Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/32332e3234372e3133362e302f32322d3234203d3e203436393937.roa
File: 32332e3234372e3133362e302f32322d3234203d3e203436393937.roa (raw, json)
Hash identifier: 1tc7bYFuxVqCqrut3Cjf6Z7Sp30fZbay8glxdvpUm7Q=
Subject key identifier: 12:99:45:30:E4:A8:F8:7D:B2:16:55:D8:F0:97:F9:EB:53:66:C9:C6
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 440416F8E8474DD3FB41D4617B17822D1DF4A365
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/32332e3234372e3133362e302f32322d3234203d3e203436393937.roa
Signing time: Fri 13 May 2022 12:18:23 +0000
ROA not before: Fri 13 May 2022 12:13:23 +0000
ROA not after: Fri 12 May 2023 12:18:23 +0000
asID: 46997
IP address blocks: 23.247.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:04:16:f8:e8:47:4d:d3:fb:41:d4:61:7b:17:82:2d:1d:f4:a3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: May 13 12:13:23 2022 GMT
Not After : May 12 12:18:23 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7d:9a:d4:ad:bb:50:e7:c1:6a:31:b4:e6:bc:
0a:f7:6d:1e:74:e9:d6:47:cb:b5:66:59:99:cf:1c:
30:76:c9:ff:13:7a:fd:c8:63:c9:92:4b:d4:18:e1:
5f:55:1e:fe:a5:8a:c7:8d:1d:50:19:63:10:7a:a3:
90:12:90:33:53:f3:92:05:40:68:bc:3b:ed:6a:cb:
51:61:8c:c5:88:87:40:46:0a:4e:5b:42:04:ac:67:
6d:35:39:c7:0e:bc:b6:8f:f6:ec:4e:ae:05:21:9f:
30:28:d9:49:cd:63:35:5f:a2:4e:c8:98:96:a5:5c:
6c:b5:f1:31:60:cb:5c:58:17:8c:5e:46:88:e2:de:
41:db:fc:73:cf:65:97:c2:89:83:35:f8:8b:4e:7b:
50:77:44:3e:96:3e:83:af:30:de:d9:ca:cc:99:9b:
d3:b5:b2:72:48:b6:6c:98:f2:8f:b0:52:83:43:61:
28:f1:3d:8e:8b:39:67:69:e7:f0:7a:4d:41:9a:cc:
88:61:a5:82:83:26:9f:4d:50:c6:06:ba:e5:df:25:
37:aa:74:9b:86:c8:fc:1a:6c:77:63:e5:a2:9d:25:
60:a7:6d:d0:f2:9b:44:9e:00:47:45:1d:3a:40:97:
af:8c:b6:bf:92:76:03:f4:a0:79:26:83:fa:db:7c:
16:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:99:45:30:E4:A8:F8:7D:B2:16:55:D8:F0:97:F9:EB:53:66:C9:C6
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/32332e3234372e3133362e302f32322d3234203d3e203436393937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.247.136.0/22
Signature Algorithm: sha256WithRSAEncryption
21:04:95:a2:49:e5:8f:65:74:79:9c:32:f1:c0:64:b1:8e:46:
c4:8d:65:f1:e0:0a:e9:18:08:73:a5:0d:44:78:da:b1:8b:e1:
ae:8a:ae:b8:40:6d:8f:9c:b0:8b:85:c1:48:48:80:d3:76:8c:
db:42:d6:81:4f:ce:86:07:94:95:fe:57:c1:92:e7:72:7c:02:
fa:e5:4f:3a:0d:06:2a:17:7f:a2:a1:c3:17:db:a4:41:57:c4:
6e:58:74:36:da:59:6c:00:21:7d:ea:79:90:01:6c:46:43:ac:
15:b7:be:03:a2:98:21:5e:5e:dd:63:2a:43:4a:cf:a9:2c:ec:
a1:21:81:11:4e:37:0a:2a:14:c6:63:34:58:54:29:01:8f:fb:
a9:f5:2f:11:27:af:65:d1:84:df:91:8c:ce:ae:66:5e:12:aa:
b8:13:b9:ec:a2:89:69:a1:f3:8f:20:91:21:99:27:00:1f:d4:
7d:80:1c:a2:5a:64:a2:d2:42:a5:64:28:70:e6:84:bf:64:59:
