Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6362303a3a2f34342d3438203d3e20313431313733.roa
File: 323630323a666564613a6362303a3a2f34342d3438203d3e20313431313733.roa (raw, json)
Hash identifier: Z53z8Uz6X9BrLy2EE8YLboGAiSPA0jkXg7ZXu9qyyiA=
Subject key identifier: 7C:0E:3A:31:D2:5F:0B:74:93:C4:71:7E:5E:42:C0:2E:BF:36:4F:F7
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 2542BBC3CD4DFFBBB834D2BC9FCA7FA71805F8AA
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6362303a3a2f34342d3438203d3e20313431313733.roa
Signing time: Mon 28 Feb 2022 01:00:11 +0000
ROA not before: Mon 28 Feb 2022 00:55:11 +0000
ROA not after: Mon 27 Feb 2023 01:00:11 +0000
asID: 141173
IP address blocks: 2602:feda:cb0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:42:bb:c3:cd:4d:ff:bb:b8:34:d2:bc:9f:ca:7f:a7:18:05:f8:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Feb 28 00:55:11 2022 GMT
Not After : Feb 27 01:00:11 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ec:19:6e:a7:52:41:17:5e:99:14:c4:84:4d:
dc:ec:0a:2e:20:60:d5:2b:82:d3:62:f5:69:d8:2b:
c4:81:ae:25:07:e1:57:11:f3:c5:d7:9d:20:ce:5c:
25:df:1e:20:da:9b:c2:78:f8:df:27:58:9b:87:4e:
78:98:5e:e2:88:3f:8e:ba:50:2b:1a:63:2a:92:1c:
82:73:95:ef:a5:c4:b7:06:65:d3:61:08:27:7b:29:
df:7e:af:96:99:43:bc:b9:16:95:ba:19:e0:90:9d:
4a:f2:f5:74:9b:ab:53:16:a1:44:78:bb:2f:44:26:
41:6a:ef:d4:f1:ca:6d:4f:13:9b:5c:d4:7b:05:55:
26:62:2f:2d:f4:11:8f:22:f7:da:27:a7:ad:a0:ad:
35:21:13:de:65:68:d1:d2:a1:df:e3:69:0d:7d:43:
35:59:f8:46:fa:f6:3f:95:a0:d7:b5:61:43:c3:ab:
b9:72:88:f7:f5:d9:6c:ce:b3:30:48:07:fc:dd:c5:
4b:53:9d:e9:34:5b:b8:0d:76:bb:56:7d:6c:5f:41:
a8:bd:87:f4:98:e0:de:ec:29:0e:30:0e:c8:54:36:
9f:69:6f:f0:93:2d:81:81:85:7d:01:84:86:df:7f:
ca:8b:9b:68:85:dd:ab:fc:bb:5b:15:c3:4a:b0:84:
10:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0E:3A:31:D2:5F:0B:74:93:C4:71:7E:5E:42:C0:2E:BF:36:4F:F7
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6362303a3a2f34342d3438203d3e20313431313733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:cb0::/44
Signature Algorithm: sha256WithRSAEncryption
65:29:82:44:24:b4:ed:99:35:00:ca:27:83:48:dc:72:d2:0c:
0d:76:95:c7:fb:64:e8:c1:3b:84:a4:52:12:d7:2e:69:d4:7d:
9b:8a:2b:ce:9e:ef:12:73:66:a8:6e:bc:ee:f1:74:8c:59:bf:
f7:87:de:23:99:7e:1f:1a:b5:be:19:c1:d0:71:94:83:fb:ce:
29:4c:0f:76:59:1e:66:46:be:21:c1:f5:09:14:8b:67:33:28:
bd:d5:81:4e:54:f7:01:34:bc:ed:6d:6f:25:9c:70:e1:8a:31:
84:9a:ce:ae:f7:8a:c0:ee:b9:41:e9:ae:08:7f:f2:7d:f3:9d:
7a:72:b5:10:f6:93:d0:1f:d4:ee:d6:b1:f4:b4:ef:60:82:67:
0d:3e:0c:39:bf:c2:a3:29:ba:6a:7b:36:4c:34:fa:3b:02:5d:
ad:c5:aa:83:8a:9e:ec:27:7d:80:06:22:ca:1b:0f:fa:41:55:
0f:10:0f:02:bf:c9:91:7a:97:c8:f8:ed:fd:fc:3c:76:ab:b7:
17:c1:e8:75:4a:ae:cc:f6:80:84:d2:e8:80:6d:bb:b2:10:a7:
22:4d:78:1a:b0:f9:7f:df:23:c9:71:fd:9d:81:1f:9f:a8:74:
92:05:5f:e4:1b:6d:df:8d:f6:3e:81:17:64:cc:77:55:42:90:
17:fc:6e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:50 2024 by rpki-client on console-ams.rpki-client.org