Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3138323a3a2f34372d3438203d3e20323131383433.roa
File:                     323630323a666564613a3138323a3a2f34372d3438203d3e20323131383433.roa (raw, json)
Hash identifier:          s0jTarOmAXDiDi1jwl/KjlEXmosqQ07xW0v+pU/q3XI=
Subject key identifier:   6D:9A:29:B7:04:35:21:9B:8F:B7:4F:DA:06:5B:69:2C:CE:C6:78:EB
Certificate issuer:       /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial:       45B27E5284960AF6E2225A633FA20613DEBBA052
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3138323a3a2f34372d3438203d3e20323131383433.roa
Signing time:             Mon 28 Feb 2022 01:00:07 +0000
ROA not before:           Mon 28 Feb 2022 00:55:07 +0000
ROA not after:            Mon 27 Feb 2023 01:00:07 +0000
asID:                     211843
IP address blocks:        2602:feda:182::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:b2:7e:52:84:96:0a:f6:e2:22:5a:63:3f:a2:06:13:de:bb:a0:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
        Validity
            Not Before: Feb 28 00:55:07 2022 GMT
            Not After : Feb 27 01:00:07 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9c:65:f9:bc:16:bc:99:a4:80:d5:70:85:d1:
                    aa:15:9f:aa:3c:6e:36:b5:75:e3:6e:84:fb:61:c6:
                    26:b1:e1:e0:9b:8b:dc:08:b7:ef:5d:5b:61:d4:d0:
                    1f:fd:4a:3a:65:02:f1:43:f7:7d:4d:4f:69:98:25:
                    fd:bd:cf:58:7d:f8:ee:c9:d8:ca:86:59:81:c0:64:
                    13:89:7f:7f:b7:aa:4f:59:38:51:97:38:b3:8f:a8:
                    41:e7:0c:d1:58:65:c5:1e:68:af:fc:72:44:7c:47:
                    95:d2:fe:c2:77:47:5f:18:8c:68:20:96:64:54:b8:
                    84:0b:e5:d5:2e:a1:0e:f0:9c:c0:8a:6d:2e:c0:aa:
                    50:9f:3d:c9:ef:b0:48:fc:b9:b4:92:6a:e3:22:0a:
                    7b:13:54:2d:75:00:a9:b2:8e:6e:85:f9:cf:54:d9:
                    f5:7e:2e:78:e0:3b:53:8d:e1:2b:29:af:c8:a9:c3:
                    73:3d:76:8d:ab:f6:d8:a4:05:e5:91:ef:44:9c:4d:
                    05:38:9f:31:a5:a0:c2:0c:2a:a3:60:2c:00:c4:fa:
                    fc:ab:d0:42:cd:2b:57:08:34:71:f7:9b:17:23:ec:
                    11:8f:a8:5a:a1:5e:be:c7:6f:25:96:aa:c5:23:1f:
                    1d:bd:c8:7e:09:fa:74:23:1c:93:63:c7:12:7e:4c:
                    69:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:9A:29:B7:04:35:21:9B:8F:B7:4F:DA:06:5B:69:2C:CE:C6:78:EB
            X509v3 Authority Key Identifier:
                keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3138323a3a2f34372d3438203d3e20323131383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:182::/47

    Signature Algorithm: sha256WithRSAEncryption
         04:5b:94:ad:2b:6c:12:a8:bc:29:fc:c5:bd:72:63:e0:19:09:
         5f:f7:94:f1:de:5d:ed:e8:08:1a:e8:97:f6:df:e1:9e:3a:4a:
         8b:ea:17:54:70:13:b0:09:cc:51:21:4c:34:bc:60:e9:fe:8b:
         28:24:47:5a:7d:f3:e2:91:02:fa:c2:92:2e:19:94:07:ed:69:
         0d:8f:fb:4d:3b:c9:88:c8:f1:14:18:2e:20:c1:9e:50:c7:7a:
         f6:b3:9c:85:4f:0c:2f:84:61:4b:39:13:01:51:28:3e:9a:bf:
         a5:9c:5d:4d:ed:a5:fc:10:fa:de:fb:25:44:81:92:a8:a8:09:
         9f:37:de:e3:b3:4e:99:8e:65:5b:b6:7e:a6:4a:c9:f6:71:09:
         f6:3f:2d:30:d8:22:78:21:3e:37:30:e4:7e:29:f6:c1:23:40:
         9a:d2:32:af:c1:2a:cd:1e:27:c4:f6:e3:7f:89:a2:02:d7:6b:
         36:84:ed:3e:99:37:a5:4c:88:bb:57:c4:74:65:b6:3d:20:8a:
         2f:a7:5d:54:26:e4:e1:6c:10:9f:92:02:c9:c8:54:bf:cb:5b:
         41:22:01:29:5d:a1:a4:c3:13:a0:1a:49:1c:4e:69:f3:84:e8:
         10:2e:b9:5e:d7:0c:ae:93:99:d8:62:3c:81:8b:e3:f2:fa:6d:
         ee:6f:2d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org