Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a61323a3a2f34382d3438203d3e203436393937.roa
File: 323630323a666564613a61323a3a2f34382d3438203d3e203436393937.roa (raw, json)
Hash identifier: a5m1PQpYefOa1OIURcccg1nzNnS5ol+7lLJEgh3bvYQ=
Subject key identifier: E4:91:E0:D6:5D:AD:B2:47:CB:86:0D:88:52:57:9F:07:D4:57:0A:E4
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 60A54A986CE789CE8579D9FC9AF6B5CA31A3A62F
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a61323a3a2f34382d3438203d3e203436393937.roa
Signing time: Mon 28 Feb 2022 01:00:01 +0000
ROA not before: Mon 28 Feb 2022 00:55:01 +0000
ROA not after: Mon 27 Feb 2023 01:00:01 +0000
asID: 46997
IP address blocks: 2602:feda:a2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:a5:4a:98:6c:e7:89:ce:85:79:d9:fc:9a:f6:b5:ca:31:a3:a6:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Feb 28 00:55:01 2022 GMT
Not After : Feb 27 01:00:01 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:52:ae:26:ee:6c:b6:ea:dd:f3:6d:11:b5:07:
ec:a5:e1:8c:59:4b:57:42:b9:60:67:eb:04:47:9c:
e3:80:28:c1:f0:62:68:17:39:8e:80:65:ed:af:db:
38:29:08:71:ad:47:dc:4d:1c:09:db:44:a0:fe:53:
14:b1:76:86:f3:34:94:9d:60:76:ba:af:f3:23:14:
e6:97:ce:5f:c6:fc:81:02:21:6f:26:30:c4:01:8d:
ff:df:6a:c6:1b:09:18:a5:6b:d7:70:40:f3:49:ca:
18:95:76:5e:78:69:82:e7:76:8f:37:75:88:22:45:
f1:cd:43:a5:d1:d9:eb:56:be:0f:0a:63:01:39:d9:
08:aa:75:cf:c6:f3:2b:d6:53:06:eb:16:a5:99:c6:
8a:88:0c:ef:f1:bf:73:47:58:c0:0f:78:8d:90:28:
0c:9e:e1:92:d6:3d:d2:bb:c3:2f:e6:a6:28:6d:76:
d4:e0:62:81:02:01:b9:53:f0:12:3f:43:f1:c0:81:
36:e5:c1:9b:88:b3:f0:22:b6:b3:ee:49:63:83:1c:
77:bc:8b:e6:11:19:fa:2b:0c:80:f0:ff:da:20:5c:
38:41:a6:2b:6c:9e:bf:c4:1b:96:0b:96:8e:59:2e:
9a:ce:cc:74:81:cf:24:ea:29:39:f0:4c:20:32:0f:
c2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:91:E0:D6:5D:AD:B2:47:CB:86:0D:88:52:57:9F:07:D4:57:0A:E4
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a61323a3a2f34382d3438203d3e203436393937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:a2::/48
Signature Algorithm: sha256WithRSAEncryption
1b:f2:ba:00:75:51:f9:7b:09:80:3d:bf:45:05:39:ea:59:2e:
ad:a1:34:59:b0:43:36:8a:6e:e0:67:0f:c2:66:91:1c:10:5e:
29:aa:d2:bb:35:a9:9e:13:8d:d1:45:8d:c6:81:a9:8c:22:ac:
d9:db:15:fd:cf:6c:46:db:e1:14:48:d8:95:d4:bb:17:47:2f:
30:32:cf:bb:3f:3f:8d:40:54:e4:49:c4:e4:56:ae:33:d3:b1:
9b:54:2c:68:9d:43:08:48:aa:69:81:8f:a3:82:bd:06:79:bb:
55:f6:fd:c6:54:d9:07:53:4a:5c:16:99:b0:af:74:3d:6d:a5:
e3:75:d5:23:b8:b9:5a:d0:0b:fe:92:52:a8:6d:1a:9a:b2:39:
76:a8:c4:db:7e:57:30:ab:b0:74:c5:04:9f:e8:e9:27:e6:67:
04:4e:b3:a5:9a:6f:e4:4a:fd:d2:89:35:a8:c8:1a:e9:2b:9f:
db:3d:30:0d:54:2f:c5:ee:9c:7b:f2:ed:e2:cc:6a:73:60:89:
f8:06:d1:41:f9:f0:4e:de:0c:b8:7e:f8:ab:52:25:d7:89:a3:
