Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6265303a3a2f34342d3438203d3e20313430393336.roa
File: 323630323a666564613a6265303a3a2f34342d3438203d3e20313430393336.roa (raw, json)
Hash identifier: Z4ECX1sFOXNoZMRUXkmg0pIfFzJe9ATy8qm2wjuICnI=
Subject key identifier: 2D:CA:53:0D:C6:C3:13:7F:FD:02:A7:1B:00:C2:64:56:F5:99:DC:67
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 2C8298829E39A9FCFFE15B2AADA4DD1FDFDA51D3
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6265303a3a2f34342d3438203d3e20313430393336.roa
Signing time: Mon 28 Feb 2022 01:00:08 +0000
ROA not before: Mon 28 Feb 2022 00:55:08 +0000
ROA not after: Mon 27 Feb 2023 01:00:08 +0000
asID: 140936
IP address blocks: 2602:feda:be0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:82:98:82:9e:39:a9:fc:ff:e1:5b:2a:ad:a4:dd:1f:df:da:51:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Feb 28 00:55:08 2022 GMT
Not After : Feb 27 01:00:08 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0e:85:2e:9c:7c:c7:73:92:95:e4:ce:d3:5b:
45:00:05:6a:81:01:3c:50:4e:e2:3f:34:7d:2f:d3:
f7:3a:48:ea:db:28:2d:d9:88:b3:f3:a2:39:c9:3e:
f5:17:07:aa:91:11:64:09:bf:9b:0a:5f:66:bc:b6:
fe:c1:76:f3:33:84:6e:9e:ef:6e:a6:a6:be:e5:9e:
06:56:c3:b3:08:6f:6a:11:2e:1d:2c:0b:d8:32:7c:
4c:93:a6:e1:7b:8d:13:c2:5f:3d:cc:1c:77:46:bb:
a5:17:87:d2:28:dc:b9:b2:7e:31:4c:df:f8:84:01:
7a:d1:6f:fc:c4:ab:ba:e8:00:f0:54:10:2b:d7:08:
8c:65:24:32:b3:db:11:78:46:b8:60:b3:d9:ad:6f:
6b:0a:0f:70:99:1e:1d:a8:d7:09:a0:30:7b:76:2e:
f0:6e:34:7f:2c:fe:fe:4d:69:4f:26:f3:5e:a5:1c:
63:ab:f6:f3:79:4f:1c:17:87:e9:34:88:11:8c:70:
65:4f:8d:8b:cc:d9:7e:fa:1a:0b:a0:47:c7:43:68:
06:cd:c6:9e:19:8f:c8:03:29:94:79:ce:e0:e2:35:
10:77:96:e7:a7:b1:4a:ee:e0:5d:fe:56:8e:c7:86:
52:7c:8e:c9:cf:c9:25:c7:5e:51:72:cf:9c:47:53:
26:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CA:53:0D:C6:C3:13:7F:FD:02:A7:1B:00:C2:64:56:F5:99:DC:67
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6265303a3a2f34342d3438203d3e20313430393336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:be0::/44
Signature Algorithm: sha256WithRSAEncryption
57:73:0c:34:df:cc:ed:20:66:6e:85:1b:7e:91:9d:6c:ab:f6:
45:30:95:bf:4c:47:73:73:0a:b6:97:41:a2:43:93:30:b7:3c:
8a:40:cd:dc:f2:f9:bf:d4:84:bc:d9:d6:cb:ee:d5:ec:1c:22:
b5:a4:57:3f:7a:c8:3b:f1:45:54:53:37:41:f0:3a:e1:7a:46:
41:a0:54:8f:b2:b8:60:4b:67:e5:e8:e5:81:66:c1:2c:42:07:
37:15:50:5d:57:87:f5:97:33:07:22:85:4d:ef:35:90:f9:37:
03:2d:6f:e1:26:20:d6:28:76:31:d0:be:c8:55:74:8c:d8:e5:
11:a0:d6:3f:db:89:06:e9:81:03:ea:e4:bc:31:29:5c:c8:38:
c3:e6:6e:4b:4e:b3:6b:58:20:66:fa:35:da:5c:44:d0:a7:ce:
96:63:bc:dd:b1:0e:12:e1:1c:80:78:83:dd:08:1c:94:0c:3e:
5a:20:e1:5c:eb:e1:e5:9b:ca:22:75:67:df:d4:d4:77:ac:7b:
dc:c5:33:7a:9d:fc:06:1a:4d:b8:58:03:a9:b5:49:6d:33:ff:
a2:2f:25:59:22:5f:4f:10:68:e3:2e:a1:7e:65:7f:9f:17:58:
c8:dd:ae:5d:f4:da:43:3f:2e:c7:1f:39:33:d3:29:05:d9:4e:
02:a3:2a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org