Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6465303a3a2f34342d3438203d3e20313432363431.roa
File:                     323630323a666564613a6465303a3a2f34342d3438203d3e20313432363431.roa (raw, json)
Hash identifier:          5wfE10t4rr7JGK5RHn5ZveHEQpGN7ZcqhAsxwY815f4=
Subject key identifier:   BD:6A:53:04:39:27:E2:23:4C:65:A1:0B:F2:73:E3:D6:F4:E5:26:21
Certificate issuer:       /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial:       3232ADC3462F9D56233F7CD8614D23945A26DD0C
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6465303a3a2f34342d3438203d3e20313432363431.roa
Signing time:             Fri 05 Aug 2022 18:00:00 +0000
ROA not before:           Fri 05 Aug 2022 17:55:00 +0000
ROA not after:            Fri 04 Aug 2023 18:00:00 +0000
asID:                     142641
IP address blocks:        2602:feda:de0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:32:ad:c3:46:2f:9d:56:23:3f:7c:d8:61:4d:23:94:5a:26:dd:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
        Validity
            Not Before: Aug  5 17:55:00 2022 GMT
            Not After : Aug  4 18:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:df:04:8f:61:ac:3f:a7:91:ce:75:b4:49:65:
                    f0:d4:74:88:54:cb:21:28:d2:fb:11:f7:5c:15:3a:
                    a9:74:04:b1:af:9f:4d:54:69:c8:19:91:df:30:29:
                    dd:e2:c3:b0:5b:fa:69:e0:8c:37:ad:e5:1a:2a:2d:
                    f5:5f:bf:f3:10:d8:4a:c1:89:52:91:86:c6:4b:55:
                    b8:3f:ee:ff:9d:47:98:1c:bf:f0:b4:1e:9b:a7:c8:
                    63:61:af:32:be:37:d1:eb:ff:37:66:57:f2:1e:0d:
                    e6:21:75:83:dc:69:1c:aa:a9:7c:ac:cc:da:ff:c6:
                    69:dd:c3:be:9d:0b:59:e7:d5:6d:6f:46:dc:80:46:
                    6b:52:c6:f3:07:7d:60:81:06:db:fe:bf:13:cb:9f:
                    54:63:2d:ec:5d:ab:d7:30:ec:02:15:64:f2:88:6e:
                    ac:9c:40:4d:f7:4e:a3:80:84:e3:96:06:27:85:60:
                    43:cb:b4:b4:d6:1b:8d:99:42:50:aa:9a:10:b3:0f:
                    a8:9f:c3:9c:e0:60:2a:55:bf:b3:0a:fb:be:58:44:
                    1d:3f:c7:78:7a:32:7e:4f:9d:42:89:4d:8d:9b:b8:
                    ba:1d:de:62:b7:a5:f8:ef:31:0c:d4:b5:97:7f:c0:
                    4a:70:f3:b7:45:10:77:1d:2d:55:81:17:bd:3a:6b:
                    5d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6A:53:04:39:27:E2:23:4C:65:A1:0B:F2:73:E3:D6:F4:E5:26:21
            X509v3 Authority Key Identifier:
                keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6465303a3a2f34342d3438203d3e20313432363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:de0::/44

    Signature Algorithm: sha256WithRSAEncryption
         92:b9:b2:ea:ae:03:c3:6d:19:f6:34:99:e7:d9:0f:40:bf:22:
         08:db:ea:1d:24:35:31:34:7c:f1:c9:8e:41:4d:fc:86:01:ca:
         3c:1c:75:b6:4b:a7:10:0a:76:96:73:db:3c:4c:0b:e8:b8:73:
         1b:9d:df:fc:8a:4a:4a:f4:42:98:0c:5d:24:bb:26:b8:bd:19:
         b3:24:99:55:72:1d:ff:30:95:34:63:e5:a7:bb:06:88:5b:aa:
         a5:70:d2:26:21:34:44:36:e6:9f:cf:71:4b:6a:d9:bb:d4:46:
