Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6263303a3a2f34342d3438203d3e20323039323937.roa
File: 323630323a666564613a6263303a3a2f34342d3438203d3e20323039323937.roa (raw, json)
Hash identifier: kbN3WEV9xzdPeAK8tdOAMYzpo3RcOOQs1NNAWW5LBM0=
Subject key identifier: B6:8C:6A:75:A2:16:2F:26:EC:36:95:30:22:D4:5C:26:02:63:95:B5
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 0920BA035F6946B79993C16CD2180EF13E9A9E5F
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6263303a3a2f34342d3438203d3e20323039323937.roa
Signing time: Mon 28 Feb 2022 01:00:05 +0000
ROA not before: Mon 28 Feb 2022 00:55:05 +0000
ROA not after: Mon 27 Feb 2023 01:00:05 +0000
asID: 209297
IP address blocks: 2602:feda:bc0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:20:ba:03:5f:69:46:b7:99:93:c1:6c:d2:18:0e:f1:3e:9a:9e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Feb 28 00:55:05 2022 GMT
Not After : Feb 27 01:00:05 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:09:aa:1e:d6:29:0f:c8:0a:1c:3a:f8:02:29:
4c:64:78:ff:e0:db:c6:b9:c3:54:a9:4e:2d:18:37:
59:8d:44:cd:69:90:26:8d:3a:d3:57:21:c3:24:45:
c4:bf:23:c3:50:fd:d3:47:89:14:86:57:7c:98:73:
37:b3:28:35:f9:fb:b9:56:af:29:3b:f4:dc:0f:dd:
1f:13:a0:ae:81:07:ff:a2:4b:bc:65:9b:50:5a:61:
bc:13:e3:44:e7:ba:e4:b2:9b:58:fc:b4:f4:6c:83:
79:d3:14:3f:b2:f8:2e:52:f6:1a:50:fd:3d:b8:d9:
61:91:d6:20:6b:46:41:0d:e8:02:55:14:7c:21:7d:
59:0f:41:7b:f3:1c:dd:bb:0d:b6:72:17:81:4f:e0:
6c:fa:a8:8b:37:a2:51:4f:a6:81:6d:c5:96:fb:99:
67:f0:bc:b1:b3:44:88:d1:36:0a:96:48:8f:83:fc:
e9:c6:5d:4e:b5:2b:73:cc:a5:00:f7:b7:4f:b5:40:
30:37:d4:25:32:ea:2d:57:63:2b:43:56:d8:17:48:
24:7c:a8:4b:ba:89:9c:8d:f6:6d:c5:7e:c0:b9:7b:
65:08:c8:cc:40:ba:84:da:dd:98:3d:c0:d2:d1:42:
e1:42:5a:4f:1f:d1:85:ad:58:39:b4:fd:39:1e:04:
ad:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8C:6A:75:A2:16:2F:26:EC:36:95:30:22:D4:5C:26:02:63:95:B5
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6263303a3a2f34342d3438203d3e20323039323937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:bc0::/44
Signature Algorithm: sha256WithRSAEncryption
63:38:81:4a:bb:f9:81:45:c9:23:9c:7f:df:67:8a:22:f0:d5:
83:be:82:97:da:ec:f8:42:49:7b:02:b7:f5:53:1f:63:7b:47:
1b:18:09:d4:81:de:e2:64:a2:0b:7f:8c:8c:83:09:a4:52:df:
0f:73:d8:68:01:f9:a5:5f:cd:1a:99:b0:58:02:56:62:f8:4d:
75:8d:7d:73:39:de:83:95:b2:7b:21:28:31:e2:69:df:82:56:
fb:a0:09:e8:7e:f0:60:e2:f6:74:19:f3:e7:7f:db:38:7b:94:
86:bf:d9:28:57:d7:b8:44:70:39:86:d8:30:a4:e8:28:68:29:
5c:22:21:59:65:b1:10:02:bf:57:a6:56:fc:9a:45:6c:ce:3c:
3b:c3:f5:2d:27:88:53:2a:c0:6b:3f:e3:92:a4:a7:06:23:80:
f6:02:c1:92:c6:2f:57:26:09:55:a3:99:0b:e1:06:c2:91:30:
51:eb:60:b6:65:7e:b4:60:66:06:1e:14:a4:5d:84:7c:74:24:
55:d6:3b:3c:13:4e:ce:fc:83:a9:49:d7:0a:5c:be:58:c7:e9:
ae:4f:87:53:8a:e0:41:b4:7b:f8:87:f6:89:af:5d:50:61:d8:
7d:54:62:7f:99:cf:78:56:ac:31:34:c1:1b:01:3c:4a:72:85:
6f:21:e9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org