Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6335303a3a2f34342d3438203d3e20323132323739.roa
File: 323630323a666564613a6335303a3a2f34342d3438203d3e20323132323739.roa (raw, json)
Hash identifier: 6zEeFKSQGRyZqKAZahfv0rnBgcNsL8VynCt45ON+zlg=
Subject key identifier: 6B:21:5D:E9:90:61:90:55:32:AF:19:80:78:9F:DE:3B:5E:8F:F6:2E
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 44EF69A7FC88CB5FE03CD00BE4770E8A75CFEF67
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6335303a3a2f34342d3438203d3e20323132323739.roa
Signing time: Mon 28 Feb 2022 01:00:09 +0000
ROA not before: Mon 28 Feb 2022 00:55:09 +0000
ROA not after: Mon 27 Feb 2023 01:00:09 +0000
asID: 212279
IP address blocks: 2602:feda:c50::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:ef:69:a7:fc:88:cb:5f:e0:3c:d0:0b:e4:77:0e:8a:75:cf:ef:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Feb 28 00:55:09 2022 GMT
Not After : Feb 27 01:00:09 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b5:1b:1f:f3:0b:93:d8:ed:5d:3e:a3:30:e8:
c3:a8:d5:16:9e:bf:e7:73:55:5f:e3:f9:74:61:29:
d3:43:ed:11:ce:35:d1:59:dd:4b:f4:3a:7e:9e:2e:
53:28:0b:75:66:37:37:23:59:07:60:c2:50:ed:e2:
e4:54:0f:ea:6f:c9:64:2f:6b:e0:59:09:84:a4:57:
da:32:d4:df:0d:88:b9:c4:d2:a2:f0:b0:fa:12:2d:
08:c2:46:9f:07:ec:8c:be:b3:73:20:79:a9:2d:54:
d6:50:bd:57:35:e6:94:c1:2a:91:8b:b2:27:20:9b:
ff:63:7a:be:c2:6e:e9:f3:f6:90:3d:88:73:0d:00:
8f:e7:ae:3d:17:3c:e8:9a:e4:e0:76:76:b3:07:80:
b1:4d:f3:49:c3:10:ad:f3:04:e5:8e:95:d3:cd:71:
fa:b5:7e:a6:be:f4:01:c6:ed:67:06:ab:6e:7f:9d:
87:aa:d9:47:a4:19:71:e5:b7:8a:33:56:a5:a3:d2:
1a:c2:5a:1d:4f:0a:fd:2b:16:b5:69:71:12:a1:10:
94:d0:28:5c:6e:03:e1:ef:03:3d:f5:03:3d:ee:27:
a2:a3:ac:e5:7a:c0:4d:d6:66:74:16:d6:1d:36:3c:
7e:df:c3:27:e0:f3:cd:63:e8:c2:f5:4b:a2:0a:a0:
44:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:21:5D:E9:90:61:90:55:32:AF:19:80:78:9F:DE:3B:5E:8F:F6:2E
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6335303a3a2f34342d3438203d3e20323132323739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:c50::/44
Signature Algorithm: sha256WithRSAEncryption
b8:0f:63:e2:80:09:9b:0d:1e:b4:7a:82:20:11:bf:3b:28:7a:
3b:56:82:ca:e2:d7:11:81:44:39:25:ad:a7:5e:4b:c5:18:1d:
22:16:40:85:22:1f:ff:76:9c:96:d1:40:68:3d:a6:f9:d3:24:
d8:3d:83:1f:25:9a:c5:05:8d:84:21:8e:27:a9:96:59:a0:6e:
6c:45:4c:6a:2f:1a:4a:06:53:f4:04:aa:0a:77:32:90:7d:0e:
7f:6f:47:48:c6:f9:2c:d4:f2:28:1f:32:2c:70:c4:9e:3e:cb:
09:b1:50:f1:59:41:35:dc:b8:55:1b:9d:93:d5:9b:02:a9:e2:
29:a3:88:5e:bf:52:f3:8e:d3:2d:57:22:83:f3:d2:b3:a5:03:
cf:56:16:7e:58:8d:1c:f4:89:7a:f4:95:51:a6:0f:9c:b9:ef:
5d:a2:38:5a:fa:11:f9:2a:30:ce:54:ac:f1:ab:6c:63:d8:67:
a8:e5:a7:16:e7:c9:a2:a9:4b:21:4b:45:3f:60:0b:ea:78:7e:
f6:af:46:98:6a:38:d7:01:db:15:e3:74:70:56:80:c3:59:34:
3c:e5:8e:e2:12:e9:ee:41:7d:5d:37:72:6c:f1:90:d4:76:e8:
d8:88:f9:a1:5c:bf:19:f5:b5:f6:1b:79:8c:6d:d3:6b:79:40:
a6:3a:b6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org