Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a66333a3a2f34382d3438203d3e20323035303538.roa
File:                     323630323a666564613a66333a3a2f34382d3438203d3e20323035303538.roa (raw, json)
Hash identifier:          BU8stqidmRQsynJRhWEJK8chqQ8kxPsOFkTu4wdcQ70=
Subject key identifier:   37:55:CC:9C:9F:ED:4E:70:20:5E:D0:1A:62:44:59:34:FB:E2:A8:44
Certificate issuer:       /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial:       45CA9B56A480A71824164C7F08A7073A743B0FD1
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a66333a3a2f34382d3438203d3e20323035303538.roa
Signing time:             Mon 28 Feb 2022 01:00:07 +0000
ROA not before:           Mon 28 Feb 2022 00:55:07 +0000
ROA not after:            Mon 27 Feb 2023 01:00:07 +0000
asID:                     205058
IP address blocks:        2602:feda:f3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:ca:9b:56:a4:80:a7:18:24:16:4c:7f:08:a7:07:3a:74:3b:0f:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
        Validity
            Not Before: Feb 28 00:55:07 2022 GMT
            Not After : Feb 27 01:00:07 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:49:d1:fc:64:b1:13:da:e2:2d:fc:b2:ae:e2:
                    49:09:60:70:4b:bf:70:61:43:42:95:a8:9f:68:e9:
                    a1:c6:95:20:f2:82:de:b1:36:ad:c2:8e:8a:61:72:
                    62:df:e3:a4:b5:b0:e2:0b:b0:30:83:cc:f6:9b:53:
                    cd:c9:cd:e0:96:13:1b:f4:65:03:66:4b:f3:48:ae:
                    11:35:dd:f0:9c:a6:c4:f7:57:9a:bf:a8:08:33:cf:
                    69:aa:b5:86:93:44:64:b5:05:db:eb:5a:1a:14:df:
                    a0:45:52:1f:e5:30:ac:97:56:6c:e0:26:2e:07:87:
                    b4:68:70:69:e3:c3:3d:5f:a9:98:21:bd:53:68:26:
                    f4:6c:18:c6:28:b1:56:92:81:95:4f:b0:ac:58:0b:
                    f8:82:54:f6:74:71:29:c8:43:01:86:82:c3:66:24:
                    9a:13:3a:9e:8d:6b:3d:b7:4b:cc:ee:c3:8a:35:01:
                    8d:36:03:9c:5e:42:5e:43:3c:76:21:b4:68:c8:d1:
                    ce:12:ec:23:fd:ad:a1:4a:eb:23:3d:95:9b:03:58:
                    ec:11:c8:f3:e7:db:d8:9b:e0:23:a2:92:17:f7:52:
                    83:d6:26:f7:d1:88:9d:38:db:fb:c6:56:d2:78:4d:
                    cd:91:6c:50:68:29:61:25:ce:5d:72:8f:25:d1:c7:
                    0d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:55:CC:9C:9F:ED:4E:70:20:5E:D0:1A:62:44:59:34:FB:E2:A8:44
            X509v3 Authority Key Identifier:
                keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a66333a3a2f34382d3438203d3e20323035303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:f3::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:30:04:29:e0:45:c9:b5:b7:87:0a:12:5b:6d:18:fd:f8:fc:
         e3:87:25:4b:40:81:ed:17:f5:0b:b3:02:ba:f1:ee:96:e6:c6:
         7c:73:a9:76:e0:5d:73:5e:b3:ac:41:f7:8f:a1:a8:bd:f5:8f:
         21:e5:ad:2e:c5:77:aa:5d:dc:5a:2d:39:9d:05:2c:48:f4:0a:
         e8:fb:50:53:ee:25:c8:ce:24:71:75:f5:3c:0b:7f:5e:66:d4:
         ff:9a:2b:c6:d8:3e:99:d4:ad:67:b9:9a:54:20:72:70:09:34:
         42:15:4e:ad:82:21:de:53:c6:5f:f7:2a:9e:ad:4b:2d:2c:9c:
         3e:29:f8:84:e8:e4:57:a5:62:4e:bf:10:77:d4:01:40:b3:7a:
         62:11:bb:11:8a:34:06:56:bd:2f:8e:dc:3c:fd:fb:6a:7c:1b:
         f7:e9:2d:db:f3:ac:29:00:ee:4c:5a:1d:3f:46:3f:5a:31:2b:
         f7:94:0a:c8:d8:1e:40:88:a3:26:38:fc:f0:57:67:05:c3:6c:
         73:47:58:e3:56:fd:33:6c:21:8a:c3:fa:03:46:5a:1a:7c:bc:
         f1:94:36:62:68:94:a3:f9:28:c3:d0:ec:82:6a:ff:63:50:dd:
         38:a8:c9:1a:44:8d:00:a5:40:d3:2a:47:6a:66:4e:72:57:04:
         f2:1d:0c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org