Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6166373a3a2f34382d3438203d3e20313338393139.roa
File: 323630323a666564613a6166373a3a2f34382d3438203d3e20313338393139.roa (raw, json)
Hash identifier: Nb6Ow9lVWwY1y2HsKDX8DIgIiY7A+cfu5cgZqOcSN1M=
Subject key identifier: 50:C7:32:05:18:67:4B:23:5D:1F:A5:FD:05:B2:85:2D:A4:C2:6F:66
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 29F75AD4D1C4618CE7684E0FC066D0671CC8F773
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6166373a3a2f34382d3438203d3e20313338393139.roa
Signing time: Mon 28 Feb 2022 01:00:06 +0000
ROA not before: Mon 28 Feb 2022 00:55:06 +0000
ROA not after: Mon 27 Feb 2023 01:00:06 +0000
asID: 138919
IP address blocks: 2602:feda:af7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:f7:5a:d4:d1:c4:61:8c:e7:68:4e:0f:c0:66:d0:67:1c:c8:f7:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Feb 28 00:55:06 2022 GMT
Not After : Feb 27 01:00:06 2023 GMT
Subject: CN=3082010A0282010100B90BE68DE0BB0BD241124631DE12836BDBC8E02B551ACE9F52A47ED2AFABF852841286132CA388E56BFAD748FDB20EB7EDAFD91099D72A6B1A017C0FB3824053ACE032D90EBADBE522349A665720E845A1FD3B2C18CBBAB9ECA11B9569A5DB22DD785E3F9D5643BA7762F2F2DB58D7E3983EA01A518D137F90E7C0B7F3E8163F60B3579987850BF9AE8DCC9DD42211506C5F89B0897929EDD1305F86C63F02FA740F2818212C7C1541A415A3DE7DEB1D45C055360C9753126B8AF7EDCEF530323496DC07147F96466E4D2389B77505D2DFC341EF94DE27360FAA0E21150307DBA38E3EC86ACB2C1108AACC532351A082E4A0C690343D957AE2B84D9F4F9A05E70203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0b:e6:8d:e0:bb:0b:d2:41:12:46:31:de:12:
83:6b:db:c8:e0:2b:55:1a:ce:9f:52:a4:7e:d2:af:
ab:f8:52:84:12:86:13:2c:a3:88:e5:6b:fa:d7:48:
fd:b2:0e:b7:ed:af:d9:10:99:d7:2a:6b:1a:01:7c:
0f:b3:82:40:53:ac:e0:32:d9:0e:ba:db:e5:22:34:
9a:66:57:20:e8:45:a1:fd:3b:2c:18:cb:ba:b9:ec:
a1:1b:95:69:a5:db:22:dd:78:5e:3f:9d:56:43:ba:
77:62:f2:f2:db:58:d7:e3:98:3e:a0:1a:51:8d:13:
7f:90:e7:c0:b7:f3:e8:16:3f:60:b3:57:99:87:85:
0b:f9:ae:8d:cc:9d:d4:22:11:50:6c:5f:89:b0:89:
79:29:ed:d1:30:5f:86:c6:3f:02:fa:74:0f:28:18:
21:2c:7c:15:41:a4:15:a3:de:7d:eb:1d:45:c0:55:
36:0c:97:53:12:6b:8a:f7:ed:ce:f5:30:32:34:96:
dc:07:14:7f:96:46:6e:4d:23:89:b7:75:05:d2:df:
c3:41:ef:94:de:27:36:0f:aa:0e:21:15:03:07:db:
a3:8e:3e:c8:6a:cb:2c:11:08:aa:cc:53:23:51:a0:
82:e4:a0:c6:90:34:3d:95:7a:e2:b8:4d:9f:4f:9a:
05:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C7:32:05:18:67:4B:23:5D:1F:A5:FD:05:B2:85:2D:A4:C2:6F:66
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6166373a3a2f34382d3438203d3e20313338393139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:af7::/48
Signature Algorithm: sha256WithRSAEncryption
90:4d:0d:82:19:b4:c3:c0:9a:8a:34:15:ae:ac:9a:9f:25:3e:
77:e6:20:bf:3a:5a:00:68:6e:ea:39:a1:f5:db:09:e1:95:cf:
86:cb:b4:d9:c6:4d:ba:1c:28:b5:55:15:a8:d3:e7:bf:f2:e9:
1a:aa:d0:7d:cb:f7:c3:d3:ed:02:66:f4:bb:49:19:dd:bb:bd:
34:ed:37:f6:cf:41:d3:3c:d3:78:6a:c2:34:83:af:62:8d:0e:
55:d6:73:0a:57:b3:77:d1:64:48:e8:d9:31:2f:3d:61:38:ba:
44:f1:dd:a1:ee:51:64:ac:c9:2b:09:14:3f:79:b9:65:a7:6b:
8f:4a:a4:ec:53:a8:98:25:4c:f4:8e:72:33:50:c5:ac:9b:16:
be:78:bd:13:ba:ba:d4:e2:c0:48:79:af:e1:7d:81:e6:58:63:
3e:ff:f6:e8:92:18:92:15:43:d3:9f:ff:3a:9a:69:88:f8:de:
07:00:74:00:2a:49:ee:a8:3f:6f:35:af:b6:db:55:8e:ce:18:
47:8b:77:37:36:bb:54:9d:16:d6:bf:79:55:94:a0:3f:b3:36:
77:07:c2:77:79:16:e8:f5:a9:ee:3a:4a:58:7a:21:c1:b9:a7:
d0:08:88:aa:29:c5:6e:0f:d5:7d:8c:b6:93:72:82:e3:c0:02:
fd:6a:8d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org