Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a663231303a3a2f34342d3438203d3e2037363033.roa
File:                     323630323a666564613a663231303a3a2f34342d3438203d3e2037363033.roa (raw, json)
Hash identifier:          kRdpC3yOmnCYI7rb012+IIKADGSNlM5pfU6l22+pW8w=
Subject key identifier:   4A:F1:55:BA:B0:19:C0:10:54:EF:AA:DB:A8:70:81:8E:20:B8:88:BB
Certificate issuer:       /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial:       176F233A440A1093DB3EDFEB99EF56AB8B253EC2
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a663231303a3a2f34342d3438203d3e2037363033.roa
Signing time:             Thu 30 Jun 2022 07:15:24 +0000
ROA not before:           Thu 30 Jun 2022 07:10:24 +0000
ROA not after:            Thu 29 Jun 2023 07:15:24 +0000
asID:                     7603
IP address blocks:        2602:feda:f210::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:6f:23:3a:44:0a:10:93:db:3e:df:eb:99:ef:56:ab:8b:25:3e:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
        Validity
            Not Before: Jun 30 07:10:24 2022 GMT
            Not After : Jun 29 07:15:24 2023 GMT
        Subject: CN=3082010A0282010100DC1F8EEA9BEBFA4E2E5B3C2F5A5CA4AB0693288F490E69968DA06E9B46758508ED83C0242DFDF9954206B692DC87616680DD52B3172935804BFF81E16CC9E5A36A87AAD62BAD533BB52439355FDB5934E1A66F262D1DEA6ED17812BDB410BA5A880EB68D1C7C4D30FC172EB697D97AF37813688BBDB36D463608E27913546EB83EAE6CFC209CCAE8B38A99B820F5B0E359C5A4778BBE37BC354B878B5ED57F811E6EDDB3BD927290B1C834B1F75F298FDFDFADF7803D4869B85BD9AE0C92B2864FCC6149326411B3BBB4BDF6A5759DE2C248A8F8B417C55EB7603FFC3B5F48A009CE3992907BDA3CAEB60510E53AF8B797725E5C429D0CCBAEC230685E8A03690203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1f:8e:ea:9b:eb:fa:4e:2e:5b:3c:2f:5a:5c:
                    a4:ab:06:93:28:8f:49:0e:69:96:8d:a0:6e:9b:46:
                    75:85:08:ed:83:c0:24:2d:fd:f9:95:42:06:b6:92:
                    dc:87:61:66:80:dd:52:b3:17:29:35:80:4b:ff:81:
                    e1:6c:c9:e5:a3:6a:87:aa:d6:2b:ad:53:3b:b5:24:
                    39:35:5f:db:59:34:e1:a6:6f:26:2d:1d:ea:6e:d1:
                    78:12:bd:b4:10:ba:5a:88:0e:b6:8d:1c:7c:4d:30:
                    fc:17:2e:b6:97:d9:7a:f3:78:13:68:8b:bd:b3:6d:
                    46:36:08:e2:79:13:54:6e:b8:3e:ae:6c:fc:20:9c:
                    ca:e8:b3:8a:99:b8:20:f5:b0:e3:59:c5:a4:77:8b:
                    be:37:bc:35:4b:87:8b:5e:d5:7f:81:1e:6e:dd:b3:
                    bd:92:72:90:b1:c8:34:b1:f7:5f:29:8f:df:df:ad:
                    f7:80:3d:48:69:b8:5b:d9:ae:0c:92:b2:86:4f:cc:
                    61:49:32:64:11:b3:bb:b4:bd:f6:a5:75:9d:e2:c2:
                    48:a8:f8:b4:17:c5:5e:b7:60:3f:fc:3b:5f:48:a0:
                    09:ce:39:92:90:7b:da:3c:ae:b6:05:10:e5:3a:f8:
                    b7:97:72:5e:5c:42:9d:0c:cb:ae:c2:30:68:5e:8a:
                    03:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F1:55:BA:B0:19:C0:10:54:EF:AA:DB:A8:70:81:8E:20:B8:88:BB
            X509v3 Authority Key Identifier:
                keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a663231303a3a2f34342d3438203d3e2037363033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:f210::/44

    Signature Algorithm: sha256WithRSAEncryption
         31:ab:a4:1e:0c:4b:7a:4c:08:d8:9d:a4:d2:4d:45:15:c4:e6:
         fa:62:60:7e:b7:c0:40:8a:c6:66:e1:d5:0d:a1:df:6e:04:61:
         c5:9b:4c:45:de:ce:9e:d5:98:40:b8:f9:3d:70:2c:9d:b5:1c:
         f7:43:85:0f:85:3e:67:eb:66:f7:0e:fa:86:1b:03:b3:f8:1e:
         1e:50:f7:84:13:09:c4:0a:cc:58:18:a9:fc:ec:28:31:d3:7c:
         f2:56:ae:54:f7:f6:87:c1:87:11:82:d6:c1:73:8a:dd:49:ff:
         ff:22:c6:43:2f:c9:6e:4d:3e:21:20:3b:8a:10:6e:41:04:93:
         9f:68:ce:e9:70:82:d0:ec:fb:56:65:50:27:c9:ed:38:58:a8:
         a2:6f:70:10:1f:14:91:6f:3d:22:66:ef:28:c5:d1:79:ff:ae:
         d5:cf:36:8c:76:a2:71:31:a5:3f:b5:24:45:2d:2a:76:20:2c:
         34:33:0e:dc:17:bf:c5:20:47:61:ba:a7:09:cc:dc:a6:24:2a:
         f6:be:f3:29:24:f3:74:22:73:db:ef:0e:90:56:eb:bd:f0:7c:
         ad:54:06:d3:f5:d3:77:bd:ef:a0:1f:b5:cf:2f:0b:a9:3b:c3:
         97:8a:c9:75:e4:8c:52:cb:3b:61:b3:3a:40:78:36:31:fe:29:
         77:7e:f9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org