Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6163303a3a2f34342d3438203d3e20313430393734.roa
File: 323630323a666564613a6163303a3a2f34342d3438203d3e20313430393734.roa (raw, json)
Hash identifier: 1K8gb7iSAQC4RJa7s0lTEZibDR1NklRC7mAuIpdqfaQ=
Subject key identifier: 09:EB:BD:A9:E2:EA:DE:3B:ED:0D:EA:DB:29:9F:9B:E0:27:46:A5:97
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 13B95256D8CF3E9FB490D8F07366943CE0D4022C
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6163303a3a2f34342d3438203d3e20313430393734.roa
Signing time: Mon 28 Feb 2022 01:00:05 +0000
ROA not before: Mon 28 Feb 2022 00:55:05 +0000
ROA not after: Mon 27 Feb 2023 01:00:05 +0000
asID: 140974
IP address blocks: 2602:feda:ac0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:b9:52:56:d8:cf:3e:9f:b4:90:d8:f0:73:66:94:3c:e0:d4:02:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Feb 28 00:55:05 2022 GMT
Not After : Feb 27 01:00:05 2023 GMT
Subject: CN=3082010A0282010100B44131CA68FEB3BB8FF2205476ED6A2D41C1EBD2C51BE56B58FF2AD806EA4EB70C854CD138BE67CD86386423C535F6A38E8A75C4B5BC307EA0AFCF1C48A73EE1D136C5358A32FB7CF36A6D3EEFE8C7D43E6007139B8DE420A0BDB5CFBE5076E1E6154AA73A1CE8F575EFF7B4879D3E8BF608C5AAA2E2F32BD4402D63BF7CC60D493CC28D9DFCA65F4C9841DB53745B7B10B6F4BF96094A5167D0CF8C00AFD09EF6C876EB528E2DD79C828C03F0DDA4306956803D83D42BF3BBF4FD57334FAC10DC14447E7EBCD62B6E185A4B3A53A970869C4D789DF9CA4CF0ADADBA62748B9A42126BA354CB45D2FB125321C3189BE4984991D1D70A53EE214EF3D5D6F7B0E30203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:41:31:ca:68:fe:b3:bb:8f:f2:20:54:76:ed:
6a:2d:41:c1:eb:d2:c5:1b:e5:6b:58:ff:2a:d8:06:
ea:4e:b7:0c:85:4c:d1:38:be:67:cd:86:38:64:23:
c5:35:f6:a3:8e:8a:75:c4:b5:bc:30:7e:a0:af:cf:
1c:48:a7:3e:e1:d1:36:c5:35:8a:32:fb:7c:f3:6a:
6d:3e:ef:e8:c7:d4:3e:60:07:13:9b:8d:e4:20:a0:
bd:b5:cf:be:50:76:e1:e6:15:4a:a7:3a:1c:e8:f5:
75:ef:f7:b4:87:9d:3e:8b:f6:08:c5:aa:a2:e2:f3:
2b:d4:40:2d:63:bf:7c:c6:0d:49:3c:c2:8d:9d:fc:
a6:5f:4c:98:41:db:53:74:5b:7b:10:b6:f4:bf:96:
09:4a:51:67:d0:cf:8c:00:af:d0:9e:f6:c8:76:eb:
52:8e:2d:d7:9c:82:8c:03:f0:dd:a4:30:69:56:80:
3d:83:d4:2b:f3:bb:f4:fd:57:33:4f:ac:10:dc:14:
44:7e:7e:bc:d6:2b:6e:18:5a:4b:3a:53:a9:70:86:
9c:4d:78:9d:f9:ca:4c:f0:ad:ad:ba:62:74:8b:9a:
42:12:6b:a3:54:cb:45:d2:fb:12:53:21:c3:18:9b:
e4:98:49:91:d1:d7:0a:53:ee:21:4e:f3:d5:d6:f7:
b0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EB:BD:A9:E2:EA:DE:3B:ED:0D:EA:DB:29:9F:9B:E0:27:46:A5:97
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6163303a3a2f34342d3438203d3e20313430393734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:ac0::/44
Signature Algorithm: sha256WithRSAEncryption
20:c7:9a:25:c4:ad:c5:55:f7:db:0d:3f:a6:6f:66:dd:1f:10:
1e:7b:5f:52:3a:db:14:90:08:49:60:26:f2:e0:3f:b9:06:ba:
6d:5e:06:ff:fd:f9:b2:6d:e8:f0:2a:b3:ac:8d:f5:ce:2b:9f:
e6:10:dd:3b:2f:8e:f0:05:1e:3e:c4:60:33:e6:b9:68:c9:2c:
b4:3c:4d:54:68:7a:3f:eb:bf:a5:40:62:79:12:d8:c1:bc:0a:
ec:4d:1b:e0:fd:6d:a8:60:80:e9:5a:48:d1:42:a7:88:ac:57:
66:ab:71:9d:3c:94:ba:e1:0c:4b:06:0e:86:8d:80:a0:a6:ac:
ad:a6:bb:08:43:0e:bc:60:7c:16:42:bd:93:1c:14:4a:8f:10:
4b:6d:2b:68:a8:88:8f:84:6a:7d:df:7d:98:a4:17:d0:16:af:
55:e7:a3:85:65:db:9b:68:ca:cf:1f:3f:6a:d2:77:81:77:00:
a8:22:57:31:e9:8b:75:9c:43:99:47:cd:fa:a7:ff:29:ad:14:
57:b2:90:a9:cf:a3:d0:09:8c:47:7a:3f:b6:88:b9:8b:88:aa:
f1:10:36:ac:6f:d7:43:85:24:6e:81:8a:8e:f5:57:ef:7b:85:
7f:71:e6:ea:0b:d8:78:e1:c5:e7:eb:c8:b9:0a:c2:78:7c:10:
62:5e:59:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org