Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3130323a3a2f34382d3438203d3e20333936333033.roa
File: 323630323a666564613a3130323a3a2f34382d3438203d3e20333936333033.roa (raw, json)
Hash identifier: Pl09MVKqmAtPcbltz4sNsPWpzJsEhT/SJKeZLCvYST4=
Subject key identifier: 10:96:6C:5B:5D:5A:E3:C7:D4:D5:3D:8F:B4:90:B5:EA:4E:2A:EA:AF
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 731AE451AC466F99AC32AB9B68074941342B85BC
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3130323a3a2f34382d3438203d3e20333936333033.roa
Signing time: Mon 28 Feb 2022 01:00:03 +0000
ROA not before: Mon 28 Feb 2022 00:55:03 +0000
ROA not after: Mon 27 Feb 2023 01:00:03 +0000
asID: 396303
IP address blocks: 2602:feda:102::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:1a:e4:51:ac:46:6f:99:ac:32:ab:9b:68:07:49:41:34:2b:85:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Feb 28 00:55:03 2022 GMT
Not After : Feb 27 01:00:03 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d7:3c:0f:be:9a:85:a1:45:aa:c7:97:7b:8e:
1f:96:03:d6:12:fa:05:23:eb:b4:a5:9e:96:a0:bb:
25:c1:10:0d:09:6a:c6:b7:b6:65:11:3d:64:fa:fa:
b9:a8:e4:0b:d1:5c:d4:40:f0:63:15:f4:94:21:28:
39:9c:e7:b3:02:e5:39:1f:ed:cb:1a:47:92:b8:ab:
ad:a1:a2:dc:4d:ee:19:42:70:52:8a:38:fd:ca:7e:
55:76:b1:de:78:d9:a1:88:01:2f:02:32:b9:94:ae:
29:cd:f9:ec:9c:ea:35:41:ba:81:97:8e:79:9d:61:
c4:66:4a:41:12:71:1d:69:c8:7b:cc:1f:7e:51:e8:
2a:85:8f:ab:22:7a:be:79:49:dc:5a:75:74:c1:3b:
82:5e:8d:40:84:41:a9:7c:fd:70:01:d5:f4:1f:06:
8f:e8:36:7e:20:9f:44:7f:75:e6:92:df:85:b6:81:
a7:98:42:1f:16:71:66:9f:c3:09:c8:84:9d:3a:2e:
ce:bb:d3:c8:3b:e1:24:10:23:fe:1b:f0:df:4e:a0:
48:80:6d:e2:43:74:ea:6d:cf:a0:6f:16:85:ef:2a:
06:ea:0a:af:1f:4f:23:33:dc:87:6c:64:4e:93:a2:
ad:b9:5c:c1:74:60:36:24:af:09:23:f4:86:02:af:
3b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:96:6C:5B:5D:5A:E3:C7:D4:D5:3D:8F:B4:90:B5:EA:4E:2A:EA:AF
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3130323a3a2f34382d3438203d3e20333936333033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:102::/48
Signature Algorithm: sha256WithRSAEncryption
a5:74:1f:f9:e5:8b:96:cf:c7:a9:fb:26:24:c2:7b:2b:57:f2:
db:2a:8c:38:b2:50:fb:47:f3:a3:bf:f9:c2:57:1e:88:46:21:
3a:c8:ec:81:a6:f9:48:97:30:e6:fa:a2:d8:34:92:53:0d:3b:
0e:f6:4b:32:6b:4b:87:02:54:db:41:24:42:1c:f7:e8:23:ca:
9d:7b:8e:42:ea:77:72:68:10:74:1d:ef:11:34:bf:9e:a2:10:
e5:0c:43:60:60:0c:e0:7a:bf:d1:86:67:90:dc:ce:be:13:f6:
78:56:0b:ef:95:2e:b0:1a:95:48:b2:74:05:67:25:b5:e3:c1:
c0:d0:6e:65:9c:61:61:ef:56:d4:8f:65:e4:de:fb:f1:e8:c5:
57:6d:0d:4d:0d:97:59:d5:d9:ba:c1:c8:a0:94:6a:56:81:cd:
79:75:ca:e7:10:56:5e:6d:e3:c5:b0:6e:0e:9f:f1:ce:ab:a7:
e3:6b:02:93:84:d1:e2:aa:62:ac:1a:73:e7:40:e1:6b:58:35:
dc:ce:9f:60:4d:2d:36:81:90:6e:e6:d1:6c:a3:9d:17:75:8e:
