Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6334303a3a2f34342d3438203d3e20323132353830.roa
File: 323630323a666564613a6334303a3a2f34342d3438203d3e20323132353830.roa (raw, json)
Hash identifier: 85BoLH6ZpNK+PpjixWoShEPXFElO6VY9YGw4509w4HU=
Subject key identifier: 49:03:4C:87:56:03:2C:1B:F1:FA:A6:BF:36:0C:00:A9:3B:A8:AC:EC
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 60FC272CDAFF5EE60D7714C9A31A87B0A2D74901
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6334303a3a2f34342d3438203d3e20323132353830.roa
Signing time: Mon 28 Feb 2022 01:00:05 +0000
ROA not before: Mon 28 Feb 2022 00:55:05 +0000
ROA not after: Mon 27 Feb 2023 01:00:05 +0000
asID: 212580
IP address blocks: 2602:feda:c40::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:fc:27:2c:da:ff:5e:e6:0d:77:14:c9:a3:1a:87:b0:a2:d7:49:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Feb 28 00:55:05 2022 GMT
Not After : Feb 27 01:00:05 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2a:7e:d7:f1:f6:3b:4b:93:99:76:43:f3:7f:
7d:8d:da:7a:f2:58:51:39:bf:fa:9c:a3:7f:f0:bd:
c1:d7:47:e6:93:a6:0f:b3:f6:d3:2a:c0:dd:87:2f:
cf:8d:6c:81:b4:6a:3c:39:01:38:4a:90:4a:eb:9b:
46:a7:bc:ba:ea:62:38:7a:b3:15:d9:89:b8:28:37:
94:23:8c:10:5a:cd:b0:b0:5c:b5:83:08:79:d3:62:
b9:de:16:f3:ea:54:6d:0e:34:e3:40:2a:57:c6:30:
cc:db:a6:f9:75:2c:82:e5:9d:49:0f:aa:9a:72:d3:
2d:24:49:32:65:7c:1f:98:ba:ac:6b:e0:e2:1c:69:
e8:4a:8d:d3:83:22:0c:59:d8:7c:ef:99:d1:43:8d:
6b:bd:3b:d7:51:b0:fb:7c:5e:b9:9f:af:82:f2:87:
69:35:12:db:99:3c:72:21:a2:19:a2:db:75:f4:13:
af:05:39:15:35:1a:3a:82:1c:40:8f:81:6b:96:f5:
42:5b:b0:2d:89:08:ee:c1:e2:39:3a:d4:cb:9f:39:
ba:6c:30:ee:f2:9b:66:58:22:cc:f5:ef:84:21:b3:
35:77:c0:f3:a9:6b:c7:14:5a:40:90:ca:db:7b:ef:
5b:7a:8b:8d:a8:ab:32:2f:66:eb:51:84:38:e1:57:
dd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:03:4C:87:56:03:2C:1B:F1:FA:A6:BF:36:0C:00:A9:3B:A8:AC:EC
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6334303a3a2f34342d3438203d3e20323132353830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:c40::/44
Signature Algorithm: sha256WithRSAEncryption
78:3f:8f:d9:85:56:17:29:bb:3e:21:c5:5c:cf:09:27:5e:d5:
a7:84:ea:f9:c9:dd:a3:1e:82:21:ce:fc:03:be:ec:d4:fe:ef:
15:64:4c:62:23:6e:1e:ff:50:30:1d:7a:c8:d1:00:51:5a:7e:
c1:ad:2d:b8:9d:fb:1b:57:f0:ff:9d:42:95:68:b1:ae:50:e4:
57:b5:51:0f:4d:d5:02:2c:af:ae:a8:0b:dc:d8:79:f7:27:fa:
46:a8:6a:9d:01:32:36:6e:6a:cb:9d:db:24:81:52:93:bc:e0:
92:de:8d:cf:2a:67:84:87:ff:65:c8:23:59:7a:24:39:5b:4f:
18:51:91:be:7c:e0:3d:e2:86:0e:02:59:bd:23:b4:66:ca:1b:
e9:0f:f2:3d:95:be:bd:bb:0d:3d:45:03:07:bb:67:ed:d7:f9:
ac:92:82:ca:81:25:ba:99:7c:04:cd:8a:43:38:a8:aa:a4:f5:
f4:9c:c8:98:50:6b:68:fa:ff:32:60:4f:55:f0:50:a5:b1:88:
47:eb:3f:44:e7:f3:c6:81:5d:e4:69:29:5c:52:9c:70:e9:1f:
ef:4d:d1:80:e7:6d:91:74:b3:c9:84:b4:bb:c8:ed:54:ee:2c:
c0:2e:b9:65:e4:9a:e4:a4:e9:e0:a7:ef:22:0e:71:5f:a4:cd:
42:7d:0c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:50 2024 by rpki-client on console-ams.rpki-client.org