Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a61343a3a2f34382d3438203d3e20333936333033.roa
File:                     323630323a666564613a61343a3a2f34382d3438203d3e20333936333033.roa (raw, json)
Hash identifier:          IW9cwudTTwvjfQAMKK9VkYR9SQ34VpPC2U/gdpHfJrs=
Subject key identifier:   54:26:1E:4F:EE:89:06:11:96:29:8F:FD:1A:04:4D:B3:3B:ED:B9:86
Certificate issuer:       /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial:       39A7B6A3EAA9A8C69A05559AD9DEB86D8E49237E
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a61343a3a2f34382d3438203d3e20333936333033.roa
Signing time:             Mon 28 Feb 2022 01:00:06 +0000
ROA not before:           Mon 28 Feb 2022 00:55:06 +0000
ROA not after:            Mon 27 Feb 2023 01:00:06 +0000
asID:                     396303
IP address blocks:        2602:feda:a4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a7:b6:a3:ea:a9:a8:c6:9a:05:55:9a:d9:de:b8:6d:8e:49:23:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
        Validity
            Not Before: Feb 28 00:55:06 2022 GMT
            Not After : Feb 27 01:00:06 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1d:ec:0e:a8:8f:55:98:4e:3d:8c:2a:fa:24:
                    82:3b:e5:ab:69:ad:04:84:71:86:50:35:2d:a1:07:
                    fd:51:bd:47:74:0d:69:0a:2a:30:75:bf:7d:ef:c7:
                    bd:47:61:96:26:18:df:ef:38:80:15:cc:82:97:d4:
                    28:04:4e:69:0b:5f:84:cd:d1:2f:be:94:bc:4d:b4:
                    de:3a:44:3b:49:66:b7:b2:e5:22:13:3c:9b:96:ad:
                    a6:f6:45:6a:52:d9:0c:97:9b:c1:91:bd:92:e0:a9:
                    5e:6d:31:df:3c:a9:0e:86:5f:60:d2:d9:dd:3b:a6:
                    dd:4b:90:2b:a8:73:d5:e6:9c:29:b4:f9:aa:49:8d:
                    cb:f1:a2:a5:d5:e0:f3:89:e9:fa:3d:68:4f:1f:ca:
                    45:80:db:e9:9f:31:3f:43:37:fa:f2:81:00:95:9e:
                    08:35:07:fe:cd:fc:58:51:96:cd:64:b9:9a:02:18:
                    5b:a1:cb:57:99:d3:00:fa:8a:85:97:43:29:2f:17:
                    18:a3:41:8a:23:9a:bb:fa:d1:14:ad:ee:d7:8c:18:
                    38:93:dc:a7:8b:61:08:16:00:b2:c1:44:ae:78:62:
                    25:29:80:26:11:3f:f3:3a:bd:a9:64:39:d0:76:09:
                    25:26:1f:6e:d4:dc:2b:e6:d0:fa:d8:99:1c:5e:0d:
                    4b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:26:1E:4F:EE:89:06:11:96:29:8F:FD:1A:04:4D:B3:3B:ED:B9:86
            X509v3 Authority Key Identifier:
                keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a61343a3a2f34382d3438203d3e20333936333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:a4::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:81:3c:2f:57:b7:2b:72:ce:38:d7:be:9c:6b:75:3f:a4:06:
         98:a1:db:d7:c4:15:cf:8f:b9:47:06:2e:fa:d6:32:8a:7b:fc:
         14:76:d4:58:0d:f5:ef:77:26:66:3d:36:fa:e8:05:33:55:af:
         00:db:6c:a0:48:21:ef:06:57:fc:7d:ca:5a:a4:4f:b8:a8:aa:
         3e:57:61:52:99:96:3d:26:27:74:9c:08:12:12:b9:8c:72:2a:
         5a:4b:ca:eb:b7:ba:5e:6e:50:20:c9:45:18:63:c4:d5:6a:8b:
         7e:5b:02:71:3c:b0:8d:43:4c:64:4b:52:ca:0f:77:d7:a6:07:
         71:d7:c6:6c:f9:5a:32:98:4d:ff:fa:d0:3e:ee:a0:15:3b:ad:
         f6:fd:89:ef:02:7f:7f:c4:d9:93:29:02:3f:b4:1a:01:8d:70:
         d5:1a:f8:f3:5f:75:c8:a7:6d:30:5a:a9:d8:d4:6d:0d:b0:e5:
         7c:4d:2e:5c:95:ea:a9:e7:d9:3f:4d:31:a6:42:9b:40:29:50:
         ca:ae:9f:b2:e1:79:da:5a:bd:42:0a:c8:13:4d:e8:25:a8:94:
         15:0e:75:17:1f:5b:09:88:4e:f8:ea:15:9c:8d:19:7c:c2:be:
         e5:a6:94:2b:ea:b7:3b:cf:d8:cd:5c:88:6d:a5:63:d8:48:7b:
         18:00:e1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:50 2024 by rpki-client on console-ams.rpki-client.org