Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4610/90E76248CEA611EDA5F09142C4F9AE02/8E62A81C2C1511EEB8210121C4F9AE02.roa
File:                     8E62A81C2C1511EEB8210121C4F9AE02.roa (raw, json)
Hash identifier:          Mg2KRW7xVBr4w5ethvdfNgd8BbcThtYHRJpVzSVdRak=
Subject key identifier:   9E:7D:20:C9:3D:93:AB:C9:26:E0:F3:50:52:2B:8B:DA:DF:FF:D2:6F
Certificate issuer:       /CN=A91F4610/serialNumber=625AAAF73199A73AB9AB827FD5C10D2492E4E265
Certificate serial:       E9
Authority key identifier: 62:5A:AA:F7:31:99:A7:3A:B9:AB:82:7F:D5:C1:0D:24:92:E4:E2:65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ylqq9zGZpzq5q4J_1cENJJLk4mU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4610/90E76248CEA611EDA5F09142C4F9AE02/8E62A81C2C1511EEB8210121C4F9AE02.roa
Signing time:             Mon 03 Jun 2024 06:55:10 +0000
ROA not before:           Mon 03 Jun 2024 06:55:10 +0000
ROA not after:            Tue 01 Oct 2024 00:00:00 +0000
asID:                     18106
IP address blocks:        103.230.82.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233 (0xe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4610, serialNumber=625AAAF73199A73AB9AB827FD5C10D2492E4E265
        Validity
            Not Before: Jun  3 06:55:10 2024 GMT
            Not After : Oct  1 00:00:00 2024 GMT
        Subject: CN=665d68ce-87ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:17:99:53:36:96:7a:0c:a1:ff:27:b3:4f:dc:
                    9f:8a:b9:b3:ed:13:16:da:4c:89:00:d5:23:76:ba:
                    15:72:66:08:28:05:bc:3f:76:33:1a:27:e5:df:f9:
                    40:ab:34:82:8b:9f:4d:d7:55:43:54:51:a0:b0:25:
                    58:89:73:ec:bd:9a:7c:e8:e0:eb:8d:f1:28:33:9e:
                    38:b9:49:20:59:c4:7f:f9:8a:fd:7a:2a:3e:7e:07:
                    c7:f3:fe:d6:c4:81:fa:ad:35:6c:87:13:e8:25:f7:
                    dd:c0:fe:48:dc:97:1f:ce:1b:1c:4f:d1:55:da:49:
                    25:f6:03:05:47:6c:01:85:37:4c:7e:4c:e8:23:98:
                    eb:cd:fc:80:c7:5c:46:3d:89:36:42:3e:5d:5c:a6:
                    b8:f6:a7:77:84:40:26:12:f3:8f:b5:a6:42:54:d1:
                    33:99:8d:3b:20:a8:56:f5:91:46:2b:46:21:ce:22:
                    bf:2e:b7:0c:be:46:fe:f4:0e:51:95:86:75:0d:99:
                    59:2b:cf:16:0f:93:8c:dc:44:6a:35:d3:e3:5e:ba:
                    9e:32:e2:eb:38:14:4c:36:2b:f6:de:f3:c4:e8:89:
                    bc:98:fa:83:6d:d0:46:87:59:3b:3e:3f:a8:da:18:
                    23:25:0c:ef:22:c8:75:e3:fa:79:22:54:f3:f5:13:
                    66:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7D:20:C9:3D:93:AB:C9:26:E0:F3:50:52:2B:8B:DA:DF:FF:D2:6F
            X509v3 Authority Key Identifier:
                keyid:62:5A:AA:F7:31:99:A7:3A:B9:AB:82:7F:D5:C1:0D:24:92:E4:E2:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4610/90E76248CEA611EDA5F09142C4F9AE02/Ylqq9zGZpzq5q4J_1cENJJLk4mU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ylqq9zGZpzq5q4J_1cENJJLk4mU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4610/90E76248CEA611EDA5F09142C4F9AE02/8E62A81C2C1511EEB8210121C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:8f:db:4f:38:78:bd:d0:27:e1:ed:23:2e:b2:c0:5a:6c:44:
         df:29:52:09:0d:17:82:f5:db:73:58:fc:ea:b6:10:c0:15:6f:
         e2:ac:b0:fd:a2:7e:d8:67:5c:2a:cb:fe:be:f1:1f:95:4f:0c:
         0d:32:48:d5:f8:59:d8:31:06:3d:bb:e1:a0:63:e1:ed:f8:f7:
         1b:b8:d7:60:cc:28:e8:d7:06:b3:65:eb:bf:bd:ec:2d:52:e4:
         44:d4:9b:f7:4a:0a:3e:da:4c:3a:60:95:de:94:38:6f:53:02:
         99:b3:4a:ca:48:6a:f7:42:a3:29:7b:1a:54:44:d4:d1:e9:8c:
         a9:e9:ea:52:9a:1f:06:e3:7f:52:38:e9:6f:80:d8:3b:be:e7:
         12:74:88:1d:66:50:79:f6:c3:ef:7f:7f:3a:3f:01:15:0a:1f:
         ea:1d:79:b3:fa:e8:dc:91:4c:33:7b:4f:fb:99:49:dd:42:65:
         21:0f:ce:cd:dc:c6:6f:ee:e1:21:ed:9d:7f:b1:a6:96:e4:99:
         8f:af:74:30:12:08:d6:7a:d2:43:f7:e7:02:b5:a3:e9:ad:18:
         ea:1d:93:c3:5e:09:bb:c6:ec:16:d6:57:9a:61:fc:52:24:8a:
         78:ed:41:28:40:28:83:6e:89:a9:13:8f:2f:a7:fb:27:58:15:
         da:6a:fd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:51:24 2025 by rpki-client