Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6266303a3a2f34342d3438203d3e20313339333238.roa
File: 323630323a666564613a6266303a3a2f34342d3438203d3e20313339333238.roa (raw, json)
Hash identifier: D4wuA8UEFfn/AkARAFC2GFaZ+bS8R580PlRRWBqEWoc=
Subject key identifier: 3E:1B:33:6C:7B:4F:53:4E:74:08:73:56:5B:25:5B:C3:EC:15:98:50
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 61659D5F94F82991AEA01706E26568DBB42DC953
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6266303a3a2f34342d3438203d3e20313339333238.roa
Signing time: Mon 28 Feb 2022 01:00:11 +0000
ROA not before: Mon 28 Feb 2022 00:55:11 +0000
ROA not after: Mon 27 Feb 2023 01:00:11 +0000
asID: 139328
IP address blocks: 2602:feda:bf0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:65:9d:5f:94:f8:29:91:ae:a0:17:06:e2:65:68:db:b4:2d:c9:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Feb 28 00:55:11 2022 GMT
Not After : Feb 27 01:00:11 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:df:50:5c:2a:35:cf:fb:64:18:c9:19:45:eb:
a9:c7:d9:bb:f0:7d:b6:1f:98:2c:42:9e:61:fe:fc:
f6:60:ee:47:56:d1:9c:e7:f5:5c:83:8b:d9:73:2e:
a3:2c:d8:ee:83:80:63:31:fe:85:cf:12:d5:9b:ea:
a1:1d:fb:cf:d1:36:5e:75:a8:6f:e8:18:b4:7f:12:
92:ae:6c:4a:6f:8a:1e:ab:3f:4a:fa:c7:b4:1f:bc:
67:28:9d:f7:aa:ce:25:2d:67:3a:24:e2:f7:51:5b:
fa:22:bf:a8:e4:1e:6f:da:1c:1b:c5:8d:ae:1d:d5:
be:3e:0f:d0:da:a3:32:53:9c:49:ec:98:ef:31:bf:
e7:b5:05:30:c7:03:fc:54:e3:8a:40:71:e8:db:20:
d1:33:1d:d9:7b:8b:66:34:79:dc:f8:7e:6a:97:ac:
b0:a0:78:24:7b:02:04:d5:5a:c9:24:0e:0a:8f:73:
00:a1:43:12:f3:66:77:8c:1e:67:0f:4e:ed:0d:78:
ee:36:24:f4:77:f7:25:67:96:9a:9c:de:bd:5e:6f:
c9:e2:ea:6f:1b:74:6c:19:ff:31:fc:12:44:48:3b:
a1:87:4a:8e:6a:70:92:c0:9c:89:73:29:38:4a:4b:
dc:cc:48:90:d3:61:a6:29:71:5b:36:99:fe:82:97:
0d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1B:33:6C:7B:4F:53:4E:74:08:73:56:5B:25:5B:C3:EC:15:98:50
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6266303a3a2f34342d3438203d3e20313339333238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:bf0::/44
Signature Algorithm: sha256WithRSAEncryption
16:d6:91:ae:66:48:00:76:86:2b:ec:fd:d0:c3:11:df:44:bd:
20:8b:6c:45:02:74:60:39:5e:a0:18:86:cb:f5:ac:4e:b7:20:
13:12:c9:d8:3e:45:36:f5:98:ef:b0:b6:6d:58:5a:15:31:40:
16:8f:f9:f6:f3:1b:ea:37:29:42:22:f5:61:b9:d8:37:8c:8d:
f3:93:9c:07:22:d2:46:52:87:5b:e7:a1:aa:bb:de:5b:3e:1d:
f6:4b:eb:01:ee:72:25:bc:26:56:57:86:fb:ec:03:99:43:f3:
cb:bc:ce:e6:d3:da:31:be:bb:30:b0:a5:89:73:96:a7:dd:b9:
07:bf:e8:6b:35:33:9b:84:45:00:37:34:ea:54:98:4c:a8:67:
b1:e4:a6:22:eb:9d:ad:cf:c6:66:db:88:05:da:65:bd:5f:3c:
69:eb:6e:27:e3:d8:5b:29:08:96:56:16:8b:28:0a:9f:01:84:
20:e8:84:17:39:b0:01:a0:7a:d4:77:2b:95:15:81:d1:2f:6e:
05:24:b3:62:e3:4d:ef:aa:a1:c0:30:45:5b:87:2a:ca:4a:65:
f4:cb:c3:2a:c9:ce:11:94:26:23:68:2d:ff:1a:8e:03:0f:9b:
e6:15:41:44:dc:de:bf:bb:99:f0:16:7b:0f:20:b9:54:f3:77:
32:a8:4f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org