Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6335303a3a2f34342d3438203d3e20323132343235.roa
File:                     323630323a666564613a6335303a3a2f34342d3438203d3e20323132343235.roa (raw, json)
Hash identifier:          7ODdowlwAdUOk5WnPEHDbV+izAJtTfNET9JJKGhs2Hg=
Subject key identifier:   E3:CC:49:41:41:85:A0:66:7A:FB:6D:95:19:1D:A6:49:D1:25:15:B9
Certificate issuer:       /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial:       74C6A669D06418E4624D90372C9C866211622FFB
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6335303a3a2f34342d3438203d3e20323132343235.roa
Signing time:             Mon 28 Feb 2022 01:00:05 +0000
ROA not before:           Mon 28 Feb 2022 00:55:05 +0000
ROA not after:            Mon 27 Feb 2023 01:00:05 +0000
asID:                     212425
IP address blocks:        2602:feda:c50::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c6:a6:69:d0:64:18:e4:62:4d:90:37:2c:9c:86:62:11:62:2f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
        Validity
            Not Before: Feb 28 00:55:05 2022 GMT
            Not After : Feb 27 01:00:05 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dc:35:0e:f3:70:19:52:4f:9a:67:34:1d:76:
                    a3:55:78:10:06:3e:1e:4a:de:6c:ec:de:c7:60:ec:
                    66:a4:70:ab:38:75:eb:de:87:cf:9f:07:0c:3a:60:
                    46:92:85:26:eb:dc:86:fb:3b:f2:82:9d:5a:4d:a9:
                    0b:04:6e:b9:22:f1:bc:9f:0c:49:1e:ce:8e:2c:f4:
                    4d:3b:4e:20:59:36:ce:85:36:b6:74:11:5d:33:b7:
                    4b:1c:e2:1c:bd:af:c0:b5:54:02:f9:99:bc:17:81:
                    25:25:b6:f6:56:e1:07:c7:38:78:16:61:6f:92:01:
                    68:50:c9:c4:31:40:e0:7e:5e:27:8d:4a:7b:7a:c9:
                    48:6d:e1:76:5b:49:6b:c3:3d:18:49:a9:05:1e:f7:
                    4f:f7:c7:2d:73:60:d7:00:23:a1:38:79:26:6d:5f:
                    49:74:08:51:8f:27:01:53:36:b7:f6:6d:86:ca:1f:
                    df:e5:78:53:6e:b7:58:a5:0e:20:72:86:75:75:c3:
                    5c:c8:13:68:6b:32:92:e8:68:c3:9e:c1:0d:2e:06:
                    b9:51:35:13:db:52:e4:31:9d:7b:52:e0:67:31:a4:
                    30:ce:65:5d:1a:9a:cd:8c:77:38:57:06:e2:cd:40:
                    36:47:df:5e:9a:52:88:1b:a9:ca:33:73:4f:8f:76:
                    0b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CC:49:41:41:85:A0:66:7A:FB:6D:95:19:1D:A6:49:D1:25:15:B9
            X509v3 Authority Key Identifier:
                keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6335303a3a2f34342d3438203d3e20323132343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:c50::/44

    Signature Algorithm: sha256WithRSAEncryption
         59:4d:94:0e:8f:ca:a5:6f:c6:40:a1:56:ea:ca:e4:84:d4:99:
         7a:2b:24:14:9c:66:ce:fc:ce:65:cd:3a:34:14:cd:05:1d:64:
         8e:a6:5f:ea:dc:67:0d:79:ba:c0:1d:1c:60:d3:f0:35:68:72:
         52:38:d0:6c:b6:6d:42:ef:31:34:1d:09:48:8f:71:4b:04:a6:
         73:8f:5d:33:1b:a9:90:93:47:e4:1f:12:19:b9:91:e8:e4:ee:
         4d:d1:08:ed:c6:29:9a:a3:f9:30:7f:09:10:42:f7:4e:a0:b2:
         92:e4:1b:98:68:6d:30:50:8f:ca:93:e0:8a:28:c0:23:ce:1a:
         65:76:7a:13:a7:08:07:9a:0d:67:9a:53:73:81:61:03:3e:33:
         16:b6:e9:d8:77:9f:b6:a0:71:54:b3:c4:49:20:10:e2:1f:6e:
         7c:31:9b:1f:b0:09:95:c6:2c:f3:bd:ee:15:b6:d4:7c:db:ff:
         27:5e:fb:74:8d:a7:df:86:ce:85:1f:8d:9c:e6:7d:2a:17:6d:
         1d:39:70:27:45:be:22:63:33:72:33:3c:71:8d:a6:bd:90:2d:
         1f:5f:73:3d:17:25:aa:d2:dd:7a:cb:52:bd:8c:ee:c3:8c:9d:
         fa:8d:80:eb:fd:74:3c:4e:69:1b:e6:a6:fd:07:87:36:2a:8c:
         a2:87:a8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org