Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a663032303a3a2f34342d3438203d3e20313437313733.roa
File: 323630323a666564613a663032303a3a2f34342d3438203d3e20313437313733.roa (raw, json)
Hash identifier: 1FL4R89XL4V7IxpzYh9CIonUmPDNRe6PcHKTCWW89sM=
Subject key identifier: A2:42:99:96:62:3A:43:83:88:52:D3:B6:4C:E9:AE:03:10:55:3D:D0
Certificate issuer: /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial: 1AB5C4F39D6D3F9C77FD74E385414CE531574A3F
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a663032303a3a2f34342d3438203d3e20313437313733.roa
Signing time: Fri 09 Sep 2022 04:00:00 +0000
ROA not before: Fri 09 Sep 2022 03:55:00 +0000
ROA not after: Fri 08 Sep 2023 04:00:00 +0000
asID: 147173
IP address blocks: 2602:feda:f020::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:b5:c4:f3:9d:6d:3f:9c:77:fd:74:e3:85:41:4c:e5:31:57:4a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Validity
Not Before: Sep 9 03:55:00 2022 GMT
Not After : Sep 8 04:00:00 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bb:ed:5e:53:72:70:1b:71:b4:23:1b:eb:de:
f5:fe:16:9e:80:a8:a1:5e:9b:79:d8:47:61:58:2e:
78:40:0b:1d:26:8d:75:4a:da:32:fd:5d:8f:a5:17:
c3:9b:3f:58:0e:72:07:32:9f:27:c8:ae:83:90:58:
67:2e:9f:ef:c3:4e:2d:e1:2e:b8:fd:14:a8:76:7e:
1e:1d:b0:e0:19:f3:8b:d7:0c:a4:b2:01:45:91:f9:
80:77:4e:a2:1c:59:71:a9:39:0c:e3:c0:ef:90:c5:
d1:f1:0d:19:44:ab:0e:12:0b:19:43:ec:61:e0:07:
30:8c:59:d2:70:26:b8:ba:78:57:59:8b:31:27:9f:
9a:2b:52:4d:e4:46:5b:39:2b:10:32:0a:d1:d5:7b:
f0:ab:75:85:7e:1f:b1:ec:6e:5e:5d:a3:33:d1:7d:
26:2b:3a:df:cf:22:20:27:c4:50:cf:a4:33:15:38:
ac:cf:55:3d:04:43:d3:56:f1:97:0a:bb:74:c1:5f:
84:b4:20:1e:ad:d1:28:eb:93:22:4e:7a:05:13:fc:
14:bd:60:ef:0c:d5:2c:f3:10:9c:cb:4a:2a:2c:a4:
76:cb:54:ed:2a:df:d2:18:ea:98:bd:aa:33:a1:19:
9b:a5:fa:86:af:f9:99:26:21:71:4a:b1:c3:bb:c8:
f3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:42:99:96:62:3A:43:83:88:52:D3:B6:4C:E9:AE:03:10:55:3D:D0
X509v3 Authority Key Identifier:
keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a663032303a3a2f34342d3438203d3e20313437313733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:feda:f020::/44
Signature Algorithm: sha256WithRSAEncryption
ad:8b:47:bb:52:78:01:eb:79:d9:00:e2:82:c3:d0:11:ec:6e:
87:fe:5e:6a:ba:99:9b:41:e6:23:41:52:d6:b7:f6:54:ba:65:
07:45:77:eb:18:97:0e:43:b6:08:9c:76:3d:65:e1:c6:72:32:
bf:82:da:59:4f:56:f2:ec:5b:42:38:2a:e9:4b:08:30:36:08:
f3:c0:e6:bd:92:3e:ac:09:5c:09:f5:0d:ef:60:34:66:37:6d:
9f:35:50:8d:7a:ad:04:73:31:5b:d1:87:44:31:5e:78:bc:9c:
21:13:16:8a:2a:dc:d7:19:95:10:87:36:ed:a7:1c:5a:9d:a1:
eb:73:86:6b:c9:e5:94:af:3b:71:a7:86:45:be:f7:d6:75:d7:
fc:89:d9:3f:ca:dc:13:10:8f:1f:16:71:1a:42:b8:f7:2e:a4:
1f:6b:31:cf:b0:29:77:cd:5b:18:48:f6:df:54:df:f0:92:d1:
63:a3:60:cd:7e:60:68:a5:a0:b8:03:04:79:88:98:bb:7d:9a:
4a:40:21:c8:83:07:b2:88:ee:ab:f0:6b:2f:fe:3d:20:1f:7a:
13:02:26:e1:6a:7d:7f:02:8b:88:41:b2:c1:1c:d3:0d:5f:57:
cf:f1:89:c1:86:98:94:85:a2:79:98:ce:ee:19:a4:81:e0:e4:
64:0c:b0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org