Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6337303a3a2f34342d3434203d3e20323132333537.roa
File: 323630323a666564613a6337303a3a2f34342d3434203d3e20323132333537.roa (raw, json)
Hash identifier: +Nm3ezK0Ws7lVs8ZRDdM+PdIjPPA+CuyLDUwQCkdqX8=
Subject key identifier: 97:EE:35:D2:8E:4B:C5:4E:85:BB:D6:5E:15:75:5C:25:52:76:D8:8B
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 1DA90F8A3F92BF2FC615137B0186181EBC297D93
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6337303a3a2f34342d3434203d3e20323132333537.roa
Signing time: Sat 30 Oct 2021 19:56:28 +0000
ROA not before: Sat 30 Oct 2021 19:51:28 +0000
ROA not after: Sat 29 Oct 2022 19:56:28 +0000
asID: 212357
IP address blocks: 2602:feda:c70::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:a9:0f:8a:3f:92:bf:2f:c6:15:13:7b:01:86:18:1e:bc:29:7d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Oct 30 19:51:28 2021 GMT
Not After : Oct 29 19:56:28 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4a:dd:d2:18:99:bc:29:e5:25:07:67:0f:36:
28:a9:dc:ec:ba:33:dd:ed:23:c8:31:06:5e:2f:c6:
f6:65:56:c5:c9:be:e0:dc:48:6c:2b:3f:41:b8:5b:
ba:5e:16:33:e2:5b:85:63:67:e7:d5:d6:ba:f4:32:
02:93:32:fd:cd:50:45:97:cf:91:c5:bf:f3:1a:90:
84:9d:88:d9:27:ef:1b:7e:7f:71:1e:76:fa:7a:31:
0e:ad:d9:54:e3:85:3c:47:0c:d1:5e:a3:00:7d:3a:
3e:72:85:24:63:10:2a:40:c4:5d:ed:5a:10:d7:57:
02:86:13:40:ca:35:31:2f:51:c4:77:a8:7f:55:7e:
31:df:f2:00:49:c1:c5:b9:5c:32:65:52:5b:f3:1c:
84:b2:ec:61:af:fc:47:3b:c9:cd:06:a6:6c:74:01:
dc:b7:e6:05:a1:34:16:39:df:dc:fa:d0:d4:9f:55:
92:52:4b:81:00:45:8a:39:12:2f:5d:df:9a:48:e8:
d0:31:82:31:00:9b:2f:0c:4f:f7:47:13:af:89:a2:
49:ae:cd:cb:8b:42:9b:ba:f0:fc:9d:24:be:e6:fc:
be:d9:f1:45:f1:f4:66:22:69:07:6b:a9:c9:74:af:
4b:7e:63:38:de:a1:06:5d:19:cc:fa:91:c0:6e:57:
d1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EE:35:D2:8E:4B:C5:4E:85:BB:D6:5E:15:75:5C:25:52:76:D8:8B
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6337303a3a2f34342d3434203d3e20323132333537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:c70::/44
Signature Algorithm: sha256WithRSAEncryption
2b:c8:9a:f1:b7:bc:aa:38:81:8b:c4:8d:6e:1e:c4:04:a6:98:
f0:d1:e0:57:9b:a4:4b:1f:95:31:7d:e5:cc:c5:97:2f:73:9f:
b2:33:4f:8b:83:fa:f5:36:7f:f1:fa:f9:75:87:b0:d1:b5:e9:
6a:f1:34:d3:ed:06:0e:08:31:f1:31:d1:40:46:b5:e9:82:e4:
81:fe:1e:22:5b:0b:33:0f:38:94:19:89:e0:6b:b9:fe:ba:81:
62:b2:f5:a5:8b:05:61:d4:2a:b5:f1:4d:30:c3:37:42:e0:f9:
2c:9d:78:0b:56:fd:f7:ad:23:b7:e2:d0:59:c0:78:76:7e:6b:
5c:09:9a:7e:f8:01:9a:2d:58:cc:d4:fa:00:93:56:88:e9:5b:
8a:5c:0f:25:ac:a7:d7:6e:3d:d3:8d:17:3a:b3:5f:cc:63:f0:
61:9f:79:c0:8f:98:9e:49:14:c7:97:90:25:d9:f3:b9:c8:ad:
14:8c:3f:24:a5:6e:83:65:c1:ff:99:2b:69:90:c1:5a:d5:86:
5c:1f:3a:4d:a5:e4:1e:f4:9f:1b:3f:24:c0:4d:45:de:f2:53:
51:ae:7b:71:10:f1:1a:9d:4c:ff:4d:a6:75:52:d8:9d:50:3c:
0a:03:61:cc:ca:98:51:b0:14:93:51:d1:e0:1f:fc:b2:27:f5:
21:85:e5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org