Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6238653a3a2f34382d3536203d3e20323131393335.roa
File: 323630323a666564613a6238653a3a2f34382d3536203d3e20323131393335.roa (raw, json)
Hash identifier: qv5AdYqsMd7ILHSmwtXuMRuslGdozj059Xm0fCu8/iU=
Subject key identifier: 72:AC:D0:71:45:F5:C1:0E:90:59:AB:8D:69:7D:AD:49:66:63:9E:19
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 03941273400C0213591455365C474D0C362E976B
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6238653a3a2f34382d3536203d3e20323131393335.roa
Signing time: Mon 28 Feb 2022 01:00:07 +0000
ROA not before: Mon 28 Feb 2022 00:55:07 +0000
ROA not after: Mon 27 Feb 2023 01:00:07 +0000
asID: 211935
IP address blocks: 2602:feda:b8e::/48 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:94:12:73:40:0c:02:13:59:14:55:36:5c:47:4d:0c:36:2e:97:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Feb 28 00:55:07 2022 GMT
Not After : Feb 27 01:00:07 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:de:bf:8c:b5:45:ab:8e:71:63:73:1a:f0:9d:
ad:9e:09:18:d9:f6:36:ad:a1:94:6e:b8:76:c1:89:
61:68:2a:f1:05:ba:73:f9:e6:ae:cb:65:4e:04:f5:
e7:e5:db:59:ef:79:8a:ee:96:ad:92:08:b2:c8:ff:
92:da:bf:9e:3b:50:c0:25:46:47:07:03:ba:aa:ba:
b2:49:05:21:93:78:b6:ea:b7:23:35:6d:e2:35:99:
7b:a7:4e:b8:83:d5:f4:52:90:48:0c:bc:cd:0f:8b:
62:90:da:73:fa:7b:2f:a1:35:d4:3f:a4:3e:a0:df:
45:43:27:da:51:91:f3:27:bb:3a:ca:7f:88:d5:26:
c6:be:3b:7d:77:ef:83:3c:1c:9c:3b:47:c7:3f:ea:
04:30:e5:72:69:ed:9e:37:79:fc:1d:63:d5:66:af:
c9:e1:ff:07:5d:33:ae:cd:1f:6b:bb:15:37:cc:ef:
f8:0d:4d:82:a7:63:db:c5:fc:ec:0d:de:79:42:7e:
6f:00:8e:4b:97:57:13:08:f9:e7:ad:8a:40:a3:6e:
a7:99:fe:35:f2:6d:89:e4:b0:bb:1c:dd:a6:36:b5:
05:45:03:79:29:84:b9:68:43:39:3c:8f:3f:07:65:
63:47:89:2f:54:34:e9:4b:e3:dc:8d:28:89:00:e3:
64:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AC:D0:71:45:F5:C1:0E:90:59:AB:8D:69:7D:AD:49:66:63:9E:19
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6238653a3a2f34382d3536203d3e20323131393335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:b8e::/48
Signature Algorithm: sha256WithRSAEncryption
ac:f1:bd:e7:df:dc:b7:e4:be:d7:c6:38:14:25:64:43:34:a4:
b7:43:76:7e:d0:b6:57:3d:90:23:fd:f9:fb:e6:ff:a9:9e:a3:
18:f0:b2:e7:e4:be:4f:4a:b2:17:6d:fb:65:f9:f1:06:5d:e6:
dd:b8:04:af:e4:7f:6e:97:9c:f9:2a:af:78:a7:7f:a1:b6:c0:
72:2b:a6:22:fd:ce:be:8e:f0:e3:8f:04:ec:c4:68:8c:02:d6:
1f:dc:54:a8:5a:69:a7:02:fb:40:98:cf:d6:c7:8e:45:5c:01:
1b:63:95:84:39:04:5e:36:cd:18:59:ee:28:98:df:9c:75:38:
4f:65:32:81:de:40:9c:1d:36:13:e6:a9:8a:d8:80:66:e4:89:
2d:12:7e:18:d7:f8:f6:14:cb:b0:27:97:83:29:43:93:38:91:
93:7f:86:a7:99:f1:b9:49:22:b0:15:f7:d1:54:af:bc:ad:35:
1e:eb:83:f1:46:81:82:5e:d3:6f:0f:e0:92:44:7d:42:18:bb:
a5:27:16:c7:eb:70:fd:ec:87:1f:0f:29:b2:b8:9a:7f:3d:5c:
