Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6162303a3a2f34342d3438203d3e203437313538.roa
File:                     323630323a666564613a6162303a3a2f34342d3438203d3e203437313538.roa (raw, json)
Hash identifier:          I8UBIqiPEKhpf4dvPzf1MgVQV5iXVD6VIKlRiyzz0nU=
Subject key identifier:   DC:98:06:F2:07:EC:BB:3F:E5:DF:20:1C:5E:D9:52:FB:28:BB:D7:43
Certificate issuer:       /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial:       070CB69137362AFEAAC031D216CABB202B66A4FB
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6162303a3a2f34342d3438203d3e203437313538.roa
Signing time:             Fri 19 Aug 2022 10:03:30 +0000
ROA not before:           Fri 19 Aug 2022 09:58:30 +0000
ROA not after:            Fri 18 Aug 2023 10:03:30 +0000
asID:                     47158
IP address blocks:        2602:feda:ab0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:0c:b6:91:37:36:2a:fe:aa:c0:31:d2:16:ca:bb:20:2b:66:a4:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
        Validity
            Not Before: Aug 19 09:58:30 2022 GMT
            Not After : Aug 18 10:03:30 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:96:32:01:40:5b:1e:33:64:6c:f2:19:d2:9c:
                    55:3e:34:db:7c:7e:b5:b1:42:c4:04:d5:8c:a2:a2:
                    c1:dc:93:99:55:d9:7c:93:b9:77:11:16:85:99:fb:
                    03:59:8a:14:5e:60:a1:04:5b:23:2f:c4:a3:28:30:
                    e6:8a:0a:e0:8d:36:f7:39:91:43:1d:7a:d7:c5:9b:
                    43:c5:82:74:33:05:f8:61:4b:db:c8:6c:c0:3c:5c:
                    f8:29:b8:39:65:45:7d:10:57:7c:65:d1:62:d2:ab:
                    b3:6e:21:55:7b:02:46:98:cc:a9:5f:37:bb:c0:d2:
                    42:a4:d4:a3:ba:c1:68:1c:b3:f2:45:fb:2c:fb:1e:
                    5e:21:97:21:9d:8f:cc:5b:2a:8a:66:6a:cc:2e:09:
                    63:05:6b:c0:fe:24:67:e1:7c:0b:1f:0a:7c:3a:93:
                    3e:ba:b5:ff:e9:2f:b0:78:ca:41:8e:05:a9:61:ca:
                    b6:74:83:ae:40:d8:6a:14:26:58:c8:55:9d:9a:e8:
                    ba:97:ac:18:68:ba:c1:1f:ad:74:00:8b:7a:fb:d8:
                    40:e8:84:3c:fb:29:98:4f:a7:21:f4:72:98:16:ae:
                    9d:26:26:4e:65:14:bb:59:6d:9e:cb:25:9b:f9:f9:
                    7b:9d:9f:e5:b6:6a:1b:2f:ce:47:ea:16:fc:01:8c:
                    ef:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:98:06:F2:07:EC:BB:3F:E5:DF:20:1C:5E:D9:52:FB:28:BB:D7:43
            X509v3 Authority Key Identifier:
                keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6162303a3a2f34342d3438203d3e203437313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:ab0::/44

    Signature Algorithm: sha256WithRSAEncryption
         2f:b7:98:05:01:b6:47:67:26:f7:73:9c:1b:07:13:de:fd:76:
         73:95:fb:98:e1:10:aa:44:f0:2c:83:60:4c:dc:58:b4:db:de:
         92:de:43:33:0c:75:2a:f3:b5:e4:8c:b6:77:3e:a8:95:af:3f:
         93:45:6b:0f:05:92:4c:48:ef:03:1f:69:77:f6:8c:27:24:8a:
         bf:0c:1f:b8:2d:31:e6:c3:ca:c5:c3:e4:da:36:77:8e:58:1a:
         5c:66:f8:88:f7:e0:ba:f1:39:a3:5c:74:a9:29:0a:9e:a0:c9:
         f5:f2:09:16:fe:c6:7f:05:2c:8c:8e:d6:2e:28:ff:b3:b3:41:
         82:8c:75:f4:25:5a:35:eb:c8:21:4b:65:2f:e0:3c:7e:65:a3:
         cb:23:fc:e1:14:3d:bc:31:27:ac:99:f4:59:2a:5f:03:7c:3f:
         70:1e:76:87:9e:7f:36:a3:7a:1e:8e:01:b0:91:6e:74:de:a3:
         10:f8:18:a9:c9:70:6a:8c:7a:1d:34:2f:43:72:34:85:f2:7f:
         b3:f3:c3:f9:11:07:02:6a:35:30:4e:be:7f:87:65:9b:4c:d0:
         92:d0:b2:f2:c9:95:97:3f:67:91:a2:82:25:3d:ac:e9:91:66:
         58:f3:fe:ba:c3:88:90:cf:88:ff:65:0b:6a:ed:7b:33:28:2e:
         a0:36:33:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org