Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6238663a3a2f34382d3438203d3e20323035393233.roa
File: 323630323a666564613a6238663a3a2f34382d3438203d3e20323035393233.roa (raw, json)
Hash identifier: F61OPLGOupp7f1ZNZi5JHjwwL/NklvCtEexvVvKI5RQ=
Subject key identifier: 48:A6:A2:CC:23:4E:07:E3:FA:E4:B2:6F:48:A1:76:73:04:B6:31:FA
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 28DC115C9AAD3F409BD01F046345D28A446B95FC
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6238663a3a2f34382d3438203d3e20323035393233.roa
Signing time: Mon 28 Feb 2022 01:00:06 +0000
ROA not before: Mon 28 Feb 2022 00:55:06 +0000
ROA not after: Mon 27 Feb 2023 01:00:06 +0000
asID: 205923
IP address blocks: 2602:feda:b8f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:dc:11:5c:9a:ad:3f:40:9b:d0:1f:04:63:45:d2:8a:44:6b:95:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Feb 28 00:55:06 2022 GMT
Not After : Feb 27 01:00:06 2023 GMT
Subject: CN=3082010A0282010100C055F1C9C59C24F0E7CB15AEFCB28F6ACAEFED8C9E8E8F1A65F6617B0FBBCC9E008746C096C61B1C3AADAC27EAD07652483474BCA928030361626970513777C76F162647206563F2BDF15F984C530773860145C1C001554BB3876773D5D53F05469B3FB2904155C99C44CB2D5899C01D068410CFA5FFF7354CF072D2F0C878F4923BBBC47742F804EBC895F084A36707D5B08D4BD7CDB5D96EA403AD45BD3890BF8DA48B7D0E7E7F93F54F67877460895700ABDE654BD3A06BA9A6739885BDE6FB4D0130EF5E906CA9EEB2DBB1A427FEF461D2E097E6807FAAE45139480B33289E302BE3013C8545B6AA4C4E92B039222A37312A10785FEB8B50E9B29E70F54F0203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:55:f1:c9:c5:9c:24:f0:e7:cb:15:ae:fc:b2:
8f:6a:ca:ef:ed:8c:9e:8e:8f:1a:65:f6:61:7b:0f:
bb:cc:9e:00:87:46:c0:96:c6:1b:1c:3a:ad:ac:27:
ea:d0:76:52:48:34:74:bc:a9:28:03:03:61:62:69:
70:51:37:77:c7:6f:16:26:47:20:65:63:f2:bd:f1:
5f:98:4c:53:07:73:86:01:45:c1:c0:01:55:4b:b3:
87:67:73:d5:d5:3f:05:46:9b:3f:b2:90:41:55:c9:
9c:44:cb:2d:58:99:c0:1d:06:84:10:cf:a5:ff:f7:
35:4c:f0:72:d2:f0:c8:78:f4:92:3b:bb:c4:77:42:
f8:04:eb:c8:95:f0:84:a3:67:07:d5:b0:8d:4b:d7:
cd:b5:d9:6e:a4:03:ad:45:bd:38:90:bf:8d:a4:8b:
7d:0e:7e:7f:93:f5:4f:67:87:74:60:89:57:00:ab:
de:65:4b:d3:a0:6b:a9:a6:73:98:85:bd:e6:fb:4d:
01:30:ef:5e:90:6c:a9:ee:b2:db:b1:a4:27:fe:f4:
61:d2:e0:97:e6:80:7f:aa:e4:51:39:48:0b:33:28:
9e:30:2b:e3:01:3c:85:45:b6:aa:4c:4e:92:b0:39:
22:2a:37:31:2a:10:78:5f:eb:8b:50:e9:b2:9e:70:
f5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A6:A2:CC:23:4E:07:E3:FA:E4:B2:6F:48:A1:76:73:04:B6:31:FA
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6238663a3a2f34382d3438203d3e20323035393233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:b8f::/48
Signature Algorithm: sha256WithRSAEncryption
12:bc:3a:01:e8:37:92:ff:79:e6:f1:8b:eb:4b:e2:a4:07:c2:
9a:67:78:7b:8e:61:b8:d5:5b:bd:d4:c1:b7:97:18:28:de:11:
3e:00:d7:02:9d:69:52:8c:c2:b5:50:53:91:f8:38:fc:95:35:
60:a9:ec:c7:66:c1:da:d4:a3:f1:6f:6b:fd:54:3f:1c:e5:ac:
2c:d3:31:8d:75:9d:9b:8e:00:23:6e:f9:36:1f:c8:51:b4:6b:
c5:82:ee:43:cb:dc:94:a9:7a:a8:39:3f:ba:08:da:ce:46:a1:
c1:60:e4:e1:c8:18:75:80:8e:d3:06:34:28:db:88:4e:fa:5e:
