Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3139303a3a2f34342d3438203d3e20313432303235.roa
File: 323630323a666564613a3139303a3a2f34342d3438203d3e20313432303235.roa (raw, json)
Hash identifier: 7bQqiweoePuCDk5VgUFkRCm57dzC8xZeMwtfJ2mWDb4=
Subject key identifier: 1B:6D:42:38:5C:08:67:B9:4F:FF:38:C2:D0:B3:53:5C:06:BB:B9:3F
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 02F8940EABAAF2727813BEE5CD59F6AE06BC0AD4
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3139303a3a2f34342d3438203d3e20313432303235.roa
Signing time: Mon 21 Mar 2022 20:00:00 +0000
ROA not before: Mon 21 Mar 2022 19:55:00 +0000
ROA not after: Mon 20 Mar 2023 20:00:00 +0000
asID: 142025
IP address blocks: 2602:feda:190::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:f8:94:0e:ab:aa:f2:72:78:13:be:e5:cd:59:f6:ae:06:bc:0a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Mar 21 19:55:00 2022 GMT
Not After : Mar 20 20:00:00 2023 GMT
Subject: CN=3082010A0282010100E1B8BAB9FBCE4E3EC0638E27524A6F9662642A6F8AB952930DF29078BD7CDE6CE089EC61B006FEB7FB2B16EBE7E9C36D750AABE930F278136768DA387B511995BA5E6271EF88C5C7F31B0AC4001A2E004195B2FD617474272C38241AEAE2DA50CE6A99887779BAA061D6808E900A3562A06A8C158F6A6904E6BD6913645E055D24E6EF4B37C7EB373530718BA4FB9DF235D36F115D5BFC159D450836A66F1A462770C32B7F23D82D4635A89E95D6C0F8E36857CE7B05C55228AEF595FD2ACA927697BBEDCA824D730FDFF5C2C4FB657C0E76F7E9D3D78DF894B5D143352D34588A9589D847E306C2271CB910EB12194811D2195F303906001792F5AB8FBC33910203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b8:ba:b9:fb:ce:4e:3e:c0:63:8e:27:52:4a:
6f:96:62:64:2a:6f:8a:b9:52:93:0d:f2:90:78:bd:
7c:de:6c:e0:89:ec:61:b0:06:fe:b7:fb:2b:16:eb:
e7:e9:c3:6d:75:0a:ab:e9:30:f2:78:13:67:68:da:
38:7b:51:19:95:ba:5e:62:71:ef:88:c5:c7:f3:1b:
0a:c4:00:1a:2e:00:41:95:b2:fd:61:74:74:27:2c:
38:24:1a:ea:e2:da:50:ce:6a:99:88:77:79:ba:a0:
61:d6:80:8e:90:0a:35:62:a0:6a:8c:15:8f:6a:69:
04:e6:bd:69:13:64:5e:05:5d:24:e6:ef:4b:37:c7:
eb:37:35:30:71:8b:a4:fb:9d:f2:35:d3:6f:11:5d:
5b:fc:15:9d:45:08:36:a6:6f:1a:46:27:70:c3:2b:
7f:23:d8:2d:46:35:a8:9e:95:d6:c0:f8:e3:68:57:
ce:7b:05:c5:52:28:ae:f5:95:fd:2a:ca:92:76:97:
bb:ed:ca:82:4d:73:0f:df:f5:c2:c4:fb:65:7c:0e:
76:f7:e9:d3:d7:8d:f8:94:b5:d1:43:35:2d:34:58:
8a:95:89:d8:47:e3:06:c2:27:1c:b9:10:eb:12:19:
48:11:d2:19:5f:30:39:06:00:17:92:f5:ab:8f:bc:
33:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6D:42:38:5C:08:67:B9:4F:FF:38:C2:D0:B3:53:5C:06:BB:B9:3F
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3139303a3a2f34342d3438203d3e20313432303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:190::/44
Signature Algorithm: sha256WithRSAEncryption
20:b4:0e:26:ab:dd:ce:45:39:10:7e:97:fb:6c:f9:62:c9:c7:
70:fc:e4:4d:ec:4f:bf:cd:c6:40:e9:e2:50:ef:f5:29:b3:35:
39:56:f2:0f:c1:b3:87:43:29:e2:9c:cc:b5:3f:11:58:93:33:
b1:79:18:2b:d9:1f:00:b8:d6:d1:47:05:39:66:a1:5e:44:56:
5c:1c:74:4d:c5:fb:e6:ef:6c:37:b9:2a:ed:a6:84:79:59:ba:
db:0f:a6:0b:7c:0a:d9:ff:b9:15:c3:1a:db:27:47:64:e0:4c:
0b:1a:8f:4d:c0:4a:b6:76:64:5b:2a:45:1d:1e:54:05:0a:d3:
d8:18:53:e6:4d:28:e0:b8:3a:78:07:2c:63:68:13:a2:24:33:
b4:1c:b0:66:a3:40:7b:bf:8e:44:e0:ed:b7:33:43:ad:aa:5b:
15:d6:ec:c2:92:9a:cb:26:92:8d:03:9e:d4:45:1e:ba:40:8b:
0c:28:00:a8:48:a5:04:8a:f0:c3:9a:6a:3d:8b:46:f8:93:f4:
e8:72:5d:72:6d:78:61:71:95:6b:80:b3:1d:cb:fc:60:ba:73:
6b:3b:3e:a1:3d:cb:80:55:c9:c6:63:b1:a0:eb:9a:5f:a5:7f:
a6:7c:2d:45:74:c8:25:ac:27:5d:cb:e4:f6:d7:57:eb:bc:9d:
7a:41:1b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org