Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/738F1FF4E62011EF823A5743C4F9AE02.roa
File:                     738F1FF4E62011EF823A5743C4F9AE02.roa (raw, json)
Hash identifier:          tMNZC0VUJBoqx/pRE7YLRi31cR25uIlEUZRa4EB4a4s=
Subject key identifier:   67:7F:88:04:29:08:38:F9:63:DD:9E:7F:56:A6:CE:7E:52:B8:5D:02
Certificate issuer:       /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Certificate serial:       FA
Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/738F1FF4E62011EF823A5743C4F9AE02.roa
Signing time:             Sat 08 Feb 2025 13:27:32 +0000
ROA not before:           Sat 08 Feb 2025 13:27:32 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     834
IP address blocks:        103.72.195.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155647
        Validity
            Not Before: Feb  8 13:27:32 2025 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=67a75bc4-4fbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:db:e6:64:73:da:04:68:32:c8:28:07:53:af:
                    a0:94:d3:3a:49:cd:93:6b:3d:bd:e7:b7:37:1e:30:
                    fa:15:e1:78:a5:57:1f:29:e9:0b:06:7e:3b:27:f5:
                    61:cf:98:22:e0:a5:5c:fc:09:40:f9:2f:10:ee:f8:
                    31:4c:82:ce:da:2d:b4:40:d6:9c:e0:3c:c7:35:de:
                    2f:3d:77:cc:5e:e7:6a:e5:7b:f2:fb:82:71:6b:5d:
                    de:ca:b0:c7:5c:48:55:bd:4a:4e:47:e6:e4:9a:e8:
                    f0:45:90:a7:85:b2:53:76:61:df:9a:75:d2:3f:b8:
                    75:66:ec:d7:e1:01:0c:19:f8:76:02:64:92:1c:5e:
                    b1:08:a9:ee:fb:54:1a:25:59:a4:eb:f5:cb:1e:db:
                    88:ca:46:da:37:ed:3d:d3:b7:8a:fc:1f:f4:14:f1:
                    81:64:63:0c:f3:ce:43:aa:d2:74:29:86:c7:6a:cd:
                    ee:0d:db:88:1a:a9:7b:84:c4:fd:36:48:67:7b:2a:
                    66:72:bd:11:59:06:bb:24:97:32:9c:74:5c:46:a1:
                    ee:77:b0:66:fa:1f:b8:07:84:3d:e3:c8:87:2a:e6:
                    55:47:36:fa:91:b4:ce:c0:5c:f9:13:ec:a3:87:76:
                    99:3c:10:91:0d:c8:7e:5d:32:2f:ab:aa:89:ff:9d:
                    1a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7F:88:04:29:08:38:F9:63:DD:9E:7F:56:A6:CE:7E:52:B8:5D:02
            X509v3 Authority Key Identifier:
                keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/738F1FF4E62011EF823A5743C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.72.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:0f:47:68:d9:8d:f2:8e:b3:97:bc:6d:c9:cb:06:5e:3a:19:
         4a:1d:e3:cd:da:61:5b:8c:76:79:c3:7e:21:cd:6b:99:b3:5a:
         d2:5e:44:21:d7:40:e4:a8:6f:11:b2:cc:ab:f2:05:61:32:26:
         a0:26:12:70:1c:9f:14:09:93:c0:a6:05:e2:c1:03:42:c6:ab:
         65:72:48:b7:df:07:6b:03:f3:35:29:13:39:a6:98:1b:ad:e4:
         08:41:ba:61:6b:77:7d:9e:14:b2:21:c0:23:e4:34:bd:e4:89:
         fa:02:3f:ff:7f:d1:05:fc:47:b4:6c:f9:e5:08:e4:6a:5d:94:
         79:12:d3:02:c0:c1:40:e3:e4:61:31:63:0f:ba:63:92:e2:4e:
         ca:45:40:f5:0e:91:78:64:4f:2b:38:cb:f7:7d:ed:fb:66:78:
         a0:9f:99:be:5b:7f:8f:72:40:5a:8a:d3:d3:36:86:a3:f4:12:
         80:66:33:65:06:0f:8b:32:ce:19:f9:ff:33:7f:bd:56:9d:9b:
         6c:a2:3e:3c:1c:ea:94:40:e9:67:aa:0d:d0:04:79:f7:18:68:
         7f:40:a4:5c:3d:1d:df:df:29:f3:3d:62:a4:bb:30:f3:c5:dc:
         4a:8d:c8:ab:47:ce:77:c8:22:25:af:59:04:83:f1:7e:e3:07:
         af:89:0b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:06:55 2025 by rpki-client