Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3164303a3a2f34342d3438203d3e20313337323536.roa
File: 323630323a666564613a3164303a3a2f34342d3438203d3e20313337323536.roa (raw, json)
Hash identifier: TPKBgSaSS5R/mfJ/+vYti7IIimpRFdNhhGT73MkqUNw=
Subject key identifier: F0:86:80:0A:0D:A6:3C:F0:E9:49:BF:46:0D:DC:FB:11:A1:6F:24:FC
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 79BAB6D8513FD4B833EA8AD4AEC5AD07CBC4A1A9
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3164303a3a2f34342d3438203d3e20313337323536.roa
Signing time: Mon 28 Feb 2022 01:00:09 +0000
ROA not before: Mon 28 Feb 2022 00:55:09 +0000
ROA not after: Mon 27 Feb 2023 01:00:09 +0000
asID: 137256
IP address blocks: 2602:feda:1d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:ba:b6:d8:51:3f:d4:b8:33:ea:8a:d4:ae:c5:ad:07:cb:c4:a1:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Feb 28 00:55:09 2022 GMT
Not After : Feb 27 01:00:09 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4c:dd:5e:bb:fd:3c:2c:aa:d4:28:70:71:33:
44:11:11:88:d0:f2:31:47:2c:31:c3:87:b5:c6:8a:
f6:04:64:04:44:0c:8f:b1:a4:10:0b:b2:61:8c:72:
c7:4c:a3:31:0b:6b:44:fc:d8:51:a6:95:92:33:fc:
3b:64:3a:8b:bf:44:a3:29:bd:ff:39:c8:e9:aa:e2:
d1:a4:d8:89:80:7f:de:f6:51:e2:76:1e:b3:dc:53:
3d:19:1b:4b:e9:16:49:cb:a5:94:82:67:73:f0:2e:
b0:9d:06:d1:e6:44:e8:79:59:49:81:5b:5d:68:fd:
a0:e0:00:f5:4b:47:c9:c8:bc:af:60:1c:36:4b:5b:
22:84:f6:b2:cb:5f:20:5d:76:5e:e1:a0:c4:19:5b:
10:66:ef:96:38:5a:60:bd:8e:aa:8f:4e:bd:98:a7:
b9:10:c9:fa:3f:6f:c3:b0:50:a5:ab:8f:01:2f:84:
83:b9:ce:de:2c:48:6d:6e:c5:b9:6b:f8:4d:be:77:
68:13:5a:1d:8c:a6:af:8f:d8:31:ea:92:df:9f:b7:
7a:2f:c5:00:71:d3:d9:8b:96:7e:f8:c1:09:43:01:
4d:04:13:03:ad:cc:6d:98:da:d6:a5:98:49:3f:41:
e8:02:16:1e:66:73:e6:68:ff:37:c8:bf:db:3d:7d:
50:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:86:80:0A:0D:A6:3C:F0:E9:49:BF:46:0D:DC:FB:11:A1:6F:24:FC
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3164303a3a2f34342d3438203d3e20313337323536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:1d0::/44
Signature Algorithm: sha256WithRSAEncryption
31:a2:b1:1c:e6:59:7c:69:94:d0:02:74:5c:87:30:f7:99:a7:
ca:f7:de:54:16:60:14:c4:22:dd:64:68:96:13:c6:ca:1f:1d:
05:ed:3b:32:a9:35:13:5d:9e:12:28:52:99:35:5e:05:de:ff:
14:9c:15:69:5c:37:c6:44:cd:fd:51:02:f9:ab:9e:87:2f:1f:
b4:52:a4:cf:7c:a2:24:21:af:ad:20:e0:03:a8:dd:01:67:c2:
a2:12:4e:ea:37:c5:d4:d0:1e:c6:1d:25:d9:25:fd:9b:89:fd:
e2:c3:d4:3b:d9:fe:14:3c:41:83:71:f2:6a:ac:bd:6c:a2:21:
97:6f:37:e8:39:7b:dc:fb:58:5a:3a:7d:9a:91:9c:18:69:f7:
f7:79:3c:7e:9b:8e:0c:8d:11:e2:af:14:e1:a7:5f:70:62:94:
08:77:8a:88:eb:ac:5f:ca:e4:7d:3d:8f:ef:4c:5a:6a:20:bc:
51:c8:7e:30:5a:9f:c8:30:66:b3:a0:78:7a:ab:38:08:4f:42:
57:96:c0:25:cc:74:1b:ad:5a:96:e7:9c:d1:0e:38:1b:ff:05:
