Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/7E565BCC02EB11F084618D33C4F9AE02.roa
File:                     7E565BCC02EB11F084618D33C4F9AE02.roa (raw, json)
Hash identifier:          AZHVgAf1kSXl8BI/BQ5H295EutsYIoNTNb8l2dBtz+M=
Subject key identifier:   3B:D8:DA:0F:72:97:AA:14:01:F8:10:3E:C4:29:E5:4C:F9:F3:A8:98
Certificate issuer:       /CN=A9131579/serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756
Certificate serial:       0BDE
Authority key identifier: 9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/7E565BCC02EB11F084618D33C4F9AE02.roa
Signing time:             Mon 17 Mar 2025 04:51:31 +0000
ROA not before:           Mon 17 Mar 2025 04:51:31 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     151812
IP address blocks:        103.145.205.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3038 (0xbde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131579
        Validity
            Not Before: Mar 17 04:51:31 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=67d7aa53-e40f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:22:9f:8f:98:3d:1e:55:a3:08:71:0d:7e:fd:
                    d7:a6:69:b7:69:8b:b6:21:db:ce:64:22:11:d8:48:
                    f6:f7:2e:99:60:3c:fa:28:6e:15:04:4f:1e:73:25:
                    f4:b5:ec:b9:45:f1:86:9d:fb:03:8f:90:d7:fc:a8:
                    33:df:bc:21:91:39:68:32:6c:d6:e1:af:2a:07:4f:
                    87:f7:9f:ba:0c:9b:b7:ba:55:d9:4b:fd:96:a4:03:
                    1f:95:00:62:c1:d8:72:05:e0:08:c1:de:3d:3c:7c:
                    1a:ca:09:69:df:48:0d:7d:67:4f:2b:04:5f:f2:d6:
                    62:94:47:28:a5:a0:da:11:ec:07:c7:b7:a4:ba:25:
                    7c:3b:42:45:c3:27:f6:87:63:50:cb:0c:84:ba:6d:
                    c2:e0:25:ae:23:d6:ed:b3:87:42:b4:8b:01:b2:f3:
                    81:46:1b:07:30:fb:81:17:71:94:f5:9d:a1:a2:c2:
                    0e:40:10:f2:af:fb:62:cf:71:f9:b4:e0:45:d9:31:
                    33:6e:d7:6d:80:60:98:f4:13:38:64:b6:88:7f:77:
                    7e:dd:e2:0e:a0:71:47:5c:b8:77:de:9a:17:76:33:
                    a2:1c:34:8b:01:8e:0b:10:a0:34:95:4a:48:d3:7d:
                    07:55:3a:e4:b9:fa:61:e1:32:bb:2d:0e:e5:b1:92:
                    e4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D8:DA:0F:72:97:AA:14:01:F8:10:3E:C4:29:E5:4C:F9:F3:A8:98
            X509v3 Authority Key Identifier:
                keyid:9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/7E565BCC02EB11F084618D33C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:bc:5b:fa:bd:3d:3e:59:5a:2b:c4:0f:08:7d:f5:19:ab:4f:
         89:d5:fd:89:2e:ba:cc:e9:00:5c:1d:6d:6f:00:3e:e4:5a:f5:
         fb:c3:00:3c:17:e7:d5:41:2d:85:d3:84:5b:4b:aa:cd:0c:e1:
         47:49:f7:37:f6:66:89:01:2a:99:54:66:0f:62:5c:c8:b4:e4:
         c6:3c:eb:08:cc:ad:fa:75:85:1a:eb:b5:66:41:e5:bd:bd:c1:
         7c:90:db:fd:37:d8:3b:34:22:3c:ff:8a:0c:87:47:42:20:0e:
         a8:e3:05:bb:fc:a2:79:0c:cd:90:11:de:a4:ba:e8:a6:1d:d6:
         72:34:57:79:ca:6d:19:87:fe:70:d8:b1:1f:c6:7b:ea:6c:2d:
         e7:4b:1a:c9:66:81:b2:d0:ef:54:50:a3:aa:5b:8f:e1:b5:24:
         66:13:82:98:1e:46:4e:e5:91:d5:e4:67:df:d6:ba:0c:7b:72:
         e7:1a:26:02:e3:78:e3:00:57:74:70:a2:7a:99:f1:66:03:d8:
         f3:24:1d:2d:7e:c9:8d:7b:48:6c:5c:a3:b1:50:ac:97:e0:b4:
         40:b3:b5:24:d7:ce:95:f0:38:5f:71:bc:7b:d5:c3:ec:86:a4:
         b7:22:eb:21:31:0b:ed:5a:f2:35:c9:7c:9b:f8:2f:79:aa:49:
         4d:23:26:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:55:21 2025 by rpki-client