dc:cc:55:6a:59:03:f4:04:0b:23:0c:9b:6f:e0:1d:ca:37:49:
d4:c5:25:c9:ca:09:f6:15:25:3d:0d:29:21:15:93:51:bd:c0:
ea:86:51:cb
-----BEGIN CERTIFICATE-----
MIIHADCCBeigAwIBAgIUcxrkUaxGb5msMqubaAdJQTQrhbwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDEwODM5OENBOTg4MzgyQzJBNTA5QkZEQjM5RTE0NkE3
NkNGOURFMDAeFw0yMjAyMjgwMDU1MDNaFw0yMzAyMjcwMTAwMDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjhENzNDMEZCRTlBODVBMTQ1
QUFDNzk3N0I4RTFGOTYwM0Q2MTJGQTA1MjNFQkI0QTU5RTk2QTBCQjI1QzExMDBE
MDk2QUM2QjdCNjY1MTEzRDY0RkFGQUI5QThFNDBCRDE1Q0Q0NDBGMDYzMTVGNDk0
MjEyODM5OUNFN0IzMDJFNTM5MUZFRENCMUE0NzkyQjhBQkFEQTFBMkRDNERFRTE5
NDI3MDUyOEEzOEZEQ0E3RTU1NzZCMURFNzhEOUExODgwMTJGMDIzMkI5OTRBRTI5
Q0RGOUVDOUNFQTM1NDFCQTgxOTc4RTc5OUQ2MUM0NjY0QTQxMTI3MTFENjlDODdC
Q0MxRjdFNTFFODJBODU4RkFCMjI3QUJFNzk0OURDNUE3NTc0QzEzQjgyNUU4RDQw
ODQ0MUE5N0NGRDcwMDFENUY0MUYwNjhGRTgzNjdFMjA5RjQ0N0Y3NUU2OTJERjg1
QjY4MUE3OTg0MjFGMTY3MTY2OUZDMzA5Qzg4NDlEM0EyRUNFQkJEM0M4M0JFMTI0
MTAyM0ZFMUJGMERGNEVBMDQ4ODA2REUyNDM3NEVBNkRDRkEwNkYxNjg1RUYyQTA2
RUEwQUFGMUY0RjIzMzNEQzg3NkM2NDRFOTNBMkFEQjk1Q0MxNzQ2MDM2MjRBRjA5
MjNGNDg2MDJBRjNCNzEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuNc8D76ahaFFqseXe44flgPWEvoFI+u0pZ6WoLslwRANCWrGt7Zl
ET1k+vq5qOQL0VzUQPBjFfSUISg5nOezAuU5H+3LGkeSuKutoaLcTe4ZQnBSijj9
yn5VdrHeeNmhiAEvAjK5lK4pzfnsnOo1QbqBl455nWHEZkpBEnEdach7zB9+Uegq
hY+rInq+eUncWnV0wTuCXo1AhEGpfP1wAdX0HwaP6DZ+IJ9Ef3Xmkt+FtoGnmEIf
FnFmn8MJyISdOi7Ou9PIO+EkECP+G/DfTqBIgG3iQ3Tqbc+gbxaF7yoG6gqvH08j
M9yHbGROk6KtuVzBdGA2JK8JI/SGAq87cQIDAQABo4ICDjCCAgowHQYDVR0OBBYE
FBCWbFtdWuPH1NU9j7SQtepOKuqvMB8GA1UdIwQYMBaAFAEIOYypiDgsKlCb/bOe
FGp2z53gMA4GA1UdDwEB/wQEAwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzov
L3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTE0RTc1MDAwMC8wLzAx
MDgzOThDQTk4ODM4MkMyQTUwOUJGREIzOUUxNDZBNzZDRjlERTAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9zYWt1eWEubmF0Lm1vZS9y
ZXBvL05BVE9DQS8wLzAxMDgzOThDQTk4ODM4MkMyQTUwOUJGREIzOUUxNDZBNzZD
RjlERTAuY2VyMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUHMAuGd3JzeW5j
Oi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxMTRFNzUwMDAwLzAv
MzIzNjMwMzIzYTY2NjU2NDYxM2EzMTMwMzIzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzMzM5MzYzMzMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAv7aAQIwDQYJKoZIhvcNAQELBQAD
ggEBAKV0H/nli5bPx6n7JiTCeytX8tsqjDiyUPtH86O/+cJXHohGITrI7IGm+UiX
MOb6otg0klMNOw72SzJrS4cCVNtBJEIc9+gjyp17jkLqd3JoEHQd7xE0v56iEOUM
Q2BgDOB6v9GGZ5Dczr4T9nhWC++VLrAalUiydAVnJbXjwcDQbmWcYWHvVtSPZeTe
+/HoxVdtDU0Nl1nV2brByKCUalaBzXl1yucQVl5t48Wwbg6f8c6rp+NrApOE0eKq
Yqwac+dA4WtYNdzOn2BNLTaBkG7m0WyjnRd1jtzMVWpZA/QECyMMm2/gHco3SdTF
JcnKCfYVJT0NKSEVk1G9wOqGUcs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org