Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6165363a3a2f34372d3438203d3e20313430393133.roa
File: 323630323a666564613a6165363a3a2f34372d3438203d3e20313430393133.roa (raw, json)
Hash identifier: K4Bw1YAwcU3SWN35nTrFKFf2lek2qGGOlPgJz+k2qKc=
Subject key identifier: 79:3A:C8:2E:2F:85:DD:53:86:2D:B3:33:64:6B:93:F0:34:37:F5:39
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 61454B6CF887BD5C70200044E41B62F21DFAB690
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6165363a3a2f34372d3438203d3e20313430393133.roa
Signing time: Mon 28 Feb 2022 01:00:02 +0000
ROA not before: Mon 28 Feb 2022 00:55:02 +0000
ROA not after: Mon 27 Feb 2023 01:00:02 +0000
asID: 140913
IP address blocks: 2602:feda:ae6::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:45:4b:6c:f8:87:bd:5c:70:20:00:44:e4:1b:62:f2:1d:fa:b6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Feb 28 00:55:02 2022 GMT
Not After : Feb 27 01:00:02 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:01:8b:8b:3e:be:eb:2a:e3:6e:48:b0:24:c2:
3f:36:70:74:6e:8a:0f:68:9f:a1:94:b8:3e:cc:56:
22:f1:ac:6e:2c:f5:c6:3d:28:ce:84:b7:d6:83:15:
d8:04:a3:1d:bd:cd:c4:d8:39:55:a8:6f:b7:de:03:
fe:57:57:95:14:30:0f:15:8e:15:12:f6:e6:34:82:
16:83:a2:0f:50:c7:d5:18:5d:be:f2:5f:ad:69:93:
30:51:1f:0e:b9:60:87:4f:5e:80:81:0a:f3:1c:d4:
3e:6b:e0:65:50:47:ad:ef:4b:26:59:b9:e7:d0:9d:
2a:25:20:2d:38:d2:03:bd:19:a0:a8:2f:d1:6e:b3:
47:2a:29:a0:f6:1d:42:fa:1d:f8:c4:6a:bb:ac:93:
28:31:e6:c6:fa:85:f7:07:66:7a:40:82:21:d1:79:
96:db:61:47:3d:69:e9:f6:47:aa:4f:52:8a:3c:07:
1b:1a:b6:59:92:eb:7a:0a:6a:40:0c:57:1b:be:02:
02:b0:ea:6a:fe:da:5c:7b:d5:ec:16:dd:03:c4:6b:
9f:e9:3a:81:cb:53:56:45:8d:b3:63:c9:d6:b5:87:
62:25:19:22:3e:a2:db:ce:c6:5c:51:98:4b:ee:c1:
a0:6f:50:2a:88:72:f2:9d:09:e1:6f:16:dd:0b:f3:
aa:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3A:C8:2E:2F:85:DD:53:86:2D:B3:33:64:6B:93:F0:34:37:F5:39
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6165363a3a2f34372d3438203d3e20313430393133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:ae6::/47
Signature Algorithm: sha256WithRSAEncryption
55:75:c0:82:c4:04:54:db:3d:e3:8e:5b:a3:43:af:66:5b:cd:
ea:e6:e3:22:02:fb:e7:31:2c:4f:0b:29:4b:67:3b:66:f6:58:
c4:67:93:76:55:d4:b1:48:2b:5b:25:ca:6a:ff:51:fb:2c:9a:
24:67:6e:85:ca:96:d6:65:0d:6f:0a:66:19:a1:e1:1f:76:11:
ae:cb:65:49:4f:87:22:6b:3c:14:c6:42:7a:d4:e6:b2:e3:7f:
10:52:f9:11:a1:93:e6:bd:4f:2c:e2:50:b8:b9:51:ee:ff:13:
de:59:62:c3:d1:68:9f:a0:ed:9a:9d:07:7f:14:4b:aa:74:6a:
7f:bd:f3:22:43:2b:d3:05:e8:e3:14:d3:03:2f:9c:91:a4:e5:
73:ce:8a:78:43:b8:72:6c:d2:c4:ec:e5:36:c8:19:b4:82:41:
ac:7c:c6:ed:69:8b:09:c4:aa:e2:48:1c:e5:7d:27:3b:fd:77:
21:1a:d4:16:77:f3:5c:20:b9:c7:15:c6:84:04:b4:cb:0d:af:
bb:69:7b:82:08:e8:7f:23:ff:65:a9:f1:ea:5d:10:61:b7:b8:
6b:06:86:1c:d7:c3:93:fd:ad:5c:9d:ae:a9:ed:44:dd:e0:53:
d5:cc:9a:19:52:f6:30:0b:a0:84:52:24:f8:5b:13:0c:3b:a2:
c5:66:b7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:50 2024 by rpki-client on console-ams.rpki-client.org