Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6238643a3a2f34382d3438203d3e20323030333334.roa
File: 323630323a666564613a6238643a3a2f34382d3438203d3e20323030333334.roa (raw, json)
Hash identifier: btfzEwIzKbRDwYaY8wflzeFxyxtx9DVDJ5cXdp+88N4=
Subject key identifier: BD:E5:CC:FC:62:09:BA:A0:5F:E4:3E:D2:6C:C3:21:3B:34:AC:E3:86
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 6A1B356ACB27456F211F52BF0D0EA2950ED18725
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6238643a3a2f34382d3438203d3e20323030333334.roa
Signing time: Mon 28 Feb 2022 01:00:10 +0000
ROA not before: Mon 28 Feb 2022 00:55:10 +0000
ROA not after: Mon 27 Feb 2023 01:00:10 +0000
asID: 200334
IP address blocks: 2602:feda:b8d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:1b:35:6a:cb:27:45:6f:21:1f:52:bf:0d:0e:a2:95:0e:d1:87:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Feb 28 00:55:10 2022 GMT
Not After : Feb 27 01:00:10 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5b:e0:14:cf:04:e9:68:c5:09:ff:41:5a:9e:
50:d7:eb:ee:9d:7d:d3:a9:65:4e:4a:af:f6:6f:a9:
f4:a5:f3:22:d5:91:08:e7:21:45:1f:ac:d6:fe:ce:
d4:01:76:49:1d:22:e9:bc:8c:58:50:48:92:19:f7:
71:fe:10:b7:ae:9a:ff:ec:42:9d:0d:23:e4:89:0b:
af:14:35:0c:28:4b:b9:30:e8:1d:bb:4d:ad:44:9f:
65:93:c3:6d:dd:1b:04:64:ac:a7:6b:b3:d4:4e:51:
da:76:31:ca:ca:7d:bc:f5:20:35:da:5c:01:c2:84:
e5:23:a5:b2:ae:d7:12:f6:2e:b8:48:ed:30:05:b1:
5f:cc:1c:cc:61:28:b5:07:a3:da:0c:f6:e6:7c:03:
be:4f:32:25:85:7e:d5:58:2c:cb:49:d9:48:74:58:
08:2d:7a:08:b6:a9:fd:f0:80:03:b9:92:90:f2:c3:
49:5a:9c:78:2f:04:32:83:ff:e9:92:8c:af:3c:5c:
8f:31:cf:20:f6:3b:62:86:11:cb:51:d8:b4:30:3a:
e9:dd:3b:6f:ab:47:4a:05:c0:bf:22:fc:2e:40:06:
f0:79:a6:29:0a:b8:18:01:e0:c9:7c:9a:fe:56:57:
a0:e3:7e:c1:af:5a:7b:70:ae:c8:21:e6:b9:f9:9a:
b0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E5:CC:FC:62:09:BA:A0:5F:E4:3E:D2:6C:C3:21:3B:34:AC:E3:86
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6238643a3a2f34382d3438203d3e20323030333334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:b8d::/48
Signature Algorithm: sha256WithRSAEncryption
22:3a:45:fa:5c:65:0e:e9:bc:0a:c8:b8:d6:e1:3f:71:46:2f:
f8:a1:b3:07:d9:9b:be:68:0f:33:d9:bc:4a:f8:70:ef:87:86:
02:2b:d7:92:65:d2:e7:fb:97:32:36:c3:83:fc:86:3c:46:00:
21:46:e4:02:f0:31:c7:80:ba:b0:81:9d:43:b5:83:4b:62:dd:
99:6c:92:0d:e6:35:50:2c:92:25:87:79:e2:ae:22:22:d5:8d:
9d:68:85:29:ab:e8:8f:7c:97:9f:28:67:dc:38:99:17:99:e5:
b7:ba:78:eb:e9:56:c3:d8:8c:93:25:b8:64:54:05:0a:ef:af:
f8:af:90:d9:9e:f3:85:ef:d5:4a:c5:e0:5d:db:60:53:aa:6a:
d4:63:97:ee:34:ae:e5:dc:12:de:22:cc:8a:c3:be:d9:07:d1:
99:32:1f:3d:a6:96:be:9d:38:db:07:c7:a8:55:2c:5f:3e:02:
79:c5:bc:c4:a9:e8:e7:66:67:ce:bd:bb:e3:bb:10:cc:ef:fa:
1d:9a:7f:10:89:f1:f3:9f:71:55:44:e7:50:16:8d:6e:8d:63:
6f:ad:02:6a:ed:e0:2f:24:22:67:a0:e9:04:f9:69:39:19:c8:
89:02:da:6b:d2:13:bd:18:ac:41:1f:20:5e:d9:06:d7:c2:b5:
6b:c2:73:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:50 2024 by rpki-client on console-ams.rpki-client.org