Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6336303a3a2f34342d3434203d3e20333939303135.roa
File: 323630323a666564613a6336303a3a2f34342d3434203d3e20333939303135.roa (raw, json)
Hash identifier: RoFbvQedhrULtuhh5tY/s/aSsouOSe5H7hHq058o6TQ=
Subject key identifier: CB:03:CD:57:26:AB:EC:C1:6C:2E:0A:00:0E:F2:5C:B5:3A:66:FA:8B
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 39FA4CAFF70F60BC1C12565EC2E2C3235D1E92EC
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6336303a3a2f34342d3434203d3e20333939303135.roa
Signing time: Mon 28 Feb 2022 01:00:02 +0000
ROA not before: Mon 28 Feb 2022 00:55:02 +0000
ROA not after: Mon 27 Feb 2023 01:00:02 +0000
asID: 399015
IP address blocks: 2602:feda:c60::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:fa:4c:af:f7:0f:60:bc:1c:12:56:5e:c2:e2:c3:23:5d:1e:92:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Feb 28 00:55:02 2022 GMT
Not After : Feb 27 01:00:02 2023 GMT
Subject: CN=3082010A0282010100B7FE75C1656957BDC740B58BFF83891D8828D2C9B004AE4C882D1564214AAE53FA9290A2A7479C5CD67132A314028992BFCA0084E84B7563B7CB94CA8D3FD14D5CEDC06468484F5A48A06E608BEB0823FF64D259A094040B1456F58C9CF1DF0C8B322027F806D9AD924ED653BD27677093301D4EB6C1AD64BFE91A01F1D0199F614A73C793F69A03547AF72DB4A0EE8CECF241A4414CA9D65429D3F2EE61FE12D936120386949870527267D3E357EBB55AE5C563336E27CFC22AD6AF17D2A7702E3454A1A9645360F2EF7A5CCC43D095DC9DF4CF66199F4E33DC94218EF158567A9D6413A25B35A8F3D2C1A8F27145F5DCA7E7AF1AE83AF4EFF4A81ABC58A70D0203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fe:75:c1:65:69:57:bd:c7:40:b5:8b:ff:83:
89:1d:88:28:d2:c9:b0:04:ae:4c:88:2d:15:64:21:
4a:ae:53:fa:92:90:a2:a7:47:9c:5c:d6:71:32:a3:
14:02:89:92:bf:ca:00:84:e8:4b:75:63:b7:cb:94:
ca:8d:3f:d1:4d:5c:ed:c0:64:68:48:4f:5a:48:a0:
6e:60:8b:eb:08:23:ff:64:d2:59:a0:94:04:0b:14:
56:f5:8c:9c:f1:df:0c:8b:32:20:27:f8:06:d9:ad:
92:4e:d6:53:bd:27:67:70:93:30:1d:4e:b6:c1:ad:
64:bf:e9:1a:01:f1:d0:19:9f:61:4a:73:c7:93:f6:
9a:03:54:7a:f7:2d:b4:a0:ee:8c:ec:f2:41:a4:41:
4c:a9:d6:54:29:d3:f2:ee:61:fe:12:d9:36:12:03:
86:94:98:70:52:72:67:d3:e3:57:eb:b5:5a:e5:c5:
63:33:6e:27:cf:c2:2a:d6:af:17:d2:a7:70:2e:34:
54:a1:a9:64:53:60:f2:ef:7a:5c:cc:43:d0:95:dc:
9d:f4:cf:66:19:9f:4e:33:dc:94:21:8e:f1:58:56:
7a:9d:64:13:a2:5b:35:a8:f3:d2:c1:a8:f2:71:45:
f5:dc:a7:e7:af:1a:e8:3a:f4:ef:f4:a8:1a:bc:58:
a7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:03:CD:57:26:AB:EC:C1:6C:2E:0A:00:0E:F2:5C:B5:3A:66:FA:8B
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6336303a3a2f34342d3434203d3e20333939303135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:c60::/44
Signature Algorithm: sha256WithRSAEncryption
29:0f:e4:2e:e2:58:4a:e0:ae:38:99:bb:e5:f0:64:64:5a:92:
28:bf:a5:09:3e:ef:01:63:93:d7:b6:22:ce:f0:c9:41:8a:aa:
fd:a7:0f:3b:35:fd:6f:bf:66:fe:8d:68:3c:4b:33:1d:e1:fa:
08:07:35:34:81:d1:8b:1e:76:95:00:48:fa:7d:c3:21:b5:d0:
31:d2:e3:42:9c:2e:ac:13:51:ee:3b:0b:eb:81:59:4d:2c:cb:
8d:3a:78:d9:e5:ac:b9:ba:5d:8d:b0:79:94:e8:d8:47:8a:67:
f3:17:7e:b5:3a:9a:d8:22:c4:43:92:c5:07:a4:1d:1a:0d:bc:
b0:4a:7d:45:fd:85:b7:e4:87:96:75:47:6e:53:40:a1:e9:9f:
0f:bf:41:5b:ae:78:22:95:bc:e3:f5:ba:ab:e5:f1:ae:bb:7d:
33:2e:a1:de:6b:83:a3:cc:ff:09:d7:f2:21:42:53:9a:af:58:
b8:d5:ae:86:ef:10:c9:c9:02:57:6a:55:f4:48:38:dc:f9:1b:
bf:08:93:1f:c3:78:a5:fa:3d:68:73:29:78:80:72:0d:fe:49:
e0:0d:0d:c0:93:18:b0:7e:8a:e4:bd:b2:e5:0e:1c:86:3c:84:
9d:10:de:f8:78:f6:cc:b7:ca:74:1e:5a:34:6d:73:03:8e:d3:
88:3b:bc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:50 2024 by rpki-client on console-ams.rpki-client.org