Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177BBE/4659591C02A411ED87D29C87C4F9AE02/0A66726A02A811EDAFD60F37C4F9AE02.roa
File:                     0A66726A02A811EDAFD60F37C4F9AE02.roa (raw, json)
Hash identifier:          ehgqlCQrEiJEVDXacpEN6aRJY6Ux0Dtp6mAfjyjVKrQ=
Subject key identifier:   C8:A6:0D:69:BC:C0:A7:FA:42:81:FA:08:46:42:29:A9:18:8D:4C:C0
Certificate issuer:       /CN=A9177BBE/serialNumber=C86280885892DDB490D9AF0AC1DD2D86EF9B3BE5
Certificate serial:       01C8
Authority key identifier: C8:62:80:88:58:92:DD:B4:90:D9:AF:0A:C1:DD:2D:86:EF:9B:3B:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGKAiFiS3bSQ2a8Kwd0thu-bO-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177BBE/4659591C02A411ED87D29C87C4F9AE02/0A66726A02A811EDAFD60F37C4F9AE02.roa
Signing time:             Wed 03 Apr 2024 05:07:00 +0000
ROA not before:           Wed 03 Apr 2024 05:07:00 +0000
ROA not after:            Thu 01 Aug 2024 00:00:00 +0000
asID:                     135602
IP address blocks:        103.18.248.0/24 maxlen: 24
                          103.18.251.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 456 (0x1c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177BBE/serialNumber=C86280885892DDB490D9AF0AC1DD2D86EF9B3BE5
        Validity
            Not Before: Apr  3 05:07:00 2024 GMT
            Not After : Aug  1 00:00:00 2024 GMT
        Subject: CN=660ce3f4-6ad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3e:90:e0:ab:e5:18:47:b3:34:70:80:19:f3:
                    1b:d9:b0:34:1a:a5:f1:2c:e8:b0:c5:b2:4a:21:8c:
                    7c:19:b7:47:93:98:ee:3c:c5:13:67:6a:86:95:e6:
                    f4:56:5a:49:90:2b:e0:70:4c:da:02:c9:a4:9a:b7:
                    10:1a:9f:61:52:d8:2d:39:1c:db:70:a7:71:26:e7:
                    39:df:dd:15:0a:dc:77:21:19:31:95:b9:36:02:cf:
                    98:82:2b:a9:31:47:df:f0:45:9d:92:9a:ef:bd:67:
                    58:d9:c3:9d:d7:fa:ee:00:02:cd:e6:3b:fd:ff:28:
                    7b:f5:50:e6:3e:29:d5:dd:e4:a1:8a:06:be:07:92:
                    b5:8f:52:c2:61:21:a8:1f:54:4e:3a:a3:25:91:35:
                    28:e9:17:22:5a:f0:f5:c8:94:c5:0c:e2:3b:25:51:
                    28:03:4a:11:a3:43:62:57:f4:10:9f:4e:c9:f2:ba:
                    cd:b5:d1:82:ad:b4:33:c4:49:bb:4d:cd:cd:0a:85:
                    5b:1d:dd:44:40:fa:7c:ea:fa:80:7f:66:af:53:4d:
                    cd:d8:62:01:d8:5f:f9:a2:e5:50:10:12:f6:fc:91:
                    45:b0:7c:9a:82:17:09:49:34:5b:6f:18:60:66:ba:
                    6a:a7:2f:a9:63:46:66:7c:79:3a:ca:ba:c5:a6:c8:
                    0b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A6:0D:69:BC:C0:A7:FA:42:81:FA:08:46:42:29:A9:18:8D:4C:C0
            X509v3 Authority Key Identifier:
                keyid:C8:62:80:88:58:92:DD:B4:90:D9:AF:0A:C1:DD:2D:86:EF:9B:3B:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177BBE/4659591C02A411ED87D29C87C4F9AE02/yGKAiFiS3bSQ2a8Kwd0thu-bO-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGKAiFiS3bSQ2a8Kwd0thu-bO-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177BBE/4659591C02A411ED87D29C87C4F9AE02/0A66726A02A811EDAFD60F37C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.248.0/24
                  103.18.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:63:0d:5b:ec:8f:35:ad:6a:27:69:72:99:48:52:c8:64:e5:
         91:0f:c2:a9:da:7f:a5:66:90:36:e6:c3:6b:26:cb:91:78:6f:
         e8:2f:e1:76:e3:b2:a3:4d:80:9c:09:13:f0:ad:d0:64:20:7d:
         94:28:47:be:04:51:7e:20:ec:4d:e8:1e:e9:68:9d:3b:08:36:
         3b:4a:b9:ec:12:59:fb:46:e8:be:15:15:23:f1:c3:6b:6b:cd:
         21:70:0a:c9:72:c6:47:f7:fa:81:cb:44:d8:4f:2c:59:23:f5:
         93:73:b0:4e:78:15:d4:ba:9c:d3:43:7d:ac:db:ea:45:09:83:
         43:49:03:6d:e0:46:47:6e:6d:7d:81:0b:0a:ae:37:c9:48:6e:
         68:96:24:a6:67:84:e1:bd:0c:72:3c:82:b2:7d:23:64:fc:52:
         cb:2d:7b:64:d3:c5:a5:46:26:4b:99:2c:24:f1:82:5f:5b:1f:
         11:0f:8a:51:79:5e:a5:e1:08:fc:c7:23:70:21:a5:0e:41:02:
         88:ae:e2:0d:e6:67:ff:9f:30:3b:81:4c:7c:b1:5a:13:d9:e4:
         a4:bc:df:44:3f:15:87:9e:56:00:f4:e5:0b:c6:38:60:2b:96:
         31:8f:2a:c8:3f:eb:8d:7b:10:5e:4a:a5:4b:c0:aa:2f:5f:ec:
         12:be:57:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-ams.rpki-client.org