64:01:a0:f5:e9:dd:16:56:d0:e1:ad:3b:31:f7:60:04:12:12:
bd:1c:21:47:95:86:4f:53:87:67:56:ff:0f:b3:48:1f:4b:71:
63:87:e3:09
-----BEGIN CERTIFICATE-----
MIIHADCCBeigAwIBAgIUebq22FE/1Lgz6orUrsWtB8vEoakwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDEwODM5OENBOTg4MzgyQzJBNTA5QkZEQjM5RTE0NkE3
NkNGOURFMDAeFw0yMjAyMjgwMDU1MDlaFw0yMzAyMjcwMTAwMDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREY0Q0RENUVCQkZEM0MyQ0FB
RDQyODcwNzEzMzQ0MTExMTg4RDBGMjMxNDcyQzMxQzM4N0I1QzY4QUY2MDQ2NDA0
NDQwQzhGQjFBNDEwMEJCMjYxOEM3MkM3NENBMzMxMEI2QjQ0RkNEODUxQTY5NTky
MzNGQzNCNjQzQThCQkY0NEEzMjlCREZGMzlDOEU5QUFFMkQxQTREODg5ODA3RkRF
RjY1MUUyNzYxRUIzREM1MzNEMTkxQjRCRTkxNjQ5Q0JBNTk0ODI2NzczRjAyRUIw
OUQwNkQxRTY0NEU4Nzk1OTQ5ODE1QjVENjhGREEwRTAwMEY1NEI0N0M5QzhCQ0FG
NjAxQzM2NEI1QjIyODRGNkIyQ0I1RjIwNUQ3NjVFRTFBMEM0MTk1QjEwNjZFRjk2
Mzg1QTYwQkQ4RUFBOEY0RUJEOThBN0I5MTBDOUZBM0Y2RkMzQjA1MEE1QUI4RjAx
MkY4NDgzQjlDRURFMkM0ODZENkVDNUI5NkJGODREQkU3NzY4MTM1QTFEOENBNkFG
OEZEODMxRUE5MkRGOUZCNzdBMkZDNTAwNzFEM0Q5OEI5NjdFRjhDMTA5NDMwMTRE
MDQxMzAzQURDQzZEOThEQUQ2QTU5ODQ5M0Y0MUU4MDIxNjFFNjY3M0U2NjhGRjM3
QzhCRkRCM0Q3RDUwODcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA30zdXrv9PCyq1ChwcTNEERGI0PIxRywxw4e1xor2BGQERAyPsaQQ
C7JhjHLHTKMxC2tE/NhRppWSM/w7ZDqLv0SjKb3/OcjpquLRpNiJgH/e9lHidh6z
3FM9GRtL6RZJy6WUgmdz8C6wnQbR5kToeVlJgVtdaP2g4AD1S0fJyLyvYBw2S1si
hPayy18gXXZe4aDEGVsQZu+WOFpgvY6qj069mKe5EMn6P2/DsFClq48BL4SDuc7e
LEhtbsW5a/hNvndoE1odjKavj9gx6pLfn7d6L8UAcdPZi5Z++MEJQwFNBBMDrcxt
mNrWpZhJP0HoAhYeZnPmaP83yL/bPX1QhwIDAQABo4ICDjCCAgowHQYDVR0OBBYE
FPCGgAoNpjzw6Um/Rg3c+xGhbyT8MB8GA1UdIwQYMBaAFAEIOYypiDgsKlCb/bOe
FGp2z53gMA4GA1UdDwEB/wQEAwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzov
L3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTE0RTc1MDAwMC8wLzAx
MDgzOThDQTk4ODM4MkMyQTUwOUJGREIzOUUxNDZBNzZDRjlERTAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9zYWt1eWEubmF0Lm1vZS9y
ZXBvL05BVE9DQS8wLzAxMDgzOThDQTk4ODM4MkMyQTUwOUJGREIzOUUxNDZBNzZD
RjlERTAuY2VyMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUHMAuGd3JzeW5j
Oi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxMTRFNzUwMDAwLzAv
MzIzNjMwMzIzYTY2NjU2NDYxM2EzMTY0MzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNl
MjAzMTMzMzczMjM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQmAv7aAdAwDQYJKoZIhvcNAQELBQAD
ggEBADGisRzmWXxplNACdFyHMPeZp8r33lQWYBTEIt1kaJYTxsofHQXtOzKpNRNd
nhIoUpk1XgXe/xScFWlcN8ZEzf1RAvmrnocvH7RSpM98oiQhr60g4AOo3QFnwqIS
Tuo3xdTQHsYdJdkl/ZuJ/eLD1DvZ/hQ8QYNx8mqsvWyiIZdvN+g5e9z7WFo6fZqR
nBhp9/d5PH6bjgyNEeKvFOGnX3BilAh3iojrrF/K5H09j+9MWmogvFHIfjBan8gw
ZrOgeHqrOAhPQleWwCXMdButWpbnnNEOOBv/BWQBoPXp3RZW0OGtOzH3YAQSEr0c
IUeVhk9Th2dW/w+zSB9LcWOH4wk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org