Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/AD250A963DC611EBA35AB51DC4F9AE02.roa
File:                     AD250A963DC611EBA35AB51DC4F9AE02.roa (raw, json)
Hash identifier:          0NMN9sBw41E5hC4nNrbqWkp0TbtyOELeoikRVIcrUis=
Subject key identifier:   F2:C6:76:17:E5:C6:0D:B1:87:ED:63:D5:C1:FE:70:0E:39:C0:27:FC
Certificate issuer:       /CN=A919E833/serialNumber=48AAE00D13DFB3CCDFB3A7D25FDC356FADC5BEC8
Certificate serial:       22A9
Authority key identifier: 48:AA:E0:0D:13:DF:B3:CC:DF:B3:A7:D2:5F:DC:35:6F:AD:C5:BE:C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKrgDRPfs8zfs6fSX9w1b63Fvsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/AD250A963DC611EBA35AB51DC4F9AE02.roa
Signing time:             Wed 29 Sep 2021 04:42:28 +0000
ROA not before:           Wed 29 Sep 2021 04:42:28 +0000
ROA not after:            Fri 01 Jul 2022 00:00:00 +0000
asID:                     55808
IP address blocks:        110.164.167.0/24 maxlen: 24
                          110.164.236.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8873 (0x22a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E833/serialNumber=48AAE00D13DFB3CCDFB3A7D25FDC356FADC5BEC8
        Validity
            Not Before: Sep 29 04:42:28 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=6153eeb4-f9f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:93:51:12:8a:dc:4e:4b:b1:95:e9:73:49:7c:
                    84:82:b7:bf:68:e1:74:26:d2:fe:13:45:e4:b0:44:
                    e5:03:ee:df:07:0d:4a:38:4a:e5:99:16:5b:8b:48:
                    cc:32:92:15:87:47:c7:19:09:c8:77:0a:98:6b:71:
                    52:42:8a:12:0a:e8:26:06:ab:d5:20:a0:7d:46:6f:
                    da:58:68:10:c2:9f:a2:b7:1c:bf:65:59:a9:45:b6:
                    cf:6b:ef:f6:ff:5a:4c:51:e6:fe:bf:cd:c1:8d:08:
                    76:71:0a:c7:05:40:4e:84:65:d5:82:ab:ff:d0:ee:
                    1f:bd:e1:f2:55:e2:60:73:e0:70:15:e7:4f:82:76:
                    79:30:26:e8:51:82:e4:78:56:ce:ec:1f:9b:6e:f3:
                    5f:1d:f1:b7:8e:bd:e8:06:3c:25:95:9d:e4:5c:d9:
                    43:2f:40:be:aa:8a:cc:75:9f:50:1e:c6:b9:09:a0:
                    f2:a1:f5:f1:75:10:66:97:45:16:5b:a0:fd:82:ba:
                    db:d9:41:56:86:d8:13:30:11:c5:79:b2:db:cd:52:
                    b3:70:c8:ec:5b:48:79:0b:de:a9:ae:54:11:47:d9:
                    64:2e:9d:27:f5:03:ce:70:ee:c7:51:52:d6:0c:90:
                    b6:7e:d9:56:9d:1b:4e:54:cc:a2:7b:40:3d:b2:38:
                    5f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C6:76:17:E5:C6:0D:B1:87:ED:63:D5:C1:FE:70:0E:39:C0:27:FC
            X509v3 Authority Key Identifier:
                keyid:48:AA:E0:0D:13:DF:B3:CC:DF:B3:A7:D2:5F:DC:35:6F:AD:C5:BE:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/SKrgDRPfs8zfs6fSX9w1b63Fvsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKrgDRPfs8zfs6fSX9w1b63Fvsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/AD250A963DC611EBA35AB51DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.164.167.0/24
                  110.164.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:b9:45:d4:c8:ce:dc:30:8b:1c:eb:87:fa:d4:af:73:74:25:
         02:11:bd:45:16:75:fa:8d:59:42:12:e8:66:01:3f:88:d3:38:
         c8:27:07:90:3f:99:a8:9c:9a:f6:7c:7c:e5:0a:df:35:04:32:
         0b:06:67:de:da:ae:00:88:a2:b8:53:8d:09:5a:e6:02:d9:2e:
         fb:27:8a:b8:da:33:7c:91:1c:93:31:78:68:da:7a:7b:7a:78:
         e3:ce:70:1d:d0:5c:a6:e9:9a:2e:6c:53:0e:7e:2a:35:f6:84:
         de:9e:1c:8e:53:f3:b2:04:ea:21:60:18:cc:44:87:dd:16:86:
         de:34:e8:8e:97:53:14:92:1b:09:e1:a6:f9:18:39:47:cb:4d:
         92:99:66:ab:9c:08:f6:89:b8:2e:e0:36:4b:a7:81:13:34:0e:
         aa:d9:c1:78:e2:1c:b1:9e:70:7b:62:03:59:05:f1:07:d9:ae:
         7b:5f:f8:e8:25:1d:f4:97:da:c5:17:5d:35:54:ea:99:ae:04:
         03:4c:39:bd:49:0d:ba:48:01:58:ac:90:e4:42:de:2a:ce:cb:
         f1:47:9e:60:77:99:b3:fc:32:18:a3:7b:53:63:de:d4:de:7d:
         81:2c:d9:7c:fb:1b:ab:7f:36:66:fd:37:36:20:2b:fd:b8:35:
         84:cd:b7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:49 2024 by rpki-client on console-ams.rpki-client.org