96:31:3d:b9:8f:96:1c:fe:1a:90:7e:56:46:f1:a4:54:94:25:
d7:ec:6e:69:75:fc:0a:69:70:54:52:fe:97:ff:d6:31:84:6b:
75:8d:b3:e7:4f:fe:cc:9a:3b:2e:a1:1d:5e:e3:89:63:48:9f:
3a:86:c9:82:91:8d:e9:04:93:f4:ac:4d:a7:de:ec:7b:6a:e3:
75:80:88:d1:eb:65:22:35:29:ff:d4:5f:27:38:06:32:55:c5:
ae:48:b3:f8:f3:0b:96:60:4a:b5:71:5c:15:26:c0:f5:3a:9e:
bb:95:c9:91:2c:86:89:22:f4:d1:de:c7:67:b3:95:50:c8:85:
65:92:10:07
-----BEGIN CERTIFICATE-----
MIIHADCCBeigAwIBAgIUKNwRXJqtP0Cb0B8EY0XSikRrlfwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDEwODM5OENBOTg4MzgyQzJBNTA5QkZEQjM5RTE0NkE3
NkNGOURFMDAeFw0yMjAyMjgwMDU1MDZaFw0yMzAyMjcwMTAwMDZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzA1NUYxQzlDNTlDMjRGMEU3
Q0IxNUFFRkNCMjhGNkFDQUVGRUQ4QzlFOEU4RjFBNjVGNjYxN0IwRkJCQ0M5RTAw
ODc0NkMwOTZDNjFCMUMzQUFEQUMyN0VBRDA3NjUyNDgzNDc0QkNBOTI4MDMwMzYx
NjI2OTcwNTEzNzc3Qzc2RjE2MjY0NzIwNjU2M0YyQkRGMTVGOTg0QzUzMDc3Mzg2
MDE0NUMxQzAwMTU1NEJCMzg3Njc3M0Q1RDUzRjA1NDY5QjNGQjI5MDQxNTVDOTlD
NDRDQjJENTg5OUMwMUQwNjg0MTBDRkE1RkZGNzM1NENGMDcyRDJGMEM4NzhGNDky
M0JCQkM0Nzc0MkY4MDRFQkM4OTVGMDg0QTM2NzA3RDVCMDhENEJEN0NEQjVEOTZF
QTQwM0FENDVCRDM4OTBCRjhEQTQ4QjdEMEU3RTdGOTNGNTRGNjc4Nzc0NjA4OTU3
MDBBQkRFNjU0QkQzQTA2QkE5QTY3Mzk4ODVCREU2RkI0RDAxMzBFRjVFOTA2Q0E5
RUVCMkRCQjFBNDI3RkVGNDYxRDJFMDk3RTY4MDdGQUFFNDUxMzk0ODBCMzMyODlF
MzAyQkUzMDEzQzg1NDVCNkFBNEM0RTkyQjAzOTIyMkEzNzMxMkExMDc4NUZFQjhC
NTBFOUIyOUU3MEY1NEYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwFXxycWcJPDnyxWu/LKPasrv7Yyejo8aZfZhew+7zJ4Ah0bAlsYb
HDqtrCfq0HZSSDR0vKkoAwNhYmlwUTd3x28WJkcgZWPyvfFfmExTB3OGAUXBwAFV
S7OHZ3PV1T8FRps/spBBVcmcRMstWJnAHQaEEM+l//c1TPBy0vDIePSSO7vEd0L4
BOvIlfCEo2cH1bCNS9fNtdlupAOtRb04kL+NpIt9Dn5/k/VPZ4d0YIlXAKveZUvT
oGuppnOYhb3m+00BMO9ekGyp7rLbsaQn/vRh0uCX5oB/quRROUgLMyieMCvjATyF
RbaqTE6SsDkiKjcxKhB4X+uLUOmynnD1TwIDAQABo4ICDjCCAgowHQYDVR0OBBYE
FEimoswjTgfj+uSyb0ihdnMEtjH6MB8GA1UdIwQYMBaAFAEIOYypiDgsKlCb/bOe
FGp2z53gMA4GA1UdDwEB/wQEAwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzov
L3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTE0RTc1MDAwMC8wLzAx
MDgzOThDQTk4ODM4MkMyQTUwOUJGREIzOUUxNDZBNzZDRjlERTAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9zYWt1eWEubmF0Lm1vZS9y
ZXBvL05BVE9DQS8wLzAxMDgzOThDQTk4ODM4MkMyQTUwOUJGREIzOUUxNDZBNzZD
RjlERTAuY2VyMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUHMAuGd3JzeW5j
Oi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxMTRFNzUwMDAwLzAv
MzIzNjMwMzIzYTY2NjU2NDYxM2E2MjM4NjYzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzMjMwMzUzOTMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAv7aC48wDQYJKoZIhvcNAQELBQAD
ggEBABK8OgHoN5L/eebxi+tL4qQHwppneHuOYbjVW73UwbeXGCjeET4A1wKdaVKM
wrVQU5H4OPyVNWCp7MdmwdrUo/Fva/1UPxzlrCzTMY11nZuOACNu+TYfyFG0a8WC
7kPL3JSpeqg5P7oI2s5GocFg5OHIGHWAjtMGNCjbiE76XpYxPbmPlhz+GpB+Vkbx
pFSUJdfsbml1/AppcFRS/pf/1jGEa3WNs+dP/syaOy6hHV7jiWNInzqGyYKRjekE
k/SsTafe7Htq43WAiNHrZSI1Kf/UXyc4BjJVxa5Is/jzC5ZgSrVxXBUmwPU6nruV
yZEshoki9NHex2ezlVDIhWWSEAc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org