Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3361383a3a2f34352d3438203d3e20313431373036.roa
File: 323630323a666564613a3361383a3a2f34352d3438203d3e20313431373036.roa (raw, json)
Hash identifier: BBdhmA8PNODU5pUFc4ujQXDzFllwj9d4FvjX776Q88g=
Subject key identifier: B2:18:71:20:8F:F3:68:C3:CA:F8:77:FC:B0:D4:99:04:71:AC:85:24
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 76E6895662D74BDAA36EFCB0765CBB862F0C0B71
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3361383a3a2f34352d3438203d3e20313431373036.roa
Signing time: Mon 28 Feb 2022 01:00:04 +0000
ROA not before: Mon 28 Feb 2022 00:55:04 +0000
ROA not after: Mon 27 Feb 2023 01:00:04 +0000
asID: 141706
IP address blocks: 2602:feda:3a8::/45 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:e6:89:56:62:d7:4b:da:a3:6e:fc:b0:76:5c:bb:86:2f:0c:0b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Feb 28 00:55:04 2022 GMT
Not After : Feb 27 01:00:04 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d5:dd:37:ea:a9:43:61:39:32:a2:0c:83:79:
b3:98:ee:d7:49:78:6d:55:20:ee:e6:dd:29:ad:8f:
d0:97:17:69:6f:04:1f:c3:54:2f:de:02:f0:0f:d7:
03:e1:e6:f5:b4:f2:9d:c4:4d:c3:dc:5d:66:09:ba:
fd:56:d4:e3:f9:fe:13:6f:ed:c1:08:44:c8:49:d5:
47:1d:1f:60:d5:80:97:a6:3e:0d:d5:64:6b:43:2e:
66:f0:3e:c0:60:3c:62:3d:26:01:4b:36:36:c0:55:
ae:1b:cd:28:4b:e2:a2:8f:8c:bf:2e:56:71:8a:bc:
c2:16:4d:22:2d:8c:fd:76:fd:c5:74:db:02:3b:d5:
d4:91:31:a8:8d:5d:31:15:8c:8e:0c:98:16:40:fc:
85:18:18:0e:14:24:fe:27:96:ab:34:be:92:a2:b5:
54:48:10:6e:40:f5:0c:27:32:6a:74:d9:73:c6:ac:
2a:0a:d9:7a:e6:3b:1b:cc:2f:56:53:82:5e:7f:cd:
c6:ec:80:08:52:94:0a:5e:fb:78:de:d9:95:29:30:
db:61:6f:19:02:bd:61:ac:60:9e:5c:2e:dd:66:ca:
6f:31:e1:5f:24:67:4c:4e:90:2b:6e:ec:b4:74:7d:
7c:c1:85:9e:1a:28:5c:93:05:d6:73:be:7e:ae:a7:
08:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:18:71:20:8F:F3:68:C3:CA:F8:77:FC:B0:D4:99:04:71:AC:85:24
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3361383a3a2f34352d3438203d3e20313431373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:3a8::/45
Signature Algorithm: sha256WithRSAEncryption
07:4f:c3:b9:e9:bc:c8:ff:9d:88:9a:10:e1:e3:d1:0c:ba:ca:
40:3d:02:3c:48:28:3a:51:52:a8:34:50:f4:32:3d:e0:30:74:
47:c5:9e:9a:ae:15:a7:64:3d:dc:db:63:60:09:16:95:7b:18:
b8:62:a2:41:2a:a0:5f:ac:b0:ba:40:55:c9:bb:bb:01:09:34:
5b:72:e8:f6:94:fc:2a:8c:d1:f1:88:7b:9d:40:2d:2d:d4:db:
d9:db:2f:22:37:5f:08:9d:1c:57:62:de:19:f5:00:9b:ea:0d:
1e:8f:82:b8:a2:d3:73:e1:9e:b0:bb:f2:a5:45:9a:e1:c4:ee:
46:f8:0d:43:83:94:33:78:af:4f:d7:0c:37:4a:19:87:d8:b8:
10:12:e3:30:85:e5:b8:43:d9:db:3b:58:51:9b:60:64:33:18:
70:19:e3:d1:36:85:7d:52:89:c4:6d:52:33:6a:22:3c:8b:10:
fc:bf:39:05:69:7b:5e:67:01:57:3e:85:1c:90:6f:a0:a5:fc:
e5:39:37:b1:46:76:28:3c:df:d1:72:2e:09:d9:80:a0:09:71:
39:e1:57:b9:27:27:4b:95:d1:05:96:e8:e8:57:25:b7:f5:c3:
5c:83:17:bd:51:ed:15:e7:21:ca:0d:ea:eb:e1:a2:54:9f:35:
ed:c4:0a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org