c3:84:0f:53:37:df:a6:19:b6:e2:61:ae:f7:28:97:14:8c:49:
e6:c8:92:69:0a:35:f7:69:86:78:f3:1c:c5:68:c1:1f:54:69:
dd:16:5c:f3
-----BEGIN CERTIFICATE-----
MIIHADCCBeigAwIBAgIUA5QSc0AMAhNZFFU2XEdNDDYul2swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDEwODM5OENBOTg4MzgyQzJBNTA5QkZEQjM5RTE0NkE3
NkNGOURFMDAeFw0yMjAyMjgwMDU1MDdaFw0yMzAyMjcwMTAwMDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREVERUJGOENCNTQ1QUI4RTcx
NjM3MzFBRjA5REFEOUUwOTE4RDlGNjM2QURBMTk0NkVCODc2QzE4OTYxNjgyQUYx
MDVCQTczRjlFNkFFQ0I2NTRFMDRGNUU3RTVEQjU5RUY3OThBRUU5NkFEOTIwOEIy
QzhGRjkyREFCRjlFM0I1MEMwMjU0NjQ3MDcwM0JBQUFCQUIyNDkwNTIxOTM3OEI2
RUFCNzIzMzU2REUyMzU5OTdCQTc0RUI4ODNENUY0NTI5MDQ4MENCQ0NEMEY4QjYy
OTBEQTczRkE3QjJGQTEzNUQ0M0ZBNDNFQTBERjQ1NDMyN0RBNTE5MUYzMjdCQjNB
Q0E3Rjg4RDUyNkM2QkUzQjdENzdFRjgzM0MxQzlDM0I0N0M3M0ZFQTA0MzBFNTcy
NjlFRDlFMzc3OUZDMUQ2M0Q1NjZBRkM5RTFGRjA3NUQzM0FFQ0QxRjZCQkIxNTM3
Q0NFRkY4MEQ0RDgyQTc2M0RCQzVGQ0VDMERERTc5NDI3RTZGMDA4RTRCOTc1NzEz
MDhGOUU3QUQ4QTQwQTM2RUE3OTlGRTM1RjI2RDg5RTRCMEJCMUNEREE2MzZCNTA1
NDUwMzc5Mjk4NEI5Njg0MzM5M0M4RjNGMDc2NTYzNDc4OTJGNTQzNEU5NEJFM0RD
OEQyODg5MDBFMzY0QjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA3t6/jLVFq45xY3Ma8J2tngkY2fY2raGUbrh2wYlhaCrxBbpz+eau
y2VOBPXn5dtZ73mK7patkgiyyP+S2r+eO1DAJUZHBwO6qrqySQUhk3i26rcjNW3i
NZl7p064g9X0UpBIDLzND4tikNpz+nsvoTXUP6Q+oN9FQyfaUZHzJ7s6yn+I1SbG
vjt9d++DPBycO0fHP+oEMOVyae2eN3n8HWPVZq/J4f8HXTOuzR9ruxU3zO/4DU2C
p2PbxfzsDd55Qn5vAI5Ll1cTCPnnrYpAo26nmf418m2J5LC7HN2mNrUFRQN5KYS5
aEM5PI8/B2VjR4kvVDTpS+PcjSiJAONkuQIDAQABo4ICDjCCAgowHQYDVR0OBBYE
FHKs0HFF9cEOkFmrjWl9rUlmY54ZMB8GA1UdIwQYMBaAFAEIOYypiDgsKlCb/bOe
FGp2z53gMA4GA1UdDwEB/wQEAwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzov
L3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTE0RTc1MDAwMC8wLzAx
MDgzOThDQTk4ODM4MkMyQTUwOUJGREIzOUUxNDZBNzZDRjlERTAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9zYWt1eWEubmF0Lm1vZS9y
ZXBvL05BVE9DQS8wLzAxMDgzOThDQTk4ODM4MkMyQTUwOUJGREIzOUUxNDZBNzZD
RjlERTAuY2VyMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUHMAuGd3JzeW5j
Oi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxMTRFNzUwMDAwLzAv
MzIzNjMwMzIzYTY2NjU2NDYxM2E2MjM4NjUzYTNhMmYzNDM4MmQzNTM2MjAzZDNl
MjAzMjMxMzEzOTMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAv7aC44wDQYJKoZIhvcNAQELBQAD
ggEBAKzxveff3LfkvtfGOBQlZEM0pLdDdn7Qtlc9kCP9+fvm/6meoxjwsufkvk9K
shdt+2X58QZd5t24BK/kf26XnPkqr3inf6G2wHIrpiL9zr6O8OOPBOzEaIwC1h/c
VKhaaacC+0CYz9bHjkVcARtjlYQ5BF42zRhZ7iiY35x1OE9lMoHeQJwdNhPmqYrY
gGbkiS0SfhjX+PYUy7Anl4MpQ5M4kZN/hqeZ8blJIrAV99FUr7ytNR7rg/FGgYJe
028P4JJEfUIYu6UnFsfrcP3shx8PKbK4mn89XMOED1M336YZtuJhrvcolxSMSebI
kmkKNfdphnjzHMVowR9Uad0WXPM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:50 2024 by rpki-client on console-ams.rpki-client.org