ROA not after: Fri 12 May 2023 12:18:30 +0000
asID: 38008
IP address blocks: 23.247.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:23:d8:50:11:14:e0:07:11:c8:5c:7a:d1:5f:ee:4d:ee:e7:13:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: May 13 12:13:30 2022 GMT
Not After : May 12 12:18:30 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5c:b2:60:2b:9f:46:5a:b5:44:92:65:bf:a4:
8e:e1:92:4f:65:dd:52:0a:60:e3:88:97:61:56:b5:
d4:b8:16:45:87:1a:47:84:fb:a1:91:e4:51:a8:a0:
f5:8b:3a:21:be:64:40:b5:c9:f5:b6:dd:85:70:08:
14:97:76:29:2a:76:28:2b:e9:10:a6:87:0a:19:da:
ce:ce:7e:53:f0:12:a0:93:c5:b9:98:8b:d8:2c:98:
fc:7c:ae:6c:a7:29:fb:8b:0d:30:20:e6:07:e9:49:
dd:f5:20:ce:0f:86:c9:f8:0a:ef:e5:b3:3c:bd:99:
68:16:15:9b:56:25:4a:c5:e9:d8:a9:82:95:ec:47:
63:57:68:a2:e0:0b:96:fb:a9:00:e8:ad:fb:d8:de:
2d:39:dc:58:a5:18:12:bc:15:80:49:bf:d6:40:a6:
05:19:d8:bb:bf:55:49:31:15:26:31:89:51:e0:e8:
31:e1:1d:54:35:7f:b6:f6:aa:18:20:60:f6:2d:42:
18:6b:1e:d5:de:66:1a:24:2c:5c:d7:f7:14:26:b2:
a8:0a:88:2c:a9:de:d4:d7:8f:87:1b:b5:91:81:66:
b6:2c:e9:26:b6:cf:88:a1:fa:8c:42:40:ac:1d:ad:
f7:87:22:26:87:fa:14:49:c6:fa:ab:80:1a:84:7e:
f0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FC:31:92:65:85:60:2F:78:4C:36:09:2A:8D:72:5E:C7:A2:06:C1
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/32332e3234372e3133362e302f32322d3234203d3e203338303038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.247.136.0/22
Signature Algorithm: sha256WithRSAEncryption
81:91:63:40:f1:00:48:a3:b9:9e:97:0e:91:64:07:e6:90:ed:
90:2e:ec:9f:2c:03:01:6f:a4:56:df:c3:3f:f8:97:66:4c:1d:
50:c3:3b:ac:98:ba:d3:9a:3e:dd:50:d9:0e:39:48:79:db:14:
23:fd:6f:d9:10:4c:66:63:55:f1:d8:28:3c:8b:b4:a9:b5:21:
a2:30:16:e5:bd:bb:e9:ed:28:a6:91:19:93:92:2d:3f:30:f9:
7c:ec:46:c6:16:50:73:68:11:76:ff:ea:4c:dd:2a:78:d4:5d:
00:49:82:6f:4e:a9:75:41:69:ab:ad:d5:68:d0:25:c0:d3:95:
4e:56:7d:1c:c8:a7:33:38:1f:ad:e3:1e:bc:4f:3f:61:9b:20:
ac:1c:53:90:6a:79:ad:5e:d6:68:e2:a8:8e:9f:cd:b4:2f:76:
17:ac:ff:e5:3b:26:a0:9d:a9:93:16:f1:fa:0e:65:48:3c:97:
c8:b8:ae:2a:37:52:31:6d:95:ce:5b:8d:ee:f6:b3:96:cd:c3:
fe:08:8b:7b:77:fe:51:66:df:6a:8e:ca:70:cb:20:e9:4d:64:
e1:aa:1e:96:bc:b0:0e:d6:17:15:2b:aa:c9:36:44:50:c2:41:
da:c7:e3:e6:e6:e5:f6:7d:78:40:f6:e9:e1:c7:c8:c3:50:99:
f6:1e:f2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:50 2024 by rpki-client on console-ams.rpki-client.org