c7:d3:e9:ba:48:15:85:f7:3b:55:51:92:6f:ec:96:e2:49:54:
c5:15:34:a7:50:d8:d0:ab:58:2b:5b:00:ff:b9:9c:20:fa:0f:
aa:d9:92:a9
-----BEGIN CERTIFICATE-----
MIIG+zCCBeOgAwIBAgIUYKVKmGznic6Fedn8mva1yjGjpi8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDEwODM5OENBOTg4MzgyQzJBNTA5QkZEQjM5RTE0NkE3
NkNGOURFMDAeFw0yMjAyMjgwMDU1MDFaFw0yMzAyMjcwMTAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjM1MkFFMjZFRTZDQjZFQURE
RjM2RDExQjUwN0VDQTVFMThDNTk0QjU3NDJCOTYwNjdFQjA0NDc5Q0UzODAyOEMx
RjA2MjY4MTczOThFODA2NUVEQUZEQjM4MjkwODcxQUQ0N0RDNEQxQzA5REI0NEEw
RkU1MzE0QjE3Njg2RjMzNDk0OUQ2MDc2QkFBRkYzMjMxNEU2OTdDRTVGQzZGQzgx
MDIyMTZGMjYzMEM0MDE4REZGREY2QUM2MUIwOTE4QTU2QkQ3NzA0MEYzNDlDQTE4
OTU3NjVFNzg2OTgyRTc3NjhGMzc3NTg4MjI0NUYxQ0Q0M0E1RDFEOUVCNTZCRTBG
MEE2MzAxMzlEOTA4QUE3NUNGQzZGMzJCRDY1MzA2RUIxNkE1OTlDNjhBODgwQ0VG
RjFCRjczNDc1OEMwMEY3ODhEOTAyODBDOUVFMTkyRDYzREQyQkJDMzJGRTZBNjI4
NkQ3NkQ0RTA2MjgxMDIwMUI5NTNGMDEyM0Y0M0YxQzA4MTM2RTVDMTlCODhCM0Yw
MjJCNkIzRUU0OTYzODMxQzc3QkM4QkU2MTExOUZBMkIwQzgwRjBGRkRBMjA1QzM4
NDFBNjJCNkM5RUJGQzQxQjk2MEI5NjhFNTkyRTlBQ0VDQzc0ODFDRjI0RUEyOTM5
RjA0QzIwMzIwRkMyNDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAs1KuJu5sturd820RtQfspeGMWUtXQrlgZ+sER5zjgCjB8GJoFzmO
gGXtr9s4KQhxrUfcTRwJ20Sg/lMUsXaG8zSUnWB2uq/zIxTml85fxvyBAiFvJjDE
AY3/32rGGwkYpWvXcEDzScoYlXZeeGmC53aPN3WIIkXxzUOl0dnrVr4PCmMBOdkI
qnXPxvMr1lMG6xalmcaKiAzv8b9zR1jAD3iNkCgMnuGS1j3Su8Mv5qYobXbU4GKB
AgG5U/ASP0PxwIE25cGbiLPwIraz7kljgxx3vIvmERn6KwyA8P/aIFw4QaYrbJ6/
xBuWC5aOWS6azsx0gc8k6ik58EwgMg/CQwIDAQABo4ICCTCCAgUwHQYDVR0OBBYE
FOSR4NZdrbJHy4YNiFJXnwfUVwrkMB8GA1UdIwQYMBaAFAEIOYypiDgsKlCb/bOe
FGp2z53gMA4GA1UdDwEB/wQEAwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzov
L3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTE0RTc1MDAwMC8wLzAx
MDgzOThDQTk4ODM4MkMyQTUwOUJGREIzOUUxNDZBNzZDRjlERTAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9zYWt1eWEubmF0Lm1vZS9y
ZXBvL05BVE9DQS8wLzAxMDgzOThDQTk4ODM4MkMyQTUwOUJGREIzOUUxNDZBNzZD
RjlERTAuY2VyMIGRBggrBgEFBQcBCwSBhDCBgTB/BggrBgEFBQcwC4ZzcnN5bmM6
Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTExNEU3NTAwMDAvMC8z
MjM2MzAzMjNhNjY2NTY0NjEzYTYxMzIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAz
NDM2MzkzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAJgL+2gCiMA0GCSqGSIb3DQEBCwUAA4IBAQAb
8roAdVH5ewmAPb9FBTnqWS6toTRZsEM2im7gZw/CZpEcEF4pqtK7NameE43RRY3G
gamMIqzZ2xX9z2xG2+EUSNiV1LsXRy8wMs+7Pz+NQFTkScTkVq4z07GbVCxonUMI
SKppgY+jgr0GebtV9v3GVNkHU0pcFpmwr3Q9baXjddUjuLla0Av+klKobRqasjl2
qMTbflcwq7B0xQSf6Okn5mcETrOlmm/kSv3SiTWoyBrpK5/bPTANVC/F7px78u3i
zGpzYIn4BtFB+fBO3gy4fvirUiXXiaPH0+m6SBWF9ztVUZJv7JbiSVTFFTSnUNjQ
q1grWwD/uZwg+g+q2ZKp
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:50 2024 by rpki-client on console-ams.rpki-client.org