Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160476/61CD5DFA9AC911EA96BCF33BC4F9AE02/913402383C8511EC8DB49727C4F9AE02.roa
File:                     913402383C8511EC8DB49727C4F9AE02.roa (raw, json)
Hash identifier:          z/QmtoW84yzbrNPfTQlU5fC5p4DpI2Awg5s4dZ5iQ7o=
Subject key identifier:   6A:F3:F1:04:3D:63:B4:53:3F:B2:C9:19:BE:56:E4:BA:60:02:FB:1C
Certificate issuer:       /CN=A9160476/serialNumber=367E4A6BA966F43992414A777D3DA1DAB4BE3E8F
Certificate serial:       0774
Authority key identifier: 36:7E:4A:6B:A9:66:F4:39:92:41:4A:77:7D:3D:A1:DA:B4:BE:3E:8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn5Ka6lm9DmSQUp3fT2h2rS-Po8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160476/61CD5DFA9AC911EA96BCF33BC4F9AE02/913402383C8511EC8DB49727C4F9AE02.roa
Signing time:             Mon 31 Oct 2022 22:48:34 +0000
ROA not before:           Mon 31 Oct 2022 22:48:34 +0000
ROA not after:            Wed 01 Mar 2023 00:00:00 +0000
asID:                     44592
IP address blocks:        2407:2580::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1908 (0x774)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160476/serialNumber=367E4A6BA966F43992414A777D3DA1DAB4BE3E8F
        Validity
            Not Before: Oct 31 22:48:34 2022 GMT
            Not After : Mar  1 00:00:00 2023 GMT
        Subject: CN=636050c2-e13f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:60:2f:f2:7d:79:17:93:7c:d9:b3:8f:be:e1:
                    85:ad:ec:ef:a7:d8:a6:3f:0f:ea:89:15:5c:0b:c5:
                    0c:f2:8a:34:41:73:c2:14:61:50:8f:64:14:a7:9b:
                    cd:ed:b9:ac:36:fe:4c:2d:dc:33:e4:da:f3:81:94:
                    13:57:53:3c:73:2b:4e:0d:06:59:30:0a:ae:54:e9:
                    4a:2d:32:bf:7f:f1:f9:f3:ac:76:3f:4f:d0:3c:6b:
                    30:4e:70:0c:77:2a:c7:2b:4b:4c:8c:ec:c5:bb:89:
                    7a:34:80:f3:b3:63:63:04:35:00:61:6c:e1:a9:a0:
                    60:2c:18:24:ae:5e:58:24:e3:4a:17:7c:fa:7a:b5:
                    ca:64:c0:82:03:43:b5:58:00:a4:c3:af:6e:11:5b:
                    4f:50:79:82:3d:95:37:f2:50:bf:4b:16:bf:b6:69:
                    f0:65:45:fb:39:35:84:20:81:9a:7b:06:30:48:6d:
                    a2:be:bc:1d:e0:39:a5:9d:97:0f:f6:08:96:1d:88:
                    e3:17:6a:81:30:f6:06:18:40:04:5a:2d:13:10:ba:
                    3b:fd:72:b7:15:82:26:e3:e3:a6:37:18:34:f6:c4:
                    15:f4:2a:82:bb:90:cc:b1:0f:29:c3:d8:46:0e:45:
                    7c:26:a7:c8:cb:a7:c3:a8:20:3f:6a:6d:f6:cb:69:
                    51:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F3:F1:04:3D:63:B4:53:3F:B2:C9:19:BE:56:E4:BA:60:02:FB:1C
            X509v3 Authority Key Identifier:
                keyid:36:7E:4A:6B:A9:66:F4:39:92:41:4A:77:7D:3D:A1:DA:B4:BE:3E:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160476/61CD5DFA9AC911EA96BCF33BC4F9AE02/Nn5Ka6lm9DmSQUp3fT2h2rS-Po8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn5Ka6lm9DmSQUp3fT2h2rS-Po8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160476/61CD5DFA9AC911EA96BCF33BC4F9AE02/913402383C8511EC8DB49727C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:2580::/33

    Signature Algorithm: sha256WithRSAEncryption
         8b:e6:6e:0d:7f:40:f4:ac:1a:6a:72:63:96:5c:89:b8:0c:48:
         71:c0:39:f1:20:14:fe:28:df:be:0d:5b:59:5c:0e:62:ce:c5:
         3d:e0:58:b7:5d:ce:92:e4:4b:08:ca:2d:24:f4:11:46:93:45:
         66:84:a7:ed:0a:16:21:43:ed:7e:0d:17:63:87:a0:63:a4:bf:
         76:65:93:06:b1:f5:57:49:56:ee:fd:92:cd:49:20:99:c8:05:
         57:bd:da:d5:b2:b4:1b:a9:87:de:bc:3f:20:29:b9:fe:ff:55:
         f0:a6:90:9e:73:5e:c6:58:d8:34:b2:94:51:fd:42:73:47:bc:
         f8:14:15:80:11:e7:d0:e4:27:da:3a:70:15:4e:f0:a9:40:41:
         9a:5d:e7:34:da:36:a6:b9:56:62:3f:c3:b4:ec:cd:74:e4:48:
         89:48:81:3b:1d:e5:ed:76:38:6f:e2:ee:fc:f2:ea:7d:d9:4c:
         cd:e9:5a:97:f9:4e:d7:ad:62:34:2d:c2:11:29:c2:a8:84:e7:
         93:ec:2e:fa:f4:fc:a8:fe:99:ee:49:96:7c:4c:4c:53:25:74:
         57:8c:a1:90:b6:40:f7:20:18:85:91:62:cd:d2:38:6a:34:71:
         4d:15:57:cb:ad:d5:92:95:ef:de:38:c9:9c:ae:46:0b:f4:a8:
         37:e5:8e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:09 2024 by rpki-client on console-fra.rpki-client.org