         f9:40:01:42:60:7f:00:06:04:9f:bd:6c:9a:ee:cb:87:34:12:
         cb:d2:26:44:34:4d:ff:2f:1c:c6:14:a7:57:f5:a6:37:28:d1:
         a9:7f:14:ef:53:b3:f0:a9:1b:2e:65:88:87:1e:5d:eb:e3:92:
         c1:a0:1d:3a:c2:f9:8a:77:db:5e:d7:1e:d1:c5:f7:46:41:cc:
         49:94:89:01:0e:a0:7a:11:3f:21:43:7c:d3:06:7c:30:81:f6:
         ab:c3:aa:92:37:66:15:18:81:bd:3b:3e:72:4e:b5:73:9a:be:
         e5:89:ac:77:6f:d4:e5:29:25:8b:e1:85:72:ea:0c:60:8f:7c:
         8b:1c:71:d6:2a:5a:c2:28:e6:8b:4d:46:c3:20:c9:14:04:64:
         15:40:cf:83
-----BEGIN CERTIFICATE-----
MIIHADCCBeigAwIBAgIUMjKtw0YvnVYjP3zYYU0jlFom3QwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDEwODM5OENBOTg4MzgyQzJBNTA5QkZEQjM5RTE0NkE3
NkNGOURFMDAeFw0yMjA4MDUxNzU1MDBaFw0yMzA4MDQxODAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0ZERjA0OEY2MUFDM0ZBNzkx
Q0U3NUI0NDk2NUYwRDQ3NDg4NTRDQjIxMjhEMkZCMTFGNzVDMTUzQUE5NzQwNEIx
QUY5RjRENTQ2OUM4MTk5MURGMzAyOURERTJDM0IwNUJGQTY5RTA4QzM3QURFNTFB
MkEyREY1NUZCRkYzMTBEODRBQzE4OTUyOTE4NkM2NEI1NUI4M0ZFRUZGOUQ0Nzk4
MUNCRkYwQjQxRTlCQTdDODYzNjFBRjMyQkUzN0QxRUJGRjM3NjY1N0YyMUUwREU2
MjE3NTgzREM2OTFDQUFBOTdDQUNDQ0RBRkZDNjY5RERDM0JFOUQwQjU5RTdENTZE
NkY0NkRDODA0NjZCNTJDNkYzMDc3RDYwODEwNkRCRkVCRjEzQ0I5RjU0NjMyREVD
NURBQkQ3MzBFQzAyMTU2NEYyODg2RUFDOUM0MDRERjc0RUEzODA4NEUzOTYwNjI3
ODU2MDQzQ0JCNEI0RDYxQjhEOTk0MjUwQUE5QTEwQjMwRkE4OUZDMzlDRTA2MDJB
NTVCRkIzMEFGQkJFNTg0NDFEM0ZDNzc4N0EzMjdFNEY5RDQyODk0RDhEOUJCOEJB
MURERTYyQjdBNUY4RUYzMTBDRDRCNTk3N0ZDMDRBNzBGM0I3NDUxMDc3MUQyRDU1
ODExN0JEM0E2QjVENUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAz98Ej2GsP6eRznW0SWXw1HSIVMshKNL7EfdcFTqpdASxr59NVGnI
GZHfMCnd4sOwW/pp4Iw3reUaKi31X7/zENhKwYlSkYbGS1W4P+7/nUeYHL/wtB6b
p8hjYa8yvjfR6/83ZlfyHg3mIXWD3Gkcqql8rMza/8Zp3cO+nQtZ59Vtb0bcgEZr
UsbzB31ggQbb/r8Ty59UYy3sXavXMOwCFWTyiG6snEBN906jgITjlgYnhWBDy7S0
1huNmUJQqpoQsw+on8Oc4GAqVb+zCvu+WEQdP8d4ejJ+T51CiU2Nm7i6Hd5it6X4
7zEM1LWXf8BKcPO3RRB3HS1VgRe9OmtdXwIDAQABo4ICDjCCAgowHQYDVR0OBBYE
FL1qUwQ5J+IjTGWhC/Jz49b05SYhMB8GA1UdIwQYMBaAFAEIOYypiDgsKlCb/bOe
FGp2z53gMA4GA1UdDwEB/wQEAwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzov
L3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTE0RTc1MDAwMC8wLzAx
MDgzOThDQTk4ODM4MkMyQTUwOUJGREIzOUUxNDZBNzZDRjlERTAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9zYWt1eWEubmF0Lm1vZS9y
ZXBvL05BVE9DQS8wLzAxMDgzOThDQTk4ODM4MkMyQTUwOUJGREIzOUUxNDZBNzZD
RjlERTAuY2VyMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUHMAuGd3JzeW5j
Oi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxMTRFNzUwMDAwLzAv
MzIzNjMwMzIzYTY2NjU2NDYxM2E2NDY1MzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNl
MjAzMTM0MzIzNjM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQmAv7aDeAwDQYJKoZIhvcNAQELBQAD
ggEBAJK5suquA8NtGfY0mefZD0C/Igjb6h0kNTE0fPHJjkFN/IYByjwcdbZLpxAK
dpZz2zxMC+i4cxud3/yKSkr0QpgMXSS7Jri9GbMkmVVyHf8wlTRj5ae7BohbqqVw
0iYhNEQ25p/PcUtq2bvURvlAAUJgfwAGBJ+9bJruy4c0EsvSJkQ0Tf8vHMYUp1f1
pjco0al/FO9Ts/CpGy5liIceXevjksGgHTrC+Yp3217XHtHF90ZBzEmUiQEOoHoR
PyFDfNMGfDCB9qvDqpI3ZhUYgb07PnJOtXOavuWJrHdv1OUpJYvhhXLqDGCPfIsc
cdYqWsIo5otNRsMgyRQEZBVAz4M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org