Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6437303a3a2f34342d3438203d3e20313338343335.roa
File: 323630323a666564613a6437303a3a2f34342d3438203d3e20313338343335.roa (raw, json)
Hash identifier: SOrlNRqOpYxUJFztXrZ/t1BZQXbHL4G+a2zF/b4S3JE=
Subject key identifier: 6A:62:94:3F:2B:68:40:B4:59:5E:33:32:D1:B7:23:21:E8:6F:5F:70
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 2748ADC2381D8AD071F2DF38DEF9EAC45B776B78
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6437303a3a2f34342d3438203d3e20313338343335.roa
Signing time: Mon 28 Feb 2022 01:00:08 +0000
ROA not before: Mon 28 Feb 2022 00:55:08 +0000
ROA not after: Mon 27 Feb 2023 01:00:08 +0000
asID: 138435
IP address blocks: 2602:feda:d70::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:48:ad:c2:38:1d:8a:d0:71:f2:df:38:de:f9:ea:c4:5b:77:6b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Feb 28 00:55:08 2022 GMT
Not After : Feb 27 01:00:08 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d1:12:b4:10:90:04:cf:d7:03:45:0d:8b:3c:
93:6d:ac:8d:74:52:6e:bc:73:6c:32:bf:1a:e8:1a:
76:05:20:d2:a5:f1:53:fa:a5:7f:a2:f6:f2:12:eb:
51:6e:4c:9c:c0:67:77:71:40:91:bc:7c:2f:1f:7a:
89:e6:68:79:ae:8b:34:de:eb:50:78:a0:4e:b0:41:
2c:34:6d:0f:1f:d3:8f:cd:86:6a:56:18:a9:40:3c:
1b:67:ac:c5:0a:f1:72:4f:73:00:ee:9f:63:2d:2d:
73:2b:fe:3b:71:20:f5:e3:84:39:7b:67:c6:e5:93:
43:9c:90:3b:fc:2b:c3:ec:71:a4:c5:10:27:16:d1:
dc:d5:ab:83:5a:e7:ec:28:e2:20:78:a7:68:af:3a:
cc:7d:b9:c5:7a:7c:8f:6e:b5:82:68:61:d6:07:3f:
48:2d:5d:c7:53:89:65:cd:c4:1b:0a:c4:f1:72:98:
3a:d4:be:09:b6:06:c3:38:1a:41:e5:90:56:53:03:
35:0b:f8:c1:34:f4:6b:56:d3:51:7e:e0:00:e5:ae:
ce:a3:9e:19:1d:3b:63:42:e2:d1:f6:24:e2:05:a9:
60:64:af:1b:92:65:df:84:26:b0:70:ee:c5:0a:f3:
c2:21:85:07:06:f7:10:64:3d:02:e7:ab:31:03:87:
98:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:62:94:3F:2B:68:40:B4:59:5E:33:32:D1:B7:23:21:E8:6F:5F:70
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6437303a3a2f34342d3438203d3e20313338343335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:d70::/44
Signature Algorithm: sha256WithRSAEncryption
2e:65:22:9a:55:24:60:55:8a:b1:fe:55:34:a5:22:73:a8:c2:
f3:fd:29:41:0a:40:3f:95:54:e8:88:7d:f4:29:fd:62:46:53:
2e:83:b6:00:cc:47:91:91:39:64:91:21:76:24:00:31:74:dd:
79:45:24:c1:24:87:50:f5:fd:58:ad:c7:1d:72:50:83:3d:7a:
bd:1d:ee:5d:67:94:70:91:71:a6:5f:7e:64:9b:10:1b:40:8f:
49:1b:bd:bb:65:fc:57:85:bc:d3:a4:2e:44:dc:61:27:b9:f3:
f3:c6:41:17:b5:f5:82:b3:12:3c:00:a2:98:74:fe:9e:68:51:
6d:bf:3b:d4:8f:b0:3d:d0:1c:18:f8:a4:5a:9c:52:74:38:03:
52:73:23:a3:e1:2a:76:9f:a5:f5:54:bf:8e:d0:ba:f4:48:a3:
8f:f1:31:d5:b4:a7:eb:f2:e3:12:c9:a9:f9:cf:d1:9b:e6:47:
0d:fc:6a:9a:7e:2e:a0:f6:1b:b5:72:c8:97:69:b3:93:d0:89:
b2:c2:b4:d9:e3:9a:08:cf:8f:70:b8:e8:e9:7c:55:57:b9:7c:
95:4b:39:7e:cf:c1:44:7c:44:b3:b2:c7:84:5f:74:7c:b8:ee:
21:eb:66:03:84:fd:cf:54:7c:9e:dc:3d:1a:dc:58:08:70:85:
d8:ce:f9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org