Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE0C4/6A9E3BD8F14711E99A9AB712C4F9AE02/2D289088481F11ECB355097BC4F9AE02.roa
File:                     2D289088481F11ECB355097BC4F9AE02.roa (raw, json)
Hash identifier:          fJmZ+rJsQev0rS7XS71DnjmlESposhLV27o8cOUoXOY=
Subject key identifier:   69:03:DB:A9:8A:DD:9C:2C:61:E2:1C:4B:C8:B5:AB:F9:EE:84:95:34
Certificate issuer:       /CN=A91AE0C4/serialNumber=E11FE937006A25D7C605A5E43B492B286C64998C
Certificate serial:       0B28
Authority key identifier: E1:1F:E9:37:00:6A:25:D7:C6:05:A5:E4:3B:49:2B:28:6C:64:99:8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4R_pNwBqJdfGBaXkO0krKGxkmYw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE0C4/6A9E3BD8F14711E99A9AB712C4F9AE02/2D289088481F11ECB355097BC4F9AE02.roa
Signing time:             Sun 28 Aug 2022 19:56:10 +0000
ROA not before:           Sun 28 Aug 2022 19:56:10 +0000
ROA not after:            Tue 31 Oct 2023 00:00:00 +0000
asID:                     38052
IP address blocks:        202.53.186.0/24 maxlen: 24
                          202.53.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2856 (0xb28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE0C4/serialNumber=E11FE937006A25D7C605A5E43B492B286C64998C
        Validity
            Not Before: Aug 28 19:56:10 2022 GMT
            Not After : Oct 31 00:00:00 2023 GMT
        Subject: CN=630bc85a-99be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:80:b5:69:60:31:92:db:c6:5a:87:29:53:0e:
                    cc:e5:ca:92:b5:87:33:18:e6:a4:db:5e:c7:59:21:
                    25:c6:6a:7c:cf:85:4f:fe:b7:f1:60:56:ae:6f:7d:
                    d9:2c:4c:64:a5:bd:62:a9:fe:3a:01:3a:2b:10:ee:
                    3c:b9:be:f0:3e:b2:1b:a4:0e:54:2c:7f:10:59:2b:
                    b0:41:99:c9:fc:5e:82:d0:09:83:a9:95:13:f4:c9:
                    62:36:2f:e0:13:f5:aa:84:36:88:2a:e9:18:7c:cc:
                    f0:95:07:11:7b:12:d8:62:4d:ea:58:32:e8:3d:57:
                    ed:dc:50:1b:23:ab:eb:e6:b8:ca:1d:f9:aa:36:aa:
                    bd:10:ab:ec:a4:b4:fa:9b:e0:89:2a:61:8a:c3:fc:
                    15:42:4c:82:c2:1c:af:3b:37:1c:90:d0:04:1f:0f:
                    70:a7:40:8b:ec:6a:b3:47:2c:40:f0:fc:3b:2b:c4:
                    c5:76:b8:0a:fd:d5:d1:6c:20:35:3a:54:01:90:26:
                    cb:30:bc:89:ef:3b:06:b9:3a:c8:a9:74:75:c2:74:
                    c5:4d:d4:35:5f:5b:87:70:09:28:d6:ce:2c:8d:ad:
                    2d:a0:f7:e8:b9:5e:14:5c:2c:d2:b9:eb:2b:49:97:
                    5b:ff:7c:1e:ef:98:30:7a:3a:8c:21:aa:1d:7c:33:
                    56:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:03:DB:A9:8A:DD:9C:2C:61:E2:1C:4B:C8:B5:AB:F9:EE:84:95:34
            X509v3 Authority Key Identifier:
                keyid:E1:1F:E9:37:00:6A:25:D7:C6:05:A5:E4:3B:49:2B:28:6C:64:99:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE0C4/6A9E3BD8F14711E99A9AB712C4F9AE02/4R_pNwBqJdfGBaXkO0krKGxkmYw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4R_pNwBqJdfGBaXkO0krKGxkmYw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE0C4/6A9E3BD8F14711E99A9AB712C4F9AE02/2D289088481F11ECB355097BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.53.186.0/24
                  202.53.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:71:e0:90:31:36:f0:01:42:91:14:ca:54:e4:2a:6d:f0:a6:
         c5:be:62:ca:cb:8d:3c:74:42:16:e7:91:0d:1f:7d:02:90:ca:
         01:a8:5e:91:38:75:fa:39:70:d6:ac:43:0f:ba:bd:00:3f:50:
         5f:e0:5a:31:67:f5:06:ae:c7:b9:52:bb:01:b2:b1:16:df:03:
         86:03:97:4c:a1:d8:6c:ed:9c:17:46:2a:53:e5:6b:21:6e:ec:
         f5:e6:ce:e0:6c:61:cb:d1:fc:9e:e2:89:0d:7f:90:4d:02:15:
         21:c1:5c:6c:c5:ec:a5:71:25:db:50:5f:fa:68:2b:51:7f:b2:
         ae:ba:41:90:60:7e:f0:43:68:ee:62:fe:6f:ea:31:10:eb:b3:
         59:29:c7:e0:02:6c:e4:5d:26:c8:61:b5:41:96:83:e6:82:43:
         b8:f0:d3:c6:0e:1b:6d:72:b3:a0:1f:97:6c:91:ca:63:02:be:
         37:96:94:17:78:5a:50:8e:f5:21:c0:e3:08:4f:f0:96:a4:e5:
         77:a8:50:84:7e:27:2c:08:da:8e:2a:41:be:68:dd:4e:e5:de:
         65:3a:8d:f0:9a:85:ee:74:fe:d4:41:8f:3f:27:27:f8:20:5c:
         53:db:e9:ad:97:4d:be:a2:bb:fc:6b:7e:42:3f:27:b5:77:ec:
         67:cd:17:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:37 2024 by rpki-client on console-fra.rpki-client.org