Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6466303a3a2f34342d3438203d3e20313437303731.roa
File: 323630323a666564613a6466303a3a2f34342d3438203d3e20313437303731.roa (raw, json)
Hash identifier: C8vbrhv4uUm6H2OwfqkDIs5W23h65eLF2Z5+pGDaCUw=
Subject key identifier: 80:49:3F:A9:BF:3F:5A:CB:CF:08:6C:B6:55:19:67:3F:94:3A:CD:50
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 1CCA3E802D006AB578C843A2FA1654A56B77DF4D
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6466303a3a2f34342d3438203d3e20313437303731.roa
Signing time: Thu 04 Aug 2022 03:00:00 +0000
ROA not before: Thu 04 Aug 2022 02:55:00 +0000
ROA not after: Thu 03 Aug 2023 03:00:00 +0000
asID: 147071
IP address blocks: 2602:feda:df0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:ca:3e:80:2d:00:6a:b5:78:c8:43:a2:fa:16:54:a5:6b:77:df:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Aug 4 02:55:00 2022 GMT
Not After : Aug 3 03:00:00 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9c:f6:6b:71:89:d7:52:31:c3:5b:bc:47:ba:
05:44:0f:81:9f:0f:24:0b:fc:f0:80:d1:a9:07:8b:
0c:31:83:8c:e5:8e:2c:40:9e:c3:36:99:ce:2c:79:
8d:2a:fe:49:06:df:98:5c:42:1b:79:24:67:1e:2b:
99:01:b3:f9:5e:36:ac:8d:4f:a1:08:ea:d5:7a:ee:
78:d6:e2:7e:a9:33:1b:7c:8b:99:e7:ae:f3:d5:a8:
9d:d3:e7:af:20:28:b3:fd:b4:00:1b:ff:3e:91:63:
f9:3b:3b:23:5d:69:7e:ec:23:84:5c:f1:73:d5:cc:
9f:03:a4:68:e0:be:ac:40:77:ff:bc:ba:d7:5e:32:
1b:f0:34:d8:cf:ae:45:cd:c3:a8:d5:e6:b7:39:9c:
73:8e:49:b4:52:b0:ec:2d:e7:d4:ce:c2:b7:2d:4e:
d8:76:de:9c:3f:18:16:69:82:65:14:d4:aa:72:fb:
46:7d:25:5c:38:e0:71:d9:7b:f7:db:bd:74:c0:6f:
63:eb:85:ec:d9:74:b2:30:d2:15:28:57:50:09:b2:
db:21:67:1a:c8:a3:51:34:a7:29:f1:9f:59:78:2c:
71:68:df:db:62:6c:b7:16:05:5a:2b:43:59:b2:35:
0c:66:27:66:14:46:d0:cd:52:1d:df:41:dd:f1:cc:
21:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:49:3F:A9:BF:3F:5A:CB:CF:08:6C:B6:55:19:67:3F:94:3A:CD:50
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6466303a3a2f34342d3438203d3e20313437303731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:df0::/44
Signature Algorithm: sha256WithRSAEncryption
87:ea:a6:5c:9b:e7:c3:89:81:5f:cb:27:92:b5:cf:aa:1c:bf:
99:81:2f:3e:d1:91:e1:d4:5b:4e:00:67:e3:66:37:29:b3:9d:
db:2e:14:16:e5:2f:e9:4e:41:7d:0f:3d:ca:c6:c0:7b:ff:2d:
6c:8f:23:e1:9d:c9:b5:77:d3:8d:7f:b3:a3:60:e3:9a:ca:8e:
6c:fa:21:a9:1d:65:08:03:32:3d:21:96:69:8b:c8:02:7f:b8:
90:73:ba:74:e6:07:44:9f:5f:28:2c:25:83:06:f9:69:dc:89:
75:e8:a4:21:18:6b:5b:7d:0c:a9:25:68:cc:bb:43:d1:d8:04:
1e:67:e3:cd:bb:c9:9d:27:8e:a3:38:9c:d8:8c:53:8b:9d:9a:
41:d8:bb:e5:ce:2d:57:6a:01:8a:fd:4d:8e:1f:38:56:fb:4e:
59:9f:60:07:d8:b5:c4:f3:d7:5e:d6:c8:86:9e:a6:fb:13:40:
33:f2:90:3b:21:bc:cb:cd:6d:8d:6a:6d:a8:6b:c8:fa:1e:c4:
09:10:91:78:ed:65:69:8a:07:d3:42:30:f7:54:d1:a6:06:68:
9a:2e:f9:c6:75:91:89:ea:e5:d0:64:80:2e:b6:02:9e:df:16:
6f:da:92:16:18:f3:9a:90:8b:fd:83:6a:43:3b:55:24:d3:62:
55:6c:e2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:50 2024 by rpki-client on console-ams.rpki-client.org