Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3165303a3a2f34342d3438203d3e20313430393236.roa
File:                     323630323a666564613a3165303a3a2f34342d3438203d3e20313430393236.roa (raw, json)
Hash identifier:          O6Ly11++kAqHdpULIZACjwTl7naddhlx89laNTXD6ws=
Subject key identifier:   9E:1D:29:A8:71:DC:EF:61:13:94:04:EB:CC:39:6D:43:91:F5:95:C8
Certificate issuer:       /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial:       5E229961D9AB585BC333FBE95CE5F2D30C5AD9DB
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3165303a3a2f34342d3438203d3e20313430393236.roa
Signing time:             Mon 28 Feb 2022 01:00:00 +0000
ROA not before:           Mon 28 Feb 2022 00:55:00 +0000
ROA not after:            Mon 27 Feb 2023 01:00:00 +0000
asID:                     140926
IP address blocks:        2602:feda:1e0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:22:99:61:d9:ab:58:5b:c3:33:fb:e9:5c:e5:f2:d3:0c:5a:d9:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
        Validity
            Not Before: Feb 28 00:55:00 2022 GMT
            Not After : Feb 27 01:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7f:47:80:53:1e:17:0d:33:e0:7a:a2:3f:4d:
                    ca:17:02:ba:13:a1:f4:15:16:47:4c:da:0d:d3:f0:
                    91:0d:ce:59:c8:4a:82:23:13:93:0f:60:17:c3:51:
                    00:cd:69:d6:d7:22:e9:4c:0b:e2:78:28:29:bc:42:
                    7f:2e:51:03:37:34:c1:40:35:15:5c:1a:d5:c5:59:
                    3b:ed:0d:39:7f:bb:1a:84:ca:b1:de:3c:96:97:57:
                    62:b6:9b:49:5e:d4:5e:e9:b5:e4:68:35:0f:19:19:
                    14:8e:ea:a9:96:df:82:54:03:49:9f:3c:39:4d:6b:
                    bf:94:a0:13:73:9e:b3:7b:4f:ee:06:f1:d0:89:33:
                    7c:35:61:fc:8e:b5:52:af:45:65:b3:f8:1c:c6:f6:
                    c9:cd:71:fe:77:15:d2:fe:71:ea:33:72:0e:54:d6:
                    6f:92:9d:1c:f1:0d:ce:80:af:93:1e:87:fa:94:c8:
                    99:69:c5:db:17:f8:2e:9f:81:e0:cc:fa:12:2c:bb:
                    d9:93:de:81:57:3a:dc:c3:5e:31:a8:5d:58:0b:7e:
                    9b:4f:4f:f6:be:d6:7b:ad:e8:a7:c3:7c:29:20:6e:
                    e9:98:49:ea:3c:73:45:8c:75:e2:56:d7:6a:dc:7e:
                    96:01:27:ad:a4:55:16:f0:69:e3:4f:14:44:7f:36:
                    d6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:1D:29:A8:71:DC:EF:61:13:94:04:EB:CC:39:6D:43:91:F5:95:C8
            X509v3 Authority Key Identifier:
                keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3165303a3a2f34342d3438203d3e20313430393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:1e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         85:9a:f5:81:9a:57:ac:c4:20:ab:57:05:da:ed:2f:63:e1:5d:
         25:24:36:d5:a4:ff:af:9c:52:de:bf:50:4e:5d:e8:9a:40:97:
         de:ca:4e:d2:83:b1:ad:3d:29:2c:1d:04:dc:7d:ae:bd:a8:31:
         46:73:e4:de:5f:7f:fa:57:79:a2:8c:0f:94:6f:25:15:5d:7e:
         c3:5c:d1:e0:47:4d:51:5a:1d:0d:52:6b:5f:7b:ae:3f:ed:ac:
         39:2a:87:fb:ce:78:27:f5:ca:42:a3:4f:b7:98:a8:70:81:c1:
         f3:43:34:04:96:95:a4:03:d5:c7:db:06:d8:36:93:bf:bf:ff:
         71:1b:0b:ba:b0:5e:4b:91:11:60:41:47:5e:81:e2:66:59:91:
         46:89:59:e2:c6:5b:63:71:ff:13:4a:47:c2:c4:ff:f4:99:24:
         63:40:24:5b:89:b7:0c:7e:e5:e0:91:17:d3:93:f6:73:88:12:
         6d:9f:30:62:0a:13:10:9f:70:ad:d9:b1:20:54:7a:34:1f:94:
         60:8b:49:d4:35:0c:57:19:c5:dd:96:d4:9a:a9:91:d8:73:fc:
         d9:2c:92:60:30:ce:0c:a3:89:2e:3a:dc:a3:f3:54:78:55:e2:
         72:6e:83:fb:88:73:a1:5f:7e:87:11:84:bf:96:01:f1:73:a0:
         e8:26:28:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:50 2024 by rpki-client on console-ams.rpki-client.org