Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3266303a3a2f34342d3438203d3e20313333343932.roa
File: 323630323a666564613a3266303a3a2f34342d3438203d3e20313333343932.roa (raw, json)
Hash identifier: gMPK7S31jCOecX7mxZT/nLUs2+ruTQKtWPJ9/bX2NUM=
Subject key identifier: 75:D6:B2:81:4C:0F:E1:7F:7E:68:CB:D1:5F:F9:E6:37:E9:59:05:31
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 2CC9F3451A9710D1BABEADB4F303EE73D57DAB18
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3266303a3a2f34342d3438203d3e20313333343932.roa
Signing time: Mon 28 Feb 2022 01:00:09 +0000
ROA not before: Mon 28 Feb 2022 00:55:09 +0000
ROA not after: Mon 27 Feb 2023 01:00:09 +0000
asID: 133492
IP address blocks: 2602:feda:2f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:c9:f3:45:1a:97:10:d1:ba:be:ad:b4:f3:03:ee:73:d5:7d:ab:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Feb 28 00:55:09 2022 GMT
Not After : Feb 27 01:00:09 2023 GMT
Subject: CN=3082010A0282010100C1C5E38562D217A2ED3D0855D8A1973BAB786CB9105A9C314D163D83304D81382294C596C3EAEC88609585910E3505FECFC79B4CBB79A6C0FD66086B6512B7BECDF466B96E8B55F54C55B717B891D100B63753C41C61B29E0F3DAE9514E8569C6D3ACFEBE2D1CF2C113C2856DEC0C0654CEB65D0895D3286D02131E5A42117134BB1E20D26753BFB0935CC0066BCB59560946171369EF34A721CF50E2351260B0747DA68F80301EFB262CE3D6ECD700D64D45F36C29AEE2E09A265396811A5BBA5CA5A9BF76002617383249D70504E11F392EC5F0D2037B858091F6A2BA32774FBBD96F71F7F32C028BFF510C83C3ECF9D070C312E0EE55A52FC37F99304526F0203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c5:e3:85:62:d2:17:a2:ed:3d:08:55:d8:a1:
97:3b:ab:78:6c:b9:10:5a:9c:31:4d:16:3d:83:30:
4d:81:38:22:94:c5:96:c3:ea:ec:88:60:95:85:91:
0e:35:05:fe:cf:c7:9b:4c:bb:79:a6:c0:fd:66:08:
6b:65:12:b7:be:cd:f4:66:b9:6e:8b:55:f5:4c:55:
b7:17:b8:91:d1:00:b6:37:53:c4:1c:61:b2:9e:0f:
3d:ae:95:14:e8:56:9c:6d:3a:cf:eb:e2:d1:cf:2c:
11:3c:28:56:de:c0:c0:65:4c:eb:65:d0:89:5d:32:
86:d0:21:31:e5:a4:21:17:13:4b:b1:e2:0d:26:75:
3b:fb:09:35:cc:00:66:bc:b5:95:60:94:61:71:36:
9e:f3:4a:72:1c:f5:0e:23:51:26:0b:07:47:da:68:
f8:03:01:ef:b2:62:ce:3d:6e:cd:70:0d:64:d4:5f:
36:c2:9a:ee:2e:09:a2:65:39:68:11:a5:bb:a5:ca:
5a:9b:f7:60:02:61:73:83:24:9d:70:50:4e:11:f3:
92:ec:5f:0d:20:37:b8:58:09:1f:6a:2b:a3:27:74:
fb:bd:96:f7:1f:7f:32:c0:28:bf:f5:10:c8:3c:3e:
cf:9d:07:0c:31:2e:0e:e5:5a:52:fc:37:f9:93:04:
52:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D6:B2:81:4C:0F:E1:7F:7E:68:CB:D1:5F:F9:E6:37:E9:59:05:31
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3266303a3a2f34342d3438203d3e20313333343932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:2f0::/44
Signature Algorithm: sha256WithRSAEncryption
3f:86:33:ab:fa:13:2b:a8:18:9f:e6:4e:94:b8:9e:16:f6:98:
a0:70:39:4f:c6:0e:11:3b:d5:f3:7e:a9:7a:63:3e:90:90:7d:
07:26:01:91:e3:77:77:03:00:08:18:79:73:5c:57:28:96:13:
24:e7:45:10:51:38:f2:03:e3:31:96:11:9d:0b:85:3e:d8:3d:
d3:a6:fd:ea:fb:59:c3:76:63:98:6b:d4:fe:a1:f9:6e:b0:34:
80:d2:40:f9:21:67:80:16:6f:77:5e:82:9d:16:2a:53:16:62:
93:7f:58:bb:e4:91:bc:ce:21:98:e6:2b:da:d1:85:64:6d:4a:
3d:af:f7:c3:fb:38:f1:45:98:e4:28:cf:4e:84:a5:30:ce:36:
a9:b9:cf:68:70:69:d7:8d:e5:21:f9:ea:29:cc:09:09:b0:ce:
9b:0c:66:d1:9a:3f:33:00:0d:91:bf:70:5a:4c:78:12:c2:80:
0f:b9:ae:88:36:ab:a8:d4:06:8b:a2:25:bb:9a:68:1b:46:20:
7e:dd:b1:0d:09:d5:f0:33:fd:c5:82:e8:ee:27:fb:7e:17:27:
5c:95:20:92:fa:dd:ea:b1:64:e7:15:92:f7:7f:66:bf:7c:a5:
61:5e:72:8c:76:0c:42:83:47:01:43:ca:5d:6a:16:2c:5b:72:
34:1f:36:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:50 2024 by rpki-client on console-ams.rpki-client.org