Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6536303a3a2f34342d3438203d3e20313439383335.roa
File:                     323630323a666564613a6536303a3a2f34342d3438203d3e20313439383335.roa (raw, json)
Hash identifier:          DVbH3Kc1F6GsAiXSB0WI3EuyhH8FbAP9vK47E3S2Zu8=
Subject key identifier:   94:80:B4:76:41:6A:21:78:CF:39:10:C7:24:85:7F:54:1F:24:29:33
Certificate issuer:       /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial:       063AB039396A3BEC12DE09A5748B87A7A7EB1500
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6536303a3a2f34342d3438203d3e20313439383335.roa
Signing time:             Tue 31 May 2022 21:11:04 +0000
ROA not before:           Tue 31 May 2022 21:06:04 +0000
ROA not after:            Tue 30 May 2023 21:11:04 +0000
asID:                     149835
IP address blocks:        2602:feda:e60::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:3a:b0:39:39:6a:3b:ec:12:de:09:a5:74:8b:87:a7:a7:eb:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
        Validity
            Not Before: May 31 21:06:04 2022 GMT
            Not After : May 30 21:11:04 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:33:01:e4:5b:30:1b:ee:23:3c:0f:87:26:97:
                    3b:1d:ad:94:78:57:d8:6b:34:da:a8:50:81:e5:a2:
                    d0:1d:c2:72:cf:d3:9f:08:68:e0:8a:aa:43:31:08:
                    42:8d:ca:9a:cb:ed:1a:4d:34:86:2b:35:51:96:8f:
                    2a:99:a2:4c:ce:fc:d9:40:12:76:3b:6d:dd:6b:55:
                    9b:57:53:f0:b4:53:cd:b1:cc:19:67:29:a7:ea:a5:
                    28:2f:17:55:d8:70:ea:4b:af:89:53:9d:29:1c:bd:
                    d6:5c:a2:56:b0:b5:fb:41:96:74:78:2b:7a:a4:a9:
                    07:cb:23:cc:f7:c0:0d:ca:bd:95:17:95:26:a5:79:
                    2e:22:ac:47:24:b9:53:98:f1:c8:19:4f:fe:db:75:
                    68:c9:7d:21:c9:c7:c7:f9:bb:ef:e6:2e:67:d1:8f:
                    34:4a:bc:5e:f2:64:21:80:b7:54:05:fe:84:32:9b:
                    36:93:13:10:09:de:b3:34:81:6f:de:7c:e3:ee:e2:
                    c8:10:c0:57:ed:cf:2b:5b:dd:68:fd:97:af:a3:bf:
                    f9:4e:27:a1:c4:ec:4f:8e:a2:c6:03:48:26:a8:7d:
                    67:4d:ee:8c:8c:68:55:92:da:8b:4c:9e:55:91:d8:
                    3d:df:f3:5c:80:01:1d:70:90:f1:71:64:bd:8d:d1:
                    89:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:80:B4:76:41:6A:21:78:CF:39:10:C7:24:85:7F:54:1F:24:29:33
            X509v3 Authority Key Identifier:
                keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6536303a3a2f34342d3438203d3e20313439383335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:e60::/44

    Signature Algorithm: sha256WithRSAEncryption
         87:99:0f:13:8b:0a:1c:b5:b0:b9:bf:90:75:96:6c:5c:8c:1f:
         56:34:4e:c9:31:85:09:3d:75:c5:14:1c:1d:63:54:88:8a:a1:
         a3:ce:1d:48:80:1c:83:14:b4:82:36:38:ff:d3:5b:52:98:c9:
         82:86:12:4b:e8:17:a5:17:0c:0e:0d:31:f6:85:bd:7c:6e:68:
         4e:c8:49:6f:13:d4:3d:57:85:08:49:5a:6d:a6:20:ab:2e:15:
         90:e9:2b:65:4e:a5:d7:80:d1:27:5c:2b:65:6b:13:93:bb:3f:
         8c:49:3f:7a:a6:fc:78:e5:ca:e4:e7:d2:6f:30:68:af:81:61:
         9e:59:b0:f7:40:f7:0a:a9:ab:b5:13:e6:8d:ec:98:42:a3:99:
         72:f2:d6:cd:8f:e6:44:b3:ac:38:b1:a5:05:61:fa:dd:23:7b:
         7e:47:9f:2e:f8:ec:1f:f5:44:a6:92:d7:df:77:df:e9:f1:19:
         ce:fe:90:e3:06:54:1e:ae:ba:50:bd:b5:b2:4a:c2:71:fb:7c:
         4b:d5:36:91:36:e8:be:87:93:00:a9:b4:a4:28:a6:f7:6e:56:
         8c:c8:a2:f6:25:8a:4f:90:9d:55:dc:2a:9b:45:b3:d6:19:5d:
         df:bb:c3:a7:7a:93:a7:ea:19:0b:c1:6b:88:77:e3:c2:76:d7:
         b3:e7:90:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:50 2024 by rpki-client on console-ams.rpki-client.org