Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6238383a3a2f34372d3438203d3e203630363134.roa
File:                     323630323a666564613a6238383a3a2f34372d3438203d3e203630363134.roa (raw, json)
Hash identifier:          laOsYBrpH+RVnKCmbd9Wca9JJxHz9RX9BVztJ2qHf6Y=
Subject key identifier:   E2:49:72:0F:1A:2E:4F:0A:EC:CB:97:3F:02:14:AB:F5:B3:63:96:CA
Certificate issuer:       /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial:       5858ABC968BF7910304129EBB87A48566472A1A1
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6238383a3a2f34372d3438203d3e203630363134.roa
Signing time:             Mon 28 Feb 2022 01:00:00 +0000
ROA not before:           Mon 28 Feb 2022 00:55:00 +0000
ROA not after:            Mon 27 Feb 2023 01:00:00 +0000
asID:                     60614
IP address blocks:        2602:feda:b88::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:58:ab:c9:68:bf:79:10:30:41:29:eb:b8:7a:48:56:64:72:a1:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
        Validity
            Not Before: Feb 28 00:55:00 2022 GMT
            Not After : Feb 27 01:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:06:45:b2:ae:9f:31:27:60:c2:06:2e:44:74:
                    0b:0b:22:9a:34:20:a6:3e:8d:8a:3a:b5:df:f5:08:
                    be:77:78:d7:be:ad:05:04:87:20:10:90:2d:c0:6c:
                    76:16:bd:f3:63:ab:03:29:67:e7:92:ac:52:5c:a5:
                    af:92:13:39:e4:bd:5c:c0:15:e3:8e:b4:2d:22:f5:
                    68:13:8d:89:e5:61:ef:e0:aa:3b:40:09:04:3e:4b:
                    2c:32:23:f0:1a:c1:3e:0d:26:1e:dd:15:86:31:2f:
                    ac:6a:cb:83:e1:80:8d:32:e5:8b:a0:be:40:4d:32:
                    43:05:b5:da:3b:a9:b4:cb:52:33:fc:d5:21:93:4f:
                    74:82:1a:62:69:23:05:9f:a6:f4:81:86:a8:f8:6f:
                    43:fa:5d:56:97:f3:11:7f:5e:13:8f:cd:f5:cb:0b:
                    89:3c:9e:ea:2b:e7:6f:dd:14:0d:77:39:25:94:67:
                    db:3f:a8:a9:df:7b:6f:f3:19:7a:01:83:4f:87:6f:
                    b5:19:04:97:a2:20:9f:ea:29:de:e4:b0:3c:11:80:
                    ee:e1:b8:c2:0e:60:08:b1:95:4d:79:35:09:2e:d6:
                    3c:5d:97:32:5b:0a:2a:ca:56:18:48:1d:ce:f4:99:
                    7d:38:82:77:1f:2a:26:84:b1:26:df:f3:ae:0a:d2:
                    64:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:49:72:0F:1A:2E:4F:0A:EC:CB:97:3F:02:14:AB:F5:B3:63:96:CA
            X509v3 Authority Key Identifier:
                keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6238383a3a2f34372d3438203d3e203630363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:b88::/47

    Signature Algorithm: sha256WithRSAEncryption
         16:db:64:e8:a4:6a:a3:10:b0:39:8d:52:c3:48:39:77:9e:80:
         8b:55:d9:78:5e:41:18:62:b5:07:6d:2b:82:7c:32:cf:b7:25:
         a4:86:2a:7e:cf:88:26:7e:d3:d4:f1:aa:0c:88:a8:1a:45:8c:
         e4:2e:7b:22:ee:35:ed:fd:bf:d7:fc:d1:61:75:0c:01:f9:e7:
         21:0b:a2:68:49:93:b4:22:29:e9:b2:91:b2:c1:69:a7:4a:f0:
         40:9a:5e:6c:25:4c:86:6a:cf:d0:79:6a:c5:ab:d8:a7:e5:57:
         f2:aa:6b:5f:5a:50:4c:7b:67:f1:0a:e9:95:a1:31:18:48:93:
         40:d9:4f:9c:75:b9:42:f3:46:8c:48:e5:f3:17:b6:d8:7c:ea:
         3e:ae:8c:36:b3:34:ce:8b:e4:05:83:6a:eb:53:36:c3:aa:83:
         d8:5b:48:b5:be:ef:3c:cd:3d:5e:c4:f1:8d:21:36:7e:e3:3a:
         c1:65:31:14:68:c3:f9:9d:7e:7a:aa:81:44:ca:73:94:cc:fe:
         66:e0:39:ac:1e:2b:c2:32:46:a6:76:63:38:b0:91:0d:81:27:
         1c:35:28:eb:b7:70:0e:3c:ab:fb:1e:13:74:6b:31:94:32:96:
         77:b2:ec:80:9e:1c:b7:57:62:92:25:9c:28:12:e7:01:13:f7:
         fb:25:26:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:50 2024 by rpki-client on console-ams.rpki-client.org