Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a663035303a3a2f34342d3438203d3e20313437333038.roa
File:                     323630323a666564613a663035303a3a2f34342d3438203d3e20313437333038.roa (raw, json)
Hash identifier:          sIEf4Crs4NY387VMHpIt9UvZ2r3uTg2aefa89x095uY=
Subject key identifier:   E3:6E:06:B7:0E:1E:E7:57:34:18:57:16:66:F9:E0:1E:34:E5:60:CE
Certificate issuer:       /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial:       7E4A6207EA8E9882F89B62B0F970F132F82A040E
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a663035303a3a2f34342d3438203d3e20313437333038.roa
Signing time:             Mon 18 Oct 2021 23:16:44 +0000
ROA not before:           Mon 18 Oct 2021 23:11:44 +0000
ROA not after:            Mon 17 Oct 2022 23:16:44 +0000
asID:                     147308
IP address blocks:        2602:feda:f050::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:4a:62:07:ea:8e:98:82:f8:9b:62:b0:f9:70:f1:32:f8:2a:04:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
        Validity
            Not Before: Oct 18 23:11:44 2021 GMT
            Not After : Oct 17 23:16:44 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:54:e9:42:65:86:34:f6:3b:90:39:47:e1:d4:
                    2d:10:cc:57:6b:64:1a:22:7d:4a:e5:42:de:06:3b:
                    a6:8a:59:fb:d4:ad:61:47:e4:25:9f:e0:02:69:7f:
                    bc:09:68:c4:a6:75:b4:58:a5:66:ae:17:c2:d1:f3:
                    40:3d:f2:9f:19:9b:f0:53:1a:3c:99:38:85:07:3e:
                    e5:29:3c:0b:09:6a:68:7f:0f:41:cc:31:9a:fb:82:
                    b7:e5:a5:3a:e8:35:a7:3e:5e:0f:8c:a8:3a:47:af:
                    be:63:89:bc:e9:66:e2:e3:51:1d:81:1e:37:04:b0:
                    3d:06:b2:a4:db:e6:51:c7:64:11:c9:c4:c3:41:9e:
                    98:5f:5d:cc:31:04:8b:31:bd:bf:66:92:bc:f3:b6:
                    98:05:d8:5a:d6:99:f4:c9:a8:5e:06:95:73:28:5a:
                    a6:f1:0f:89:1f:ca:cb:7d:03:81:90:27:2a:79:57:
                    ad:04:de:a0:b1:f2:24:14:85:24:75:a3:ae:b0:52:
                    e8:f8:7f:a3:2b:45:d8:de:3d:c9:0e:e5:bf:ec:b5:
                    d3:ba:d1:ab:ae:2e:63:c9:d5:6c:ec:bd:89:56:64:
                    8c:6c:f3:3a:4f:7c:59:e7:86:d4:7f:95:73:9a:63:
                    d8:ff:93:6c:25:da:6c:af:43:c7:f3:5f:d7:74:c9:
                    20:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:6E:06:B7:0E:1E:E7:57:34:18:57:16:66:F9:E0:1E:34:E5:60:CE
            X509v3 Authority Key Identifier:
                keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a663035303a3a2f34342d3438203d3e20313437333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:f050::/44

    Signature Algorithm: sha256WithRSAEncryption
         45:be:1a:fb:ad:42:75:7b:3e:8a:ff:e5:3c:ab:4c:f1:7c:82:
         08:ad:2f:56:5b:61:9c:4a:9f:1f:b0:74:6c:a0:ca:f6:5c:cc:
         f4:30:3f:b4:6d:94:d1:1e:21:d5:d0:01:3d:00:93:a7:51:11:
         2f:7f:40:dc:08:03:30:ad:1f:d9:14:41:90:51:26:f6:c8:48:
         27:cd:0a:de:1e:aa:94:8a:1a:fe:4a:aa:7b:4c:48:2b:c0:00:
         ca:4b:24:43:1e:9e:c4:a1:3e:30:21:b4:48:be:d0:ca:c9:be:
         70:f6:ba:92:f9:b7:5d:6d:31:ff:1f:6e:d6:c1:ff:d7:21:49:
         49:58:7c:1c:68:77:34:14:45:f7:d9:ab:e0:0d:21:88:ab:bd:
         03:07:f8:68:22:8d:04:97:d1:8e:13:b2:d2:75:9e:66:c2:09:
         79:a9:e7:be:a6:dc:77:f1:e3:b6:3f:74:47:78:18:0b:02:61:
         03:13:c3:47:51:55:e4:fc:d9:c5:91:37:d2:85:70:38:db:cb:
         6b:51:10:29:7a:15:bb:48:94:e0:2b:84:df:4a:ac:58:bc:7e:
         4d:16:82:17:b9:cc:3f:5a:8e:13:2d:10:47:39:a1:a8:ff:55:
         78:60:94:cf:e0:96:86:00:51:4d:93:4d:c8:2a:e4:d3:4a:e8:
         d0:a6:02:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org