Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6436303a3a2f34342d3438203d3e20323132303334.roa
File: 323630323a666564613a6436303a3a2f34342d3438203d3e20323132303334.roa (raw, json)
Hash identifier: EBLTZ1HQaGhDD8xLIb9ALGqQDQJ/oOGU3ezmGGqzgTE=
Subject key identifier: E5:78:D1:BD:99:19:D2:23:AE:43:84:3A:FE:46:34:6E:18:69:FB:83
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 3C2E7FA7F7645F5C6B538AFA34318F442856EAAA
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6436303a3a2f34342d3438203d3e20323132303334.roa
Signing time: Wed 11 May 2022 02:00:00 +0000
ROA not before: Wed 11 May 2022 01:55:00 +0000
ROA not after: Wed 10 May 2023 02:00:00 +0000
asID: 212034
IP address blocks: 2602:feda:d60::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:2e:7f:a7:f7:64:5f:5c:6b:53:8a:fa:34:31:8f:44:28:56:ea:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: May 11 01:55:00 2022 GMT
Not After : May 10 02:00:00 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:51:98:c2:4d:22:74:f5:1c:ea:5c:55:8b:3c:
60:08:1d:2a:d2:f9:cb:54:15:b8:b5:69:08:0e:bb:
f3:bd:3b:3c:6b:eb:7e:66:ea:ff:3b:8a:f0:05:66:
c8:69:6f:4f:45:b6:55:ab:2c:19:7c:ad:c6:8a:17:
61:8d:d7:20:89:60:41:25:3a:0e:5b:91:29:9e:4e:
21:2d:02:4c:36:c6:c6:1a:6b:a6:61:97:5e:6d:a4:
16:d8:8d:67:58:ff:92:55:ed:62:83:50:2f:d9:51:
63:2b:90:4c:fe:8e:8c:79:26:ca:e9:b1:2a:23:3a:
24:15:9e:9a:f0:05:09:a8:17:ba:34:0f:7b:52:eb:
8e:52:91:aa:f8:3c:9f:71:ca:63:49:a5:da:ed:39:
22:99:68:57:18:61:cf:d2:d4:c6:ff:1f:73:63:28:
ba:8e:e8:52:78:56:84:74:d4:48:8f:ed:5e:1c:42:
6b:22:5a:3c:c7:e1:29:3b:65:ba:6b:f6:57:a3:0c:
2d:9e:e8:94:a4:10:ec:12:7c:3d:17:53:2c:7c:b7:
7e:2f:f4:b0:29:aa:19:2f:86:47:5c:6e:33:b0:16:
8a:fd:af:03:8d:f3:5e:66:67:40:6f:2f:dd:25:88:
04:0a:26:16:be:db:6b:21:b5:53:77:6c:59:fd:69:
6c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:78:D1:BD:99:19:D2:23:AE:43:84:3A:FE:46:34:6E:18:69:FB:83
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6436303a3a2f34342d3438203d3e20323132303334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:d60::/44
Signature Algorithm: sha256WithRSAEncryption
0a:c7:40:51:b9:83:4e:4b:b3:ac:03:cc:b9:c5:54:6a:48:67:
0d:60:88:35:2e:ad:57:ad:c3:c8:1f:2f:ce:6e:ad:aa:34:74:
29:c2:4a:5c:ab:ef:93:e0:80:72:8e:5d:77:5b:e8:16:9f:3e:
fa:29:3b:29:41:b6:f1:36:b1:87:19:31:b9:69:92:36:3a:5e:
5b:d5:45:f6:35:8b:24:55:f1:82:ee:ec:b5:3e:4e:a7:c0:17:
52:9b:c9:43:7f:bc:b0:2e:21:60:4d:d2:79:c9:fa:88:a1:b4:
45:45:ab:aa:8b:2a:7e:83:fa:34:35:40:00:c4:88:e6:90:1b:
12:19:03:2e:ce:0a:74:ea:59:19:bd:92:9c:12:f3:75:a1:d6:
5e:61:ff:bf:06:c7:5b:3f:60:46:4e:7c:ba:6d:9d:d0:ab:13:
cc:6c:9d:6e:1a:cf:c0:6a:46:cd:8c:e3:6a:f7:bb:b1:56:64:
3f:96:b4:da:21:72:ab:0b:28:86:e7:df:9a:30:4e:03:8d:c2:
b3:f6:41:90:31:0d:55:74:c9:e7:62:e0:06:3f:f4:b3:e9:bc:
8a:51:11:54:6e:1c:c4:38:0e:2e:fc:b7:db:0a:43:62:94:82:
d5:ef:04:f7:36:64:39:c5:67:8d:40:4f:44:97:54:2a:47:b8:
85:28:21:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:50 2024 by rpki-client on console-ams.rpki-client.org