Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E7D93546BED111EFB48CFD5BC4F9AE02.roa
File:                     E7D93546BED111EFB48CFD5BC4F9AE02.roa (raw, json)
Hash identifier:          7MjDsqCsNmMW2NhNvIHVBR2rYWv83bK8BkeSgZKAucU=
Subject key identifier:   35:E6:1D:D8:C6:62:FE:8E:61:61:3B:04:89:6F:40:29:68:BD:67:A2
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2017
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E7D93546BED111EFB48CFD5BC4F9AE02.roa
Signing time:             Fri 20 Dec 2024 12:57:02 +0000
ROA not before:           Fri 20 Dec 2024 12:57:02 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     136744
IP address blocks:        175.110.99.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8215 (0x2017)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134
        Validity
            Not Before: Dec 20 12:57:02 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6765699e-c2fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:03:d3:5f:59:a6:a6:d9:43:f8:eb:41:d0:36:
                    1f:68:a8:9f:2e:44:5f:48:02:c9:96:b5:fa:f8:c2:
                    03:a2:77:22:86:45:74:6f:22:c3:68:7f:5a:c2:8c:
                    05:1e:e2:5e:5c:e7:4e:f6:9f:ce:57:4e:a2:9a:1a:
                    7d:46:d2:3b:e1:6a:2b:e6:81:9a:8b:77:d1:db:0c:
                    94:b9:39:8d:d7:6a:c2:3b:28:26:89:a3:5a:0a:4c:
                    f8:c1:00:21:53:2b:9f:6b:2a:5d:b9:d0:d1:e1:2f:
                    a7:2c:08:af:5a:84:28:c3:25:6d:72:da:4a:96:54:
                    2e:e9:89:50:28:05:b5:a3:ce:d5:42:d8:94:0d:68:
                    00:95:61:68:23:0a:43:e4:ab:ba:77:d3:7c:85:a8:
                    f7:e6:5c:af:15:a0:48:bb:bd:28:14:9b:df:33:1e:
                    96:f9:9f:e7:e1:18:d8:8a:c1:cb:5c:bf:2c:71:61:
                    24:d1:ea:73:64:04:3d:e0:09:05:c7:ec:aa:38:14:
                    1a:d9:65:2f:a9:c5:5e:b0:08:89:82:a6:13:92:7c:
                    12:c5:57:1e:54:2b:3c:0f:a0:3a:b6:8f:95:00:59:
                    8a:b9:e0:79:9f:d3:f2:77:92:43:3a:3e:a7:e9:46:
                    53:9e:76:fb:b8:0c:63:2e:29:dd:20:13:05:26:74:
                    3b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E6:1D:D8:C6:62:FE:8E:61:61:3B:04:89:6F:40:29:68:BD:67:A2
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E7D93546BED111EFB48CFD5BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.110.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:af:09:14:cd:2b:5d:87:cd:2c:c2:00:f5:bc:7e:26:eb:78:
         76:b3:95:ea:4e:f2:e1:49:e5:9f:b0:9f:8f:f9:ae:50:2b:83:
         7e:fb:72:04:c6:36:a6:a2:04:ce:9e:d4:0b:78:60:1c:6b:8f:
         97:62:21:ef:c0:2b:8c:fe:dc:31:5b:c3:33:0e:f4:70:6d:3f:
         dd:28:d6:1a:f6:80:64:e5:fb:41:86:38:9b:32:34:5f:c0:41:
         91:cf:f9:e2:80:d5:20:ee:0c:06:59:17:07:4b:32:a4:30:a9:
         b8:33:dd:8f:92:43:b7:15:8f:53:5e:2f:df:3a:20:4e:8d:aa:
         4f:c4:8f:c9:20:2a:17:aa:6f:d1:8b:44:8c:96:b1:be:a5:01:
         cb:01:e4:50:f6:e6:68:c9:0c:6b:36:f1:02:25:bc:cd:c7:f8:
         ae:08:d2:0d:ff:59:76:3b:91:09:9b:5f:f8:ad:5d:e4:90:79:
         5a:36:73:10:34:e6:80:72:61:8d:f5:16:4e:88:22:5f:a0:5a:
         4b:56:9a:e3:dc:57:c0:05:fb:c9:4f:ae:7b:84:88:ed:60:f9:
         08:99:a5:68:7a:2a:53:7a:b0:45:ae:07:c0:b1:33:ba:a3:0e:
         42:0a:07:d1:41:76:a9:11:10:3a:cd:64:c1:44:9e:c0:03:fe:
         8e:6a:8b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:53:34 2025 by rpki-client