Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3261303a3a2f34342d3438203d3e20323034313835.roa
File:                     323630323a666564613a3261303a3a2f34342d3438203d3e20323034313835.roa (raw, json)
Hash identifier:          F983Wy+Co1qAq+LYpdUup6oy7voUKCcSYVXH78AurXw=
Subject key identifier:   CA:14:E6:D1:53:71:E8:97:6C:10:93:2D:2F:15:4E:CC:80:4A:2C:BD
Certificate issuer:       /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial:       33E6E1E27EA472517BD2476878AB97019B3F9C02
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3261303a3a2f34342d3438203d3e20323034313835.roa
Signing time:             Mon 28 Feb 2022 01:00:06 +0000
ROA not before:           Mon 28 Feb 2022 00:55:06 +0000
ROA not after:            Mon 27 Feb 2023 01:00:06 +0000
asID:                     204185
IP address blocks:        2602:feda:2a0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:e6:e1:e2:7e:a4:72:51:7b:d2:47:68:78:ab:97:01:9b:3f:9c:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
        Validity
            Not Before: Feb 28 00:55:06 2022 GMT
            Not After : Feb 27 01:00:06 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:83:11:20:0e:79:52:fb:86:fe:37:04:b5:29:
                    fc:fa:ad:f2:44:22:bc:a4:06:e9:a7:bb:6f:f0:70:
                    d2:f0:7d:7f:57:23:7e:2d:5b:11:e9:d3:ca:2c:79:
                    d6:9b:c5:b2:9a:93:e3:53:30:50:c2:d7:45:21:14:
                    6a:d3:ce:c2:4c:75:0c:5a:45:fa:c5:0e:2b:59:1a:
                    d7:f9:19:54:96:bd:60:84:b5:7b:c6:3d:99:8e:80:
                    41:1b:8a:f1:9f:85:99:16:ba:94:64:29:2c:a7:6c:
                    10:06:75:08:e3:77:e5:3a:e2:6b:b5:e7:f1:fd:af:
                    44:7a:4c:2e:c6:8a:74:9d:bc:81:51:98:c4:86:0b:
                    e2:b0:56:74:23:80:b3:83:a4:04:ce:55:65:f4:80:
                    c7:18:a6:94:23:2c:bd:57:fd:e4:b8:89:f1:f5:0d:
                    09:85:48:9c:a6:50:02:86:41:53:97:11:1a:a0:52:
                    7a:1a:40:61:53:ce:5a:dd:91:68:da:81:b9:62:ff:
                    02:84:7f:c1:ee:59:1a:71:4d:6b:72:19:cd:6e:d4:
                    6a:30:e1:6d:cb:8f:eb:8a:9a:29:c2:45:16:18:37:
                    33:01:a5:a7:90:32:4b:cb:26:35:03:93:b8:21:02:
                    c9:58:29:1b:f6:37:65:fe:07:50:f0:e8:eb:f6:a7:
                    7c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:14:E6:D1:53:71:E8:97:6C:10:93:2D:2F:15:4E:CC:80:4A:2C:BD
            X509v3 Authority Key Identifier:
                keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3261303a3a2f34342d3438203d3e20323034313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:2a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         92:94:05:13:0c:1c:70:28:73:db:aa:1c:04:5d:a4:60:de:e8:
         ff:ac:f9:26:0d:54:47:99:e4:1a:4d:3d:4f:d3:57:12:54:b2:
         50:81:c5:e5:04:ec:8d:00:ae:6d:35:0a:f9:95:cc:b4:c8:c9:
         08:b5:84:cf:af:c4:4c:b7:17:1c:73:3d:51:6e:43:60:4f:cd:
         22:c1:e6:c5:6e:2e:59:be:93:d6:0c:b8:29:72:2a:c0:da:0c:
         cc:c9:ab:24:45:dd:2d:5e:fe:df:2f:ec:d1:66:32:85:dc:d2:
         c1:db:27:0c:06:48:04:82:6e:8d:fa:6a:f2:aa:92:4c:04:c4:
         48:27:2c:89:37:d3:03:81:03:43:be:57:75:4f:b6:15:20:ac:
         83:d1:62:a4:5a:34:45:f4:7f:0d:e1:07:08:fd:2a:d2:71:04:
         7e:37:b6:38:c4:c8:a6:4b:75:c8:bb:b1:4c:1c:e9:a9:71:69:
         d4:17:04:b1:14:98:65:ae:0c:1b:32:8d:80:64:23:f6:cb:03:
         6e:9e:bc:a7:c5:cf:f0:00:46:06:8a:3b:4c:85:9b:74:1f:5d:
         0c:58:33:cc:b8:a6:2e:25:dd:8f:d0:4f:15:19:df:75:0a:d5:
         69:92:31:d0:65:92:2c:c4:be:8b:76:bf:03:bd:a0:1e:f3:96:
         7a:31:6c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org