Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3365303a3a2f34342d3438203d3e20323037363332.roa
File:                     323630323a666564613a3365303a3a2f34342d3438203d3e20323037363332.roa (raw, json)
Hash identifier:          Pc8Oem6kpoSJozvWK+bpglfsr8RX120d+ZGzeL/IvPs=
Subject key identifier:   D5:44:16:6E:95:17:19:23:48:99:84:54:C0:01:FC:4D:A6:50:8D:86
Certificate issuer:       /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial:       7C50F9D6E53FA6E102C540D78D38DC3C153C20E6
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3365303a3a2f34342d3438203d3e20323037363332.roa
Signing time:             Mon 28 Feb 2022 01:00:08 +0000
ROA not before:           Mon 28 Feb 2022 00:55:08 +0000
ROA not after:            Mon 27 Feb 2023 01:00:08 +0000
asID:                     207632
IP address blocks:        2602:feda:3e0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:50:f9:d6:e5:3f:a6:e1:02:c5:40:d7:8d:38:dc:3c:15:3c:20:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
        Validity
            Not Before: Feb 28 00:55:08 2022 GMT
            Not After : Feb 27 01:00:08 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9f:97:a4:ea:e7:af:3c:b4:b9:e2:0a:3d:c2:
                    0b:b5:91:cc:d1:e6:08:bb:35:2e:2f:9f:a2:dc:d4:
                    71:c5:d6:18:eb:59:95:13:c5:98:aa:e9:5c:e0:af:
                    1c:dd:38:48:90:ab:d4:fd:88:4d:b5:a3:5b:80:d1:
                    84:f0:ab:0f:7b:92:82:91:9b:b6:f0:f9:5e:24:db:
                    38:5e:05:7f:e3:af:da:ef:7e:d6:f7:05:9f:4c:91:
                    e1:eb:22:71:3f:cb:2a:4e:d4:91:bd:ef:58:b4:6f:
                    ee:8a:31:8f:2d:2b:a7:c8:27:c5:92:41:d4:5b:15:
                    f0:62:89:fc:59:69:77:cb:7e:39:6f:ba:dd:90:f6:
                    00:d9:a3:20:b4:76:45:27:82:58:0a:01:56:92:27:
                    46:34:1d:82:1d:91:fe:3b:9d:86:0c:01:eb:f2:e3:
                    8c:d2:80:80:dc:9a:05:99:4f:a7:af:fb:93:cf:71:
                    3d:33:16:bd:e2:d4:8d:20:c9:bc:d3:2a:26:bf:4d:
                    f6:ab:63:8d:a3:a4:b3:c0:7c:3f:67:19:59:4f:af:
                    f9:c3:bb:87:fa:31:bd:0c:26:15:c8:c0:56:ab:5f:
                    75:89:3a:05:ef:52:74:63:b8:8b:fa:15:82:06:6d:
                    fc:55:e5:8d:e0:40:aa:ef:fd:9a:f7:52:f4:72:60:
                    5e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:44:16:6E:95:17:19:23:48:99:84:54:C0:01:FC:4D:A6:50:8D:86
            X509v3 Authority Key Identifier:
                keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3365303a3a2f34342d3438203d3e20323037363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:3e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         93:73:d1:1a:72:b4:1c:ed:9d:52:1f:41:35:c9:69:ae:64:82:
         33:0f:14:1a:5d:29:34:06:69:99:0e:21:7a:78:d9:9e:94:90:
         6c:5b:fb:13:bf:ee:6e:22:8e:e7:f2:bb:98:f4:13:48:87:96:
         4a:dc:a7:5e:ee:2e:12:99:3d:c4:38:78:7d:9f:b9:7d:bf:20:
         54:34:f5:5a:0c:21:2e:5d:a5:d3:cc:47:5a:e0:63:a9:63:f1:
         7e:15:c8:4d:a8:67:0b:b9:7e:c5:f1:88:85:cb:83:d0:b6:f7:
         0b:eb:a8:a0:db:0d:d7:66:f0:3c:d1:66:20:df:5f:f0:3b:44:
         f7:c7:f0:88:c6:b7:0e:f6:37:18:8b:ae:76:2f:95:8c:60:b2:
         4a:5a:1d:2c:64:8a:e5:ea:2f:46:36:70:6f:72:02:0a:41:eb:
         2a:bc:ef:03:54:3b:de:1b:35:74:6c:0e:7f:7c:c9:a0:72:e8:
         99:b4:c5:56:1b:69:81:db:37:41:76:7a:fa:a6:cb:89:ac:d9:
         c4:ec:44:c5:43:1f:e6:bb:8a:f3:a4:3e:ee:12:88:f1:1d:08:
         c6:57:d2:ea:79:e9:26:5c:9c:87:25:e4:d1:fe:69:35:c4:1a:
         e3:70:b6:b7:4a:6e:ac:d6:b7:74:6b:63:dd:07:d0:b8:49:b7:
         78:70:71:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org