Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6238303a3a2f34352d3438203d3e20323037383033.roa
File: 323630323a666564613a6238303a3a2f34352d3438203d3e20323037383033.roa (raw, json)
Hash identifier: PJVsRnXQx/A3d2YxZdutFzxuHEsWyU7uodbn+8DPxdQ=
Subject key identifier: 98:93:1F:23:CD:91:1F:EC:46:7E:7E:D0:EC:96:30:8B:83:4E:50:E0
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 684E8D1A7ACD2F877F25294550AAEB16B8367E28
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6238303a3a2f34352d3438203d3e20323037383033.roa
Signing time: Mon 28 Feb 2022 01:00:12 +0000
ROA not before: Mon 28 Feb 2022 00:55:12 +0000
ROA not after: Mon 27 Feb 2023 01:00:12 +0000
asID: 207803
IP address blocks: 2602:feda:b80::/45 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:4e:8d:1a:7a:cd:2f:87:7f:25:29:45:50:aa:eb:16:b8:36:7e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Feb 28 00:55:12 2022 GMT
Not After : Feb 27 01:00:12 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:21:28:c7:2b:62:50:43:e1:80:8d:82:8d:c5:
ad:08:5b:35:ee:f1:8d:66:1b:32:fd:48:6d:a7:ac:
8a:2b:7b:f5:90:4f:49:bc:10:33:c2:af:af:4e:7e:
82:6c:80:e7:d6:f4:ad:fa:56:73:95:d2:c6:6c:c9:
15:9a:71:05:76:df:91:fb:9d:33:62:f6:5b:2b:b8:
b0:f1:71:20:04:58:89:7f:2b:40:83:4e:eb:52:85:
2a:d9:35:18:a0:63:69:68:6f:3d:02:83:7e:24:47:
98:a7:42:f1:47:99:18:9d:78:64:17:72:37:f4:72:
83:f2:83:a5:90:0d:6d:ed:7d:dd:da:dc:dc:f3:ac:
68:88:2f:59:16:76:8d:f0:cf:6f:88:f8:e1:ad:50:
73:38:fb:fd:31:fc:12:68:36:8d:d7:d7:ea:2b:b8:
61:12:de:f9:e8:77:1e:37:94:31:04:4a:f8:fb:6f:
31:d9:99:b8:ca:97:8e:5d:f1:aa:f7:51:48:19:0b:
11:22:e0:d8:ad:9d:f3:10:ff:3c:be:5e:1e:89:b7:
a6:ad:8c:fb:f7:1a:6c:f9:31:f7:d2:b6:96:2c:6d:
bd:c9:10:fe:53:87:ae:4c:33:25:b4:56:4b:b3:68:
f8:ae:d7:e5:27:1e:e1:ee:29:2a:82:50:fa:24:19:
cd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:93:1F:23:CD:91:1F:EC:46:7E:7E:D0:EC:96:30:8B:83:4E:50:E0
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6238303a3a2f34352d3438203d3e20323037383033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:b80::/45
Signature Algorithm: sha256WithRSAEncryption
05:48:c0:f0:00:11:a1:10:c8:09:17:81:8c:e8:ea:72:83:3d:
45:00:3d:a9:28:d1:b3:43:cd:71:23:07:2a:70:2d:8d:f6:a6:
ea:60:40:a4:ae:f8:c2:45:2e:e7:52:2e:68:36:de:68:76:c5:
56:5f:b5:47:c0:b0:84:5e:4a:71:ca:b4:bb:2e:db:fd:4d:c5:
c1:ed:c3:4d:f6:64:14:48:50:a5:8a:61:a3:28:4e:1a:2e:3e:
7a:2d:a6:0c:6b:3c:bf:f8:c7:ce:a2:48:c9:59:6c:7f:f8:46:
9a:a8:4f:67:bd:a9:2d:aa:d7:6c:00:90:06:74:bb:16:2a:b2:
85:6f:d7:ff:c6:14:86:5f:f0:2b:92:04:ab:f8:93:7b:07:43:
a0:89:0e:83:ac:28:26:df:83:dd:2e:bc:9d:4a:34:5b:71:62:
14:7e:d1:49:4e:03:85:02:a4:a3:54:1f:7e:41:53:6d:a7:41:
34:19:a9:2a:4c:6c:67:97:4e:90:c7:6d:c6:83:48:59:1c:a3:
32:9b:af:a8:b2:a4:e0:d6:54:c9:aa:98:e5:d3:51:64:d4:70:
fd:2a:cd:95:b2:9c:80:e1:75:b5:e4:f4:42:6c:34:48:4b:8d:
44:22:a9:f8:00:8c:f9:6f:3a:2f:08:82:f6:56:7a:8c:ee:7c:
f7:ee:28:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org