Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6239303a3a2f34342d3438203d3e20323132393935.roa
File: 323630323a666564613a6239303a3a2f34342d3438203d3e20323132393935.roa (raw, json)
Hash identifier: Sp4X4iCg2Ge+Gf1/+Rt6VmqNAowWltp+0cTd4/AK4xQ=
Subject key identifier: 31:0A:83:D2:F2:DD:62:9F:D5:CC:A4:54:90:DC:50:EA:50:C4:5E:C7
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 29AEA8952539CF3D8EF6EC9BEA652797FC73C7EA
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6239303a3a2f34342d3438203d3e20323132393935.roa
Signing time: Mon 28 Feb 2022 01:00:02 +0000
ROA not before: Mon 28 Feb 2022 00:55:02 +0000
ROA not after: Mon 27 Feb 2023 01:00:02 +0000
asID: 212995
IP address blocks: 2602:feda:b90::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:ae:a8:95:25:39:cf:3d:8e:f6:ec:9b:ea:65:27:97:fc:73:c7:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Feb 28 00:55:02 2022 GMT
Not After : Feb 27 01:00:02 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bd:7b:b8:1b:82:a1:aa:14:b7:1a:97:d1:30:
f5:04:7c:d9:23:b0:56:0e:e1:d5:f0:e3:1a:7d:9c:
4f:5b:43:8c:42:22:73:f6:83:35:cd:6a:11:8c:a0:
57:0d:f7:a2:b5:87:62:54:55:34:4b:6f:55:3c:bf:
14:77:4f:db:4b:30:e5:f4:ed:aa:86:7a:88:2c:3b:
d3:b6:46:f3:ef:b4:f0:c5:37:50:f0:40:2a:e0:f3:
24:0c:0d:f7:7f:30:f2:c9:24:4a:89:c1:d7:a4:dc:
47:42:10:fb:11:f6:1d:2a:35:ec:ad:83:7f:06:4b:
9c:6d:b9:b1:07:02:ec:d2:1e:5a:2c:94:b9:10:f8:
9f:74:26:95:3c:e7:1c:4c:13:1e:ec:31:88:e8:e0:
85:e5:a1:5c:e7:f7:41:17:f0:9c:d4:da:1b:f4:05:
af:6a:4c:00:96:36:4b:c2:40:e6:32:81:9d:b2:5a:
22:cb:5b:e7:f2:50:7f:69:08:e3:77:52:69:fc:68:
9c:bf:7d:bf:38:83:bf:0b:9e:6c:c3:26:d1:de:dc:
43:69:7b:2c:b3:8e:ca:c1:49:27:9c:20:f6:ac:20:
c5:8e:e4:6d:19:2a:95:54:67:4f:3b:67:4c:56:3d:
8b:0b:7b:ba:66:39:fc:59:de:7a:63:f7:38:89:c7:
5e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0A:83:D2:F2:DD:62:9F:D5:CC:A4:54:90:DC:50:EA:50:C4:5E:C7
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6239303a3a2f34342d3438203d3e20323132393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:b90::/44
Signature Algorithm: sha256WithRSAEncryption
55:de:98:98:b2:de:85:0c:a2:05:92:af:a3:e4:86:53:03:cd:
40:28:89:0b:23:a9:af:50:ac:33:ce:35:53:88:22:ef:47:2c:
09:db:63:ad:70:84:5e:91:e7:11:02:b9:b9:5f:ff:27:21:a4:
7c:76:b1:49:6a:e6:d3:56:e1:80:6b:c4:11:2d:7c:4b:75:82:
fc:fa:7a:ca:79:5f:4e:45:61:d5:50:b3:b4:3e:ab:05:12:c4:
6e:1d:97:2d:a5:ca:e4:fc:76:0a:95:ff:2d:d4:ec:08:35:e8:
f3:ad:6a:32:1f:22:ea:83:ca:1d:47:78:43:bc:85:45:1a:6e:
4c:1b:b9:da:cd:de:cc:bf:05:d1:83:58:36:49:b2:93:6d:23:
a4:76:2f:da:3d:a1:c5:df:f2:21:5c:8f:67:cf:9a:f7:d0:7d:
b6:f0:2b:7c:bb:0f:26:a0:c0:37:4a:0a:7b:2d:3c:72:e8:a5:
3f:0e:6a:75:5b:69:b3:1c:76:37:6a:50:4e:76:12:af:e5:8d:
21:98:15:a2:35:c2:67:d2:35:88:53:23:2d:dd:98:7c:bd:9f:
51:ef:49:ff:ee:7f:46:5b:ab:e0:71:81:c7:9f:62:d7:b1:14:
e4:3e:6a:76:9a:d4:5b:44:7d:ea:b9:e6:ed:f1:f6:d9:ce:1b:
df:7c:0b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:50 2024 by rpki-client on console-ams.rpki-client.org