b3:c8:16:73:15:1a:cb:d3:2f:fb:80:ba:2d:6a:db:7b:f2:e3:
f2:9f:89:16:cf:6c:09:09:3b:02:8c:f2:ec:a5:4a:b3:b8:7d:
bc:78:54:87:cf:52:2d:77:64:22:e5:f8:71:63:1b:33:3d:8e:
31:f2:f1:b0
-----BEGIN CERTIFICATE-----
MIIG8jCCBdqgAwIBAgIURAQW+OhHTdP7QdRhexeCLR30o2UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDEwODM5OENBOTg4MzgyQzJBNTA5QkZEQjM5RTE0NkE3
NkNGOURFMDAeFw0yMjA1MTMxMjEzMjNaFw0yMzA1MTIxMjE4MjNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDQ3RDlBRDRBREJCNTBFN0Mx
NkEzMUI0RTZCQzBBRjc2RDFFNzRFOUQ2NDdDQkI1NjY1OTk5Q0YxQzMwNzZDOUZG
MTM3QUZEQzg2M0M5OTI0QkQ0MThFMTVGNTUxRUZFQTU4QUM3OEQxRDUwMTk2MzEw
N0FBMzkwMTI5MDMzNTNGMzkyMDU0MDY4QkMzQkVENkFDQjUxNjE4Q0M1ODg4NzQw
NDYwQTRFNUI0MjA0QUM2NzZEMzUzOUM3MEVCQ0I2OEZGNkVDNEVBRTA1MjE5RjMw
MjhEOTQ5Q0Q2MzM1NUZBMjRFQzg5ODk2QTU1QzZDQjVGMTMxNjBDQjVDNTgxNzhD
NUU0Njg4RTJERTQxREJGQzczQ0Y2NTk3QzI4OTgzMzVGODhCNEU3QjUwNzc0NDNF
OTYzRTgzQUYzMERFRDlDQUNDOTk5QkQzQjVCMjcyNDhCNjZDOThGMjhGQjA1Mjgz
NDM2MTI4RjEzRDhFOEIzOTY3NjlFN0YwN0E0RDQxOUFDQzg4NjFBNTgyODMyNjlG
NEQ1MEM2MDZCQUU1REYyNTM3QUE3NDlCODZDOEZDMUE2Qzc3NjNFNUEyOUQyNTYw
QTc2REQwRjI5QjQ0OUUwMDQ3NDUxRDNBNDA5N0FGOENCNkJGOTI3NjAzRjRBMDc5
MjY4M0ZBREI3QzE2QUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1H2a1K27UOfBajG05rwK920edOnWR8u1ZlmZzxwwdsn/E3r9yGPJ
kkvUGOFfVR7+pYrHjR1QGWMQeqOQEpAzU/OSBUBovDvtastRYYzFiIdARgpOW0IE
rGdtNTnHDry2j/bsTq4FIZ8wKNlJzWM1X6JOyJiWpVxstfExYMtcWBeMXkaI4t5B
2/xzz2WXwomDNfiLTntQd0Q+lj6DrzDe2crMmZvTtbJySLZsmPKPsFKDQ2Eo8T2O
izlnaefwek1BmsyIYaWCgyafTVDGBrrl3yU3qnSbhsj8Gmx3Y+WinSVgp23Q8ptE
ngBHRR06QJevjLa/knYD9KB5JoP623wWrQIDAQABo4ICADCCAfwwHQYDVR0OBBYE
FBKZRTDkqPh9shZV2PCX+etTZsnGMB8GA1UdIwQYMBaAFAEIOYypiDgsKlCb/bOe
FGp2z53gMA4GA1UdDwEB/wQEAwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzov
L3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTE0RTc1MDAwMC8wLzAx
MDgzOThDQTk4ODM4MkMyQTUwOUJGREIzOUUxNDZBNzZDRjlERTAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9zYWt1eWEubmF0Lm1vZS9y
ZXBvL05BVE9DQS8wLzAxMDgzOThDQTk4ODM4MkMyQTUwOUJGREIzOUUxNDZBNzZD
RjlERTAuY2VyMIGLBggrBgEFBQcBCwR/MH0wewYIKwYBBQUHMAuGb3JzeW5jOi8v
cnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxMTRFNzUwMDAwLzAvMzIz
MzJlMzIzNDM3MmUzMTMzMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNDM2Mzkz
OTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCF/eIMA0GCSqGSIb3DQEBCwUAA4IBAQAhBJWiSeWPZXR5
nDLxwGSxjkbEjWXx4ArpGAhzpQ1EeNqxi+Guiq64QG2PnLCLhcFISIDTdozbQtaB
T86GB5SV/lfBkudyfAL65U86DQYqF3+iocMX26RBV8RuWHQ22llsACF96nmQAWxG
Q6wVt74DopghXl7dYypDSs+pLOyhIYERTjcKKhTGYzRYVCkBj/up9S8RJ69l0YTf
kYzOrmZeEqq4E7nsoolpofOPIJEhmScAH9R9gByiWmSi0kKlZChw5oS/ZFmzyBZz
FRrL0y/7gLotatt78uPyn4kWz2wJCTsCjPLspUqzuH28eFSHz1Itd2Qi5fhxYxsz
PY4x8vGw
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org