Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6265303a3a2f34342d3438203d3e203338313733.roa
File:                     323630323a666564613a6265303a3a2f34342d3438203d3e203338313733.roa (raw, json)
Hash identifier:          d/cDlW3BQ0Me0Ge4fcVeVL1CEbi+VaD3k2Vdr/tMRsE=
Subject key identifier:   26:27:A0:5A:D7:62:22:C8:A8:A9:46:C6:E7:76:93:95:91:B4:E8:E9
Certificate issuer:       /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial:       08ED68AFDFE4F38BADAA3E0DA606A62413F91EED
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6265303a3a2f34342d3438203d3e203338313733.roa
Signing time:             Mon 28 Feb 2022 01:00:06 +0000
ROA not before:           Mon 28 Feb 2022 00:55:06 +0000
ROA not after:            Mon 27 Feb 2023 01:00:06 +0000
asID:                     38173
IP address blocks:        2602:feda:be0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ed:68:af:df:e4:f3:8b:ad:aa:3e:0d:a6:06:a6:24:13:f9:1e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
        Validity
            Not Before: Feb 28 00:55:06 2022 GMT
            Not After : Feb 27 01:00:06 2023 GMT
        Subject: CN=3082010A0282010100C95FB43C0788BA0DFF7BC6DD0A35B2B068459D4C6D18129F51116D7D67E44CFB276A0CA16BB66EB9AD1BA489DCB7BA16A4E1B1C5224A445534250978AD8E3E462D8EA71EC4A19A8A12FB1FBDAA0C9E451C0B12FE0CA98D854AE2874C1DB721ED1BC7769E3BAA196D25A7FB146EBEAE0CA8673917AE3F2AFA6D12A15EA5C58C3A2BC4D84752554EFD352C148B9A6028F25F5E84CE338671AA894ED47E2256AA48EEC85B4F9206E8E0BA1B842F00621DFA80AD336CB3FBBE4490496F70D1E03CB8F2BC6E00EEFAA66E8AEE74D6EB4EA4B4F0760AFAB5D9A2A7BC05B1029CE35AE34CB12C2AAA6C9226A14D6D1C0BCD1DEADBC95F8BA92A31C331DEE7428160F9190203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5f:b4:3c:07:88:ba:0d:ff:7b:c6:dd:0a:35:
                    b2:b0:68:45:9d:4c:6d:18:12:9f:51:11:6d:7d:67:
                    e4:4c:fb:27:6a:0c:a1:6b:b6:6e:b9:ad:1b:a4:89:
                    dc:b7:ba:16:a4:e1:b1:c5:22:4a:44:55:34:25:09:
                    78:ad:8e:3e:46:2d:8e:a7:1e:c4:a1:9a:8a:12:fb:
                    1f:bd:aa:0c:9e:45:1c:0b:12:fe:0c:a9:8d:85:4a:
                    e2:87:4c:1d:b7:21:ed:1b:c7:76:9e:3b:aa:19:6d:
                    25:a7:fb:14:6e:be:ae:0c:a8:67:39:17:ae:3f:2a:
                    fa:6d:12:a1:5e:a5:c5:8c:3a:2b:c4:d8:47:52:55:
                    4e:fd:35:2c:14:8b:9a:60:28:f2:5f:5e:84:ce:33:
                    86:71:aa:89:4e:d4:7e:22:56:aa:48:ee:c8:5b:4f:
                    92:06:e8:e0:ba:1b:84:2f:00:62:1d:fa:80:ad:33:
                    6c:b3:fb:be:44:90:49:6f:70:d1:e0:3c:b8:f2:bc:
                    6e:00:ee:fa:a6:6e:8a:ee:74:d6:eb:4e:a4:b4:f0:
                    76:0a:fa:b5:d9:a2:a7:bc:05:b1:02:9c:e3:5a:e3:
                    4c:b1:2c:2a:aa:6c:92:26:a1:4d:6d:1c:0b:cd:1d:
                    ea:db:c9:5f:8b:a9:2a:31:c3:31:de:e7:42:81:60:
                    f9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:27:A0:5A:D7:62:22:C8:A8:A9:46:C6:E7:76:93:95:91:B4:E8:E9
            X509v3 Authority Key Identifier:
                keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6265303a3a2f34342d3438203d3e203338313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:be0::/44

    Signature Algorithm: sha256WithRSAEncryption
         58:d5:90:4b:6c:cd:99:ba:62:e4:dd:d4:3c:93:f3:f0:8a:0a:
         e3:4a:00:08:0d:2c:70:3c:c5:dd:76:85:82:3c:81:70:3a:7e:
         e5:d5:7f:6c:fb:8f:9f:d2:d0:da:3d:e9:1e:5a:63:d4:c1:f7:
         f9:ae:df:a7:ca:69:22:b2:d2:98:12:45:9d:5a:97:3d:fc:9c:
         11:6f:9e:d1:99:fd:1f:1a:76:c2:0c:99:14:15:db:72:1a:8c:
         4c:93:74:58:ba:be:78:ec:5a:ff:19:ac:c5:56:30:69:7a:cc:
         30:67:f1:4b:d5:d7:47:c2:b2:26:59:57:a5:cb:75:c8:57:0b:
         ca:54:4a:ba:d2:90:cb:e0:bb:dd:12:a5:d3:51:49:06:55:1d:
         97:b3:0b:b5:0c:e6:53:e0:69:c8:77:ef:26:48:92:f6:9d:99:
         2c:93:75:cc:d4:90:05:69:42:fe:90:e9:ca:db:4c:65:f9:6f:
         37:95:49:0c:45:57:01:4c:06:09:a4:83:01:4a:47:1f:86:f6:
         1c:5f:65:9c:20:5c:fb:2f:d0:53:f5:bc:d1:72:d2:04:d2:9f:
         92:ff:9e:85:b9:87:80:3e:98:a5:44:2e:a5:1d:2b:e3:bb:45:
         7c:e0:93:4b:a9:f7:7e:92:90:30:d4:4d:d8:9b:2a:be:89:2d:
         d1:77:31:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org