Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3363383a3a2f34362d3438203d3e20323037323638.roa
File: 323630323a666564613a3363383a3a2f34362d3438203d3e20323037323638.roa (raw, json)
Hash identifier: 72dfI1gOoBJKe4BpAIZLjJKmDbDbLx/WKYbKLani/8w=
Subject key identifier: 8C:B0:78:90:FF:23:65:AC:5C:2A:1A:42:6B:24:76:53:0C:12:11:EF
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 6BA6A3D60768B32477B1D44EBB847AE8AF0A8F50
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3363383a3a2f34362d3438203d3e20323037323638.roa
Signing time: Mon 28 Feb 2022 01:00:12 +0000
ROA not before: Mon 28 Feb 2022 00:55:12 +0000
ROA not after: Mon 27 Feb 2023 01:00:12 +0000
asID: 207268
IP address blocks: 2602:feda:3c8::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:a6:a3:d6:07:68:b3:24:77:b1:d4:4e:bb:84:7a:e8:af:0a:8f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Feb 28 00:55:12 2022 GMT
Not After : Feb 27 01:00:12 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:45:19:75:09:cb:8e:0c:ee:8b:ad:ba:47:1e:
12:5c:00:99:37:25:3f:28:f2:c5:80:88:2d:ca:a7:
03:b1:e2:6a:ba:66:cd:69:1e:00:8d:da:34:59:29:
21:72:36:67:ec:aa:20:6f:de:df:52:49:45:eb:a1:
8b:d7:8d:f8:c7:75:35:38:da:90:95:7d:87:5b:49:
6a:24:17:4c:52:a0:e5:e8:4e:96:a4:08:bb:78:f4:
02:67:89:bf:ae:a0:c5:c6:4f:fa:aa:38:a3:7f:83:
af:53:a1:f2:62:bd:c7:22:22:cb:25:e5:e9:5c:1e:
5b:f8:19:48:97:9f:5d:73:db:7b:99:d0:28:a2:0a:
d6:ec:e3:b0:db:1e:82:9e:d1:87:5f:a6:2c:f7:b0:
32:32:99:de:84:22:5c:a2:91:2b:2e:f6:15:5c:94:
38:6b:6a:5f:a3:af:9a:3a:85:ee:c2:fa:41:24:75:
4c:c5:63:c3:50:ef:92:c8:73:07:ab:14:7e:ac:b9:
b4:b6:68:75:a2:03:9a:f7:f1:5f:d6:40:d4:bb:3e:
07:5b:bd:f2:ca:f7:3c:4d:48:75:3f:0d:bd:21:0d:
c3:37:1a:a4:d9:a4:7c:7a:56:6d:22:6e:6d:6e:16:
b9:a2:86:04:cb:f1:17:b7:ee:d0:84:1f:6e:13:7b:
47:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B0:78:90:FF:23:65:AC:5C:2A:1A:42:6B:24:76:53:0C:12:11:EF
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3363383a3a2f34362d3438203d3e20323037323638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:3c8::/46
Signature Algorithm: sha256WithRSAEncryption
97:d3:5b:6f:d6:ef:73:98:73:8c:1e:ca:d4:8c:db:51:f1:e3:
76:f7:04:a1:60:c0:65:3e:79:c7:ce:da:20:8b:5a:32:b3:62:
64:63:c5:94:50:7e:33:3a:20:aa:c3:03:22:c2:a3:25:9b:47:
0a:4b:76:44:22:cd:42:49:9f:6b:7c:e7:39:b1:c5:b9:7f:fc:
ed:67:e9:0c:95:45:24:d0:2d:f7:9d:de:3a:1e:38:78:4a:14:
f9:a0:bc:19:5a:8f:b4:ed:4a:69:a1:8b:73:1e:86:49:1d:bb:
08:c3:be:cf:57:3f:f8:50:de:a3:f1:53:79:ec:0e:3c:28:a4:
0f:30:f3:68:6b:0d:0e:a8:95:ff:06:9b:de:09:81:05:e9:44:
c0:84:e6:98:f3:d0:d9:d3:a3:8c:52:cc:c3:c3:bc:74:29:e9:
7e:08:85:d7:dc:49:b3:e6:24:e5:31:9b:40:18:23:f7:b7:9b:
0d:ad:ad:76:ba:c1:64:04:fa:bc:29:7f:31:48:e6:af:3d:fc:
d8:b6:f0:d3:c1:42:bd:0b:16:d2:28:9a:8f:01:7b:7c:84:24:
f7:c8:7a:50:f9:e5:bc:3b:e9:c6:3e:57:56:97:d2:0d:85:98:
ac:ad:28:22:40:35:6f:df:be:27:63:43:c2:81:32:86:bd:2c:
96:50:69:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:50 2024 by rpki-client on console-ams.rpki-client.org