Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a663031303a3a2f34342d3434203d3e20313437303438.roa
File: 323630323a666564613a663031303a3a2f34342d3434203d3e20313437303438.roa (raw, json)
Hash identifier: +bQca0QBtCXvWENUMC3mQ+dy6WngOvbSvhPJDLgsuKw=
Subject key identifier: CB:BA:52:C6:A3:27:E2:06:48:EF:C8:71:2D:A8:81:91:F0:95:8F:7A
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 52490D8E369E851F16D299C5CCED1E0C03C019AD
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a663031303a3a2f34342d3434203d3e20313437303438.roa
Signing time: Thu 25 Aug 2022 03:00:00 +0000
ROA not before: Thu 25 Aug 2022 02:55:00 +0000
ROA not after: Thu 24 Aug 2023 03:00:00 +0000
asID: 147048
IP address blocks: 2602:feda:f010::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:49:0d:8e:36:9e:85:1f:16:d2:99:c5:cc:ed:1e:0c:03:c0:19:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Aug 25 02:55:00 2022 GMT
Not After : Aug 24 03:00:00 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8e:ac:83:09:64:c8:80:40:7c:88:0a:d8:e9:
65:54:c0:40:9a:ae:b1:2f:57:e8:dc:c8:39:7a:49:
41:7a:a5:de:b0:bf:d2:da:28:a9:af:ce:a8:63:d9:
af:59:73:ae:9e:58:6e:09:db:31:32:3c:af:eb:d8:
a1:98:dd:e6:3e:6b:7a:79:55:94:26:d6:e2:12:0a:
80:d1:0a:50:85:e2:72:78:17:6e:e0:09:9b:d7:f4:
7e:ea:73:6d:55:18:1c:c9:4b:85:e6:94:5e:a0:a9:
95:30:92:3b:bd:e5:44:2c:ea:57:6f:f2:88:00:1e:
7c:12:a6:df:bf:06:59:61:db:3d:8b:95:da:19:c6:
00:25:d2:82:5f:9f:e6:a0:e7:c3:c4:c6:ca:ea:b2:
f4:3e:fe:ff:c0:06:a1:2d:be:6e:34:fd:5d:a8:20:
1f:11:0f:c4:46:9c:4e:6b:7a:d3:8a:09:fe:db:d9:
af:5d:5b:04:c7:8d:9d:a9:1d:10:8e:7a:12:30:0e:
c6:06:3e:60:9e:cf:dd:44:e2:7b:1d:45:d4:68:46:
d3:f2:a2:a6:9b:b2:46:f7:65:7c:c0:b9:b6:40:95:
c7:08:c4:6e:b2:84:e3:d8:99:8c:04:6d:cd:f5:30:
13:aa:71:7c:de:ad:bd:71:be:f6:ff:ea:8b:24:6f:
bb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BA:52:C6:A3:27:E2:06:48:EF:C8:71:2D:A8:81:91:F0:95:8F:7A
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a663031303a3a2f34342d3434203d3e20313437303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:f010::/44
Signature Algorithm: sha256WithRSAEncryption
8d:aa:b7:a9:bd:a3:0d:2e:6d:de:7a:bf:ee:91:d6:0c:7b:6f:
5e:b6:2e:45:8a:2d:95:7d:d9:40:dc:c8:4d:62:7c:56:61:94:
c8:ce:e4:30:8e:51:70:1d:75:19:c7:bf:d5:e7:09:7c:00:62:
1f:6c:08:36:43:e3:9f:f0:04:e4:c9:f6:7b:e2:2a:c6:f0:4e:
ae:f7:c8:73:9b:cc:f9:d2:99:ab:a9:7b:40:ec:a2:bc:60:4c:
58:6b:fb:dc:10:22:cf:0f:a6:9d:8a:1d:d5:06:b8:e1:24:07:
ad:4e:86:e4:e6:c0:e8:f1:cc:58:28:3b:34:1d:6d:37:4f:cc:
8c:11:84:c8:05:78:36:47:9c:44:25:47:d1:bc:8b:10:79:a7:
df:19:93:c5:f8:c8:96:89:a8:fc:22:70:30:a4:10:ef:4b:46:
68:ff:82:04:97:a6:3c:5f:da:62:a1:b7:12:ad:2c:e8:07:3a:
16:55:1f:d2:f2:c1:0a:12:a9:f8:3a:0e:1e:07:67:0d:9a:fe:
