Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a61333a3a2f34382d3438203d3e203436393937.roa
File:                     323630323a666564613a61333a3a2f34382d3438203d3e203436393937.roa (raw, json)
Hash identifier:          Z9Te/KzwBZp6fC+Mi8on6rFTGbABBhzX1kLjZ9mw5wY=
Subject key identifier:   9A:40:DF:F5:3E:CE:6B:67:8A:37:6B:78:48:2B:71:06:ED:DA:83:55
Certificate issuer:       /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial:       7F48AF56EE6599D022EB02896280FDE898D1F929
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a61333a3a2f34382d3438203d3e203436393937.roa
Signing time:             Mon 28 Feb 2022 01:00:05 +0000
ROA not before:           Mon 28 Feb 2022 00:55:05 +0000
ROA not after:            Mon 27 Feb 2023 01:00:05 +0000
asID:                     46997
IP address blocks:        2602:feda:a3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:48:af:56:ee:65:99:d0:22:eb:02:89:62:80:fd:e8:98:d1:f9:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
        Validity
            Not Before: Feb 28 00:55:05 2022 GMT
            Not After : Feb 27 01:00:05 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:89:49:42:93:10:39:3b:2c:2e:0b:b0:17:aa:
                    77:4b:03:6e:a7:36:ec:94:57:b3:53:68:e1:b6:87:
                    2b:d9:84:d1:d7:89:0c:b5:59:53:9c:9e:f5:d0:ec:
                    20:56:eb:e6:f7:df:59:65:23:79:0e:53:fe:56:fb:
                    08:7d:03:9c:a7:f5:90:40:98:d9:ca:1b:8a:dc:51:
                    c8:e3:15:6e:c8:32:af:d6:fe:8d:38:f4:b2:f8:28:
                    7d:3c:09:33:5d:99:13:e2:b2:a8:68:6e:5c:8c:2d:
                    7e:1e:cc:05:f3:da:59:e9:1e:5f:24:ad:77:ef:0e:
                    12:22:a3:b3:ba:47:7c:f4:8c:dc:2b:d0:b0:82:00:
                    d4:3b:44:a1:6e:d1:bb:f0:93:0c:20:aa:a4:78:16:
                    3f:3d:70:41:8d:c2:f7:0d:35:eb:e4:0c:d8:ff:86:
                    87:87:79:86:e0:59:15:a5:17:17:a3:d5:2e:4c:91:
                    25:f8:c6:ef:23:eb:6d:00:10:5a:5a:8d:df:fc:01:
                    9d:09:03:c0:0d:22:8e:01:93:38:22:6c:a9:04:67:
                    ff:08:a5:ec:3e:fd:78:45:eb:8c:88:82:a4:ef:08:
                    d0:46:f2:65:f6:c4:33:4e:b0:24:da:41:f2:e9:fb:
                    7c:b7:08:cb:17:c6:cd:d2:9a:8b:ec:26:28:e4:d2:
                    1e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:40:DF:F5:3E:CE:6B:67:8A:37:6B:78:48:2B:71:06:ED:DA:83:55
            X509v3 Authority Key Identifier:
                keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a61333a3a2f34382d3438203d3e203436393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:a3::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:8c:61:8a:e2:af:d0:d2:32:ac:47:fe:56:33:82:03:c2:25:
         28:04:65:c3:86:d0:a1:2b:97:39:47:4c:ed:b8:03:33:74:53:
         79:14:be:26:76:bc:04:3d:1e:47:7c:24:ec:61:e5:c4:88:82:
         27:36:79:8a:e2:0f:81:56:c9:1f:bb:c7:3c:c7:0a:b5:c5:db:
         03:52:89:37:b1:30:ed:2d:14:36:29:7a:62:b4:ec:c9:30:d7:
         c4:4b:86:89:69:ba:f5:72:bd:e7:3b:99:15:5a:db:64:51:d3:
         ea:15:c1:de:43:a6:de:f4:f2:56:63:a4:ac:43:3f:6f:a7:7e:
         68:2f:85:45:7f:3b:1b:35:6f:b4:91:e0:c0:cc:b5:82:86:da:
         8c:7f:8d:30:12:e3:8a:a7:41:9a:bd:09:20:50:15:3c:78:14:
         71:34:c3:2e:be:c8:49:8c:2b:26:69:bd:67:3d:97:85:8d:01:
         06:37:93:d4:1c:33:19:a7:71:66:c2:a0:60:d3:8d:44:7e:61:
         f4:3f:0c:bc:df:c5:dd:36:9a:d6:17:70:01:19:0e:ac:e6:a1:
         90:74:cb:3f:8e:7c:89:a0:86:41:74:65:e8:5f:50:57:d1:25:
         4b:75:4f:5d:27:61:43:6d:f8:ad:a4:f4:60:4c:34:38:5c:a2:
         cb:aa:e1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:50 2024 by rpki-client on console-ams.rpki-client.org