Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6165323a3a2f34372d3438203d3e20313338313831.roa
File:                     323630323a666564613a6165323a3a2f34372d3438203d3e20313338313831.roa (raw, json)
Hash identifier:          svLNK9sGSVMtzt3c1R6vZVyNR7Xe+kGhCyDwfq8xdIM=
Subject key identifier:   84:31:77:77:9F:63:92:88:8C:3A:42:5E:FC:E8:EC:75:30:D7:61:6B
Certificate issuer:       /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial:       75E0A89C92851BB6AB8C1D45B5E9457A2C304B0D
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6165323a3a2f34372d3438203d3e20313338313831.roa
Signing time:             Mon 28 Feb 2022 01:00:08 +0000
ROA not before:           Mon 28 Feb 2022 00:55:08 +0000
ROA not after:            Mon 27 Feb 2023 01:00:08 +0000
asID:                     138181
IP address blocks:        2602:feda:ae2::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:e0:a8:9c:92:85:1b:b6:ab:8c:1d:45:b5:e9:45:7a:2c:30:4b:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
        Validity
            Not Before: Feb 28 00:55:08 2022 GMT
            Not After : Feb 27 01:00:08 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b2:17:54:83:84:5a:b2:c9:b7:d6:71:de:f0:
                    bd:26:3d:bf:45:9a:e5:5e:64:fb:71:f2:10:22:b1:
                    b9:e1:df:e9:5a:08:f8:01:01:a2:a6:f0:bf:2e:de:
                    c1:29:b0:a7:dd:de:4a:43:cd:33:b5:16:53:7c:aa:
                    0a:4f:69:41:6b:76:c5:90:69:f0:90:90:82:9a:b8:
                    67:bc:6b:00:98:44:18:e0:24:78:d6:82:7a:6c:b1:
                    22:b5:40:b7:66:71:b1:78:51:f6:65:17:c2:97:5b:
                    90:27:d9:42:f3:29:85:c8:a7:14:d9:13:3d:06:cb:
                    b0:01:d2:5b:6f:74:e6:e3:6c:0c:60:f0:a4:96:c0:
                    01:fa:75:cd:10:52:eb:c2:79:1f:de:1d:ee:0c:51:
                    07:71:88:fb:e9:fd:6b:04:f0:47:6d:4d:5a:af:4e:
                    61:30:e5:e9:77:1c:0e:fb:fa:29:18:07:4f:47:86:
                    4c:a3:65:a1:aa:bd:6a:ad:8e:31:e5:c6:26:7f:a0:
                    cd:5f:38:fc:9a:04:98:4a:d6:41:b0:a2:0c:59:d3:
                    ab:03:10:7f:d3:bd:33:83:32:06:47:c1:82:e5:61:
                    d1:56:5a:4e:f8:aa:93:67:dc:48:cb:c4:6e:ba:07:
                    7e:75:0d:7b:a9:d7:c6:d0:ab:2c:c0:30:00:fb:1f:
                    f4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:31:77:77:9F:63:92:88:8C:3A:42:5E:FC:E8:EC:75:30:D7:61:6B
            X509v3 Authority Key Identifier:
                keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6165323a3a2f34372d3438203d3e20313338313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:ae2::/47

    Signature Algorithm: sha256WithRSAEncryption
         16:86:7c:ca:83:43:f7:01:8b:49:8d:54:3a:0e:b6:37:c4:fd:
         27:f3:4e:40:ef:21:95:95:b3:a3:ec:bb:13:54:87:97:f5:c4:
         4f:41:fb:11:a9:41:a1:44:0e:aa:ea:48:3d:8e:5b:b4:5b:00:
         71:fb:bd:59:d8:93:0a:c9:23:c9:24:10:d7:45:ee:9a:0b:4f:
         d0:36:50:8b:1d:fc:d2:31:16:28:a4:bc:78:3d:65:bc:39:c2:
         be:1c:e8:23:66:46:03:a3:b6:df:72:31:63:bf:aa:f6:28:23:
         2c:50:45:e0:cd:96:5a:71:23:ec:13:6c:28:77:1f:09:66:42:
         93:22:2b:d5:60:70:65:43:a2:1a:47:39:9f:f7:80:53:6f:7e:
         6b:11:9b:ff:21:14:e5:15:1f:37:2b:7b:04:3f:3b:c4:c4:ea:
         16:0d:b1:3c:ba:6a:91:fb:8e:1a:f5:10:23:3f:8c:2c:47:fc:
         bb:90:38:94:55:71:92:d8:ec:a5:af:e4:04:51:32:78:c9:85:
         1f:34:10:37:72:33:4b:02:9d:d9:76:c9:a3:ad:22:06:78:5d:
         68:45:27:21:28:ee:f1:c5:1a:59:98:d8:b0:ce:d7:46:45:82:
         5c:07:b0:16:de:09:5d:9a:e0:fc:41:49:c8:40:2f:57:13:cc:
         c8:81:89:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:50 2024 by rpki-client on console-ams.rpki-client.org