Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154B30/EE394F4A1CFD11EBB38D8279C4F9AE02/88A1A8EC1CFF11EB9E46DD7DC4F9AE02.roa
File:                     88A1A8EC1CFF11EB9E46DD7DC4F9AE02.roa (raw, json)
Hash identifier:          ItQpZAjfArmNubGkehp9aPYnXWZChwJ82mCfUtLClzw=
Subject key identifier:   D6:31:02:C7:E5:93:98:49:32:96:2A:3D:8C:DC:20:36:F8:75:D7:12
Certificate issuer:       /CN=A9154B30/serialNumber=1D6F1CCC8A585FD1D01DC2FFBDB1B62D8A3B5976
Certificate serial:       86
Authority key identifier: 1D:6F:1C:CC:8A:58:5F:D1:D0:1D:C2:FF:BD:B1:B6:2D:8A:3B:59:76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HW8czIpYX9HQHcL_vbG2LYo7WXY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154B30/EE394F4A1CFD11EBB38D8279C4F9AE02/88A1A8EC1CFF11EB9E46DD7DC4F9AE02.roa
Signing time:             Wed 06 Jan 2021 00:46:54 +0000
ROA not before:           Wed 06 Jan 2021 00:46:54 +0000
ROA not after:            Thu 31 Mar 2022 00:00:00 +0000
asID:                     132404
IP address blocks:        103.127.116.0/23 maxlen: 23
                          103.127.116.0/24 maxlen: 24
                          103.127.117.0/24 maxlen: 24
                          103.127.118.0/23 maxlen: 23
                          103.127.118.0/24 maxlen: 24
                          103.127.119.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154B30/serialNumber=1D6F1CCC8A585FD1D01DC2FFBDB1B62D8A3B5976
        Validity
            Not Before: Jan  6 00:46:54 2021 GMT
            Not After : Mar 31 00:00:00 2022 GMT
        Subject: CN=5ff5087e-2cc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e2:ff:07:a3:f0:65:ac:a4:88:01:5f:a8:77:
                    95:7a:c3:11:e8:a8:44:76:b8:35:29:ed:ec:fc:01:
                    a8:66:f1:f1:e2:95:95:71:0b:63:15:3c:cd:33:00:
                    4e:6a:64:8f:cd:e2:62:f1:62:a0:54:cf:fb:88:34:
                    5e:3d:b2:24:e0:9f:4b:df:94:d7:20:20:d2:e0:ad:
                    26:a3:7b:54:59:30:72:76:6c:af:29:ba:6c:3d:bb:
                    db:f8:1e:0a:20:11:d9:4a:37:68:f9:bf:e2:71:df:
                    65:94:e6:3f:25:03:ca:11:c3:1b:42:8a:20:29:52:
                    fb:8c:22:ac:43:66:d9:93:9f:b8:ce:94:06:31:66:
                    40:7d:ff:86:8b:b5:3d:83:f3:26:57:72:4e:9c:4a:
                    c9:db:dd:43:ee:c5:f3:e8:80:b2:28:d3:da:04:84:
                    8c:2a:45:8f:c0:e2:56:c6:ee:0f:18:13:71:8d:fc:
                    97:91:8f:e2:48:75:74:fb:fd:23:32:bd:ae:eb:97:
                    9e:10:66:2e:d1:58:e0:16:d1:62:15:82:97:b9:43:
                    61:14:11:9b:09:9b:4c:b1:d6:db:6a:fd:d4:bf:0c:
                    f9:b4:3c:31:02:d3:d4:ba:95:96:7b:4d:43:ab:12:
                    e9:97:9b:fb:1c:6f:dc:06:68:45:1f:3f:88:b5:16:
                    63:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:31:02:C7:E5:93:98:49:32:96:2A:3D:8C:DC:20:36:F8:75:D7:12
            X509v3 Authority Key Identifier:
                keyid:1D:6F:1C:CC:8A:58:5F:D1:D0:1D:C2:FF:BD:B1:B6:2D:8A:3B:59:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154B30/EE394F4A1CFD11EBB38D8279C4F9AE02/HW8czIpYX9HQHcL_vbG2LYo7WXY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HW8czIpYX9HQHcL_vbG2LYo7WXY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154B30/EE394F4A1CFD11EBB38D8279C4F9AE02/88A1A8EC1CFF11EB9E46DD7DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:22:37:76:97:19:eb:cc:34:f2:2a:2b:26:d2:44:5e:89:a6:
         e0:6a:b7:21:32:d2:d1:35:8c:a2:41:ab:a8:f4:b2:f6:8d:37:
         bd:34:61:3e:8a:9f:2e:c0:b6:3d:4d:37:be:23:96:6d:b7:96:
         f4:2c:b2:ae:ba:34:3a:6b:18:28:ec:6f:86:1b:42:ef:ac:d9:
         9c:63:e2:08:ca:cc:ac:23:4e:31:55:fd:99:2b:97:0e:4b:a4:
         f8:10:00:52:2c:91:ac:cf:4f:e2:58:b0:56:ef:34:62:db:e8:
         fd:bb:89:af:1b:be:33:28:29:13:49:af:3c:03:3e:07:0c:b0:
         5f:ef:26:27:f3:9b:2c:df:a8:4b:7d:f9:be:64:d0:38:20:ed:
         db:80:29:b0:b8:e4:ff:cd:b9:72:68:d0:49:fb:57:6b:49:6c:
         db:e7:af:40:42:89:ef:58:99:62:1d:e9:ce:e8:b2:65:ad:13:
         79:9e:2f:10:bb:91:52:28:19:f6:bc:ad:c6:0a:3c:cb:d9:7e:
         7a:aa:62:1a:65:e2:89:22:a1:9d:fb:01:c2:45:61:cb:21:02:
         97:e2:e4:79:09:70:b0:1d:45:22:79:40:35:04:6e:13:1d:f7:
         da:7a:bc:f4:a5:7e:0a:b1:34:3f:20:db:00:36:6e:bd:c5:e7:
         7f:83:3e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:07 2024 by rpki-client on console-fra.rpki-client.org