e5:1c:2a:40:02:ff:59:1c:98:1d:8c:b0:f2:64:35:cf:d3:76:
4d:87:1d:6e:ef:71:ba:00:54:2d:76:9e:12:b9:fe:70:ec:ac:
3c:30:c0:92:3f:73:54:c2:ca:f3:ad:52:49:f7:f0:5a:08:9d:
74:f4:db:e3
-----BEGIN CERTIFICATE-----
MIIHAjCCBeqgAwIBAgIUUkkNjjaehR8W0pnFzO0eDAPAGa0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDEwODM5OENBOTg4MzgyQzJBNTA5QkZEQjM5RTE0NkE3
NkNGOURFMDAeFw0yMjA4MjUwMjU1MDBaFw0yMzA4MjQwMzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkY4RUFDODMwOTY0Qzg4MDQw
N0M4ODBBRDhFOTY1NTRDMDQwOUFBRUIxMkY1N0U4RENDODM5N0E0OTQxN0FBNURF
QjBCRkQyREEyOEE5QUZDRUE4NjNEOUFGNTk3M0FFOUU1ODZFMDlEQjMxMzIzQ0FG
RUJEOEExOThEREU2M0U2QjdBNzk1NTk0MjZENkUyMTIwQTgwRDEwQTUwODVFMjcy
NzgxNzZFRTAwOTlCRDdGNDdFRUE3MzZENTUxODFDQzk0Qjg1RTY5NDVFQTBBOTk1
MzA5MjNCQkRFNTQ0MkNFQTU3NkZGMjg4MDAxRTdDMTJBNkRGQkYwNjU5NjFEQjNE
OEI5NURBMTlDNjAwMjVEMjgyNUY5RkU2QTBFN0MzQzRDNkNBRUFCMkY0M0VGRUZG
QzAwNkExMkRCRTZFMzRGRDVEQTgyMDFGMTEwRkM0NDY5QzRFNkI3QUQzOEEwOUZF
REJEOUFGNUQ1QjA0Qzc4RDlEQTkxRDEwOEU3QTEyMzAwRUM2MDYzRTYwOUVDRkRE
NDRFMjdCMUQ0NUQ0Njg0NkQzRjJBMkE2OUJCMjQ2Rjc2NTdDQzBCOUI2NDA5NUM3
MDhDNDZFQjI4NEUzRDg5OThDMDQ2RENERjUzMDEzQUE3MTdDREVBREJENzFCRUY2
RkZFQThCMjQ2RkJCNTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAv46sgwlkyIBAfIgK2OllVMBAmq6xL1fo3Mg5eklBeqXesL/S2iip
r86oY9mvWXOunlhuCdsxMjyv69ihmN3mPmt6eVWUJtbiEgqA0QpQheJyeBdu4Amb
1/R+6nNtVRgcyUuF5pReoKmVMJI7veVELOpXb/KIAB58EqbfvwZZYds9i5XaGcYA
JdKCX5/moOfDxMbK6rL0Pv7/wAahLb5uNP1dqCAfEQ/ERpxOa3rTign+29mvXVsE
x42dqR0QjnoSMA7GBj5gns/dROJ7HUXUaEbT8qKmm7JG92V8wLm2QJXHCMRusoTj
2JmMBG3N9TATqnF83q29cb72/+qLJG+7WQIDAQABo4ICEDCCAgwwHQYDVR0OBBYE
FMu6UsajJ+IGSO/IcS2ogZHwlY96MB8GA1UdIwQYMBaAFAEIOYypiDgsKlCb/bOe
FGp2z53gMA4GA1UdDwEB/wQEAwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzov
L3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTE0RTc1MDAwMC8wLzAx
MDgzOThDQTk4ODM4MkMyQTUwOUJGREIzOUUxNDZBNzZDRjlERTAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9zYWt1eWEubmF0Lm1vZS9y
ZXBvL05BVE9DQS8wLzAxMDgzOThDQTk4ODM4MkMyQTUwOUJGREIzOUUxNDZBNzZD
RjlERTAuY2VyMIGYBggrBgEFBQcBCwSBizCBiDCBhQYIKwYBBQUHMAuGeXJzeW5j
Oi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxMTRFNzUwMDAwLzAv
MzIzNjMwMzIzYTY2NjU2NDYxM2E2NjMwMzEzMDNhM2EyZjM0MzQyZDM0MzQyMDNk
M2UyMDMxMzQzNzMwMzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCYC/trwEDANBgkqhkiG9w0BAQsF
AAOCAQEAjaq3qb2jDS5t3nq/7pHWDHtvXrYuRYotlX3ZQNzITWJ8VmGUyM7kMI5R
cB11Gce/1ecJfABiH2wINkPjn/AE5Mn2e+IqxvBOrvfIc5vM+dKZq6l7QOyivGBM
WGv73BAizw+mnYod1Qa44SQHrU6G5ObA6PHMWCg7NB1tN0/MjBGEyAV4NkecRCVH
0byLEHmn3xmTxfjIlomo/CJwMKQQ70tGaP+CBJemPF/aYqG3Eq0s6Ac6FlUf0vLB
ChKp+DoOHgdnDZr+5RwqQAL/WRyYHYyw8mQ1z9N2TYcdbu9xugBULXaeErn+cOys
PDDAkj9zVMLK861SSffwWgiddPTb4w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org