Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3362303a3a2f34342d3438203d3e20313334353735.roa
File: 323630323a666564613a3362303a3a2f34342d3438203d3e20313334353735.roa (raw, json)
Hash identifier: tCXZ4Gkk7Yw66psn/B0VerXoOxugeoF+7sLrS75Ptd0=
Subject key identifier: 45:FD:5D:89:F6:9D:2E:6D:68:FE:A9:93:09:D3:4C:D9:8E:A2:BD:50
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 2D589F3417E40CEBA99D4DC1A8A395C7EF01F3E9
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3362303a3a2f34342d3438203d3e20313334353735.roa
Signing time: Mon 28 Feb 2022 01:00:11 +0000
ROA not before: Mon 28 Feb 2022 00:55:11 +0000
ROA not after: Mon 27 Feb 2023 01:00:11 +0000
asID: 134575
IP address blocks: 2602:feda:3b0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:58:9f:34:17:e4:0c:eb:a9:9d:4d:c1:a8:a3:95:c7:ef:01:f3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Feb 28 00:55:11 2022 GMT
Not After : Feb 27 01:00:11 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c2:ca:82:24:b4:89:90:50:fe:15:6b:81:00:
ad:22:a4:e2:ed:a0:03:39:9b:b5:96:5b:94:54:fb:
76:8b:95:87:e9:5a:d5:f2:6f:72:5e:8f:e4:ed:d4:
60:ed:fd:60:ec:3c:e4:01:27:c8:42:49:e8:93:ac:
7c:69:ff:96:22:03:62:49:9f:17:00:23:19:54:8f:
e5:7f:fa:e3:04:48:8d:48:51:17:74:73:18:cf:8d:
e0:b0:dd:2b:17:de:06:76:a8:26:69:0a:e9:22:bd:
a5:08:e1:d6:ab:2d:ff:c2:78:1f:67:a5:86:b4:85:
87:78:bc:27:d0:b3:85:60:12:b0:9c:9c:8b:e6:b2:
92:1b:7a:5a:b6:fb:e2:a1:5b:e6:89:74:0d:8b:5c:
8c:36:d1:32:05:48:3d:b4:4b:ec:8a:37:2c:23:36:
6d:88:d7:82:47:2f:96:d0:83:62:19:53:d3:47:18:
c5:39:00:cb:de:6d:c9:20:2b:f8:3d:aa:5b:6c:23:
20:9f:90:e0:a8:88:ee:3f:f0:60:c4:f1:31:cb:e6:
67:33:f4:c5:97:24:9d:0d:db:55:f8:b4:b7:d0:73:
42:8c:95:93:e9:cd:fc:72:c3:5a:a5:42:7b:22:b2:
d7:2f:a9:a6:d6:00:1e:c2:5b:f6:26:a6:b8:16:1e:
ad:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FD:5D:89:F6:9D:2E:6D:68:FE:A9:93:09:D3:4C:D9:8E:A2:BD:50
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3362303a3a2f34342d3438203d3e20313334353735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:3b0::/44
Signature Algorithm: sha256WithRSAEncryption
af:d0:a6:bf:4f:12:08:bc:91:b0:37:c5:e8:97:54:ee:44:8b:
ec:13:51:d0:22:c1:1a:40:ea:28:86:ca:7e:51:aa:cb:90:15:
28:a7:95:5c:ce:8f:0b:52:98:4e:50:ed:e6:0b:8c:d7:a0:bb:
1d:64:24:03:d7:78:b7:b0:83:27:dc:f7:92:3d:d9:07:43:f0:
86:05:9a:65:4a:89:77:f8:13:7f:c4:91:4e:05:77:30:91:6d:
9a:8e:68:9c:6f:13:4c:77:7a:e1:a0:82:c9:e4:c3:87:6f:05:
02:17:c1:c0:2a:5e:4e:a4:a7:f4:e8:e8:ac:03:04:2c:54:c0:
11:91:b1:78:5a:5b:17:5b:a7:15:ad:d3:88:6c:73:c8:56:af:
07:6d:a5:ce:0f:5c:a6:55:63:eb:f1:e2:39:bc:72:af:e5:cc:
0b:6f:5c:fa:4b:fd:a7:a9:98:66:e1:b3:79:bd:26:24:16:f8:
f7:3d:c1:93:2b:80:6e:68:c1:07:2e:17:2b:c8:5c:88:93:45:
1a:5f:07:b6:c7:f9:5a:cd:2c:0d:fd:ae:27:74:6c:4c:7c:ca:
e1:6e:5f:fe:68:64:3f:80:47:01:72:14:e9:17:e8:7b:a5:05:
c5:36:df:64:77:de:9b:a5:1a:4f:5a:24:3e:cd:3c:ab:ac:44:
9a:8a:ae:22
-----BEGIN CERTIFICATE-----
MIIHADCCBeigAwIBAgIULVifNBfkDOupnU3BqKOVx+8B8+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDEwODM5OENBOTg4MzgyQzJBNTA5QkZEQjM5RTE0NkE3
NkNGOURFMDAeFw0yMjAyMjgwMDU1MTFaFw0yMzAyMjcwMTAwMTFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDVDMkNBODIyNEI0ODk5MDUw
RkUxNTZCODEwMEFEMjJBNEUyRURBMDAzMzk5QkI1OTY1Qjk0NTRGQjc2OEI5NTg3
RTk1QUQ1RjI2RjcyNUU4RkU0RURENDYwRURGRDYwRUMzQ0U0MDEyN0M4NDI0OUU4
OTNBQzdDNjlGRjk2MjIwMzYyNDk5RjE3MDAyMzE5NTQ4RkU1N0ZGQUUzMDQ0ODhE
NDg1MTE3NzQ3MzE4Q0Y4REUwQjBERDJCMTdERTA2NzZBODI2NjkwQUU5MjJCREE1
MDhFMUQ2QUIyREZGQzI3ODFGNjdBNTg2QjQ4NTg3NzhCQzI3RDBCMzg1NjAxMkIw
OUM5QzhCRTZCMjkyMUI3QTVBQjZGQkUyQTE1QkU2ODk3NDBEOEI1QzhDMzZEMTMy
MDU0ODNEQjQ0QkVDOEEzNzJDMjMzNjZEODhENzgyNDcyRjk2RDA4MzYyMTk1M0Qz
NDcxOEM1MzkwMENCREU2REM5MjAyQkY4M0RBQTVCNkMyMzIwOUY5MEUwQTg4OEVF
M0ZGMDYwQzRGMTMxQ0JFNjY3MzNGNEM1OTcyNDlEMEREQjU1RjhCNEI3RDA3MzQy
OEM5NTkzRTlDREZDNzJDMzVBQTU0MjdCMjJCMkQ3MkZBOUE2RDYwMDFFQzI1QkY2
MjZBNkI4MTYxRUFENkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1cLKgiS0iZBQ/hVrgQCtIqTi7aADOZu1lluUVPt2i5WH6VrV8m9y
Xo/k7dRg7f1g7DzkASfIQknok6x8af+WIgNiSZ8XACMZVI/lf/rjBEiNSFEXdHMY
z43gsN0rF94GdqgmaQrpIr2lCOHWqy3/wngfZ6WGtIWHeLwn0LOFYBKwnJyL5rKS
G3patvvioVvmiXQNi1yMNtEyBUg9tEvsijcsIzZtiNeCRy+W0INiGVPTRxjFOQDL
3m3JICv4PapbbCMgn5DgqIjuP/BgxPExy+ZnM/TFlySdDdtV+LS30HNCjJWT6c38
csNapUJ7IrLXL6mm1gAewlv2Jqa4Fh6tbQIDAQABo4ICDjCCAgowHQYDVR0OBBYE
FEX9XYn2nS5taP6pkwnTTNmOor1QMB8GA1UdIwQYMBaAFAEIOYypiDgsKlCb/bOe
FGp2z53gMA4GA1UdDwEB/wQEAwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzov
L3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTE0RTc1MDAwMC8wLzAx
MDgzOThDQTk4ODM4MkMyQTUwOUJGREIzOUUxNDZBNzZDRjlERTAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9zYWt1eWEubmF0Lm1vZS9y
ZXBvL05BVE9DQS8wLzAxMDgzOThDQTk4ODM4MkMyQTUwOUJGREIzOUUxNDZBNzZD
RjlERTAuY2VyMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUHMAuGd3JzeW5j
Oi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxMTRFNzUwMDAwLzAv
MzIzNjMwMzIzYTY2NjU2NDYxM2EzMzYyMzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNl
MjAzMTMzMzQzNTM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQmAv7aA7AwDQYJKoZIhvcNAQELBQAD
ggEBAK/Qpr9PEgi8kbA3xeiXVO5Ei+wTUdAiwRpA6iiGyn5RqsuQFSinlVzOjwtS
mE5Q7eYLjNegux1kJAPXeLewgyfc95I92QdD8IYFmmVKiXf4E3/EkU4FdzCRbZqO
aJxvE0x3euGggsnkw4dvBQIXwcAqXk6kp/To6KwDBCxUwBGRsXhaWxdbpxWt04hs
c8hWrwdtpc4PXKZVY+vx4jm8cq/lzAtvXPpL/aepmGbhs3m9JiQW+Pc9wZMrgG5o
wQcuFyvIXIiTRRpfB7bH+VrNLA39rid0bEx8yuFuX/5oZD+ARwFyFOkX6HulBcU2
32R33pulGk9aJD7NPKusRJqKriI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org