Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/7452C6265D7411ECB1D03353C4F9AE02.roa
File:                     7452C6265D7411ECB1D03353C4F9AE02.roa (raw, json)
Hash identifier:          lNk3tAyg7whhJQ9cLkT7KOZzJ23S8Myf12GpZTQDBCQ=
Subject key identifier:   72:E0:FA:6D:83:F7:62:C1:02:19:12:71:C3:C3:1B:8E:78:76:FA:6D
Certificate issuer:       /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial:       06D7
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/7452C6265D7411ECB1D03353C4F9AE02.roa
Signing time:             Tue 29 Mar 2022 13:48:23 +0000
ROA not before:           Tue 29 Mar 2022 13:48:23 +0000
ROA not after:            Thu 01 Dec 2022 00:00:00 +0000
asID:                     9387
IP address blocks:        103.11.60.0/24 maxlen: 24
                          103.11.62.0/24 maxlen: 24
                          103.11.63.0/24 maxlen: 24
                          113.203.208.0/22 maxlen: 24
                          113.203.212.0/24 maxlen: 24
                          113.203.216.0/24 maxlen: 24
                          113.203.224.0/22 maxlen: 24
                          113.203.228.0/24 maxlen: 24
                          113.203.229.0/24 maxlen: 24
                          113.203.230.0/24 maxlen: 24
                          113.203.231.0/24 maxlen: 24
                          113.203.234.0/24 maxlen: 24
                          113.203.235.0/24 maxlen: 24
                          113.203.236.0/24 maxlen: 24
                          113.203.237.0/24 maxlen: 24
                          113.203.238.0/24 maxlen: 24
                          113.203.239.0/24 maxlen: 24
                          113.203.240.0/24 maxlen: 24
                          113.203.244.0/22 maxlen: 22
                          180.178.128.0/24 maxlen: 24
                          180.178.129.0/24 maxlen: 24
                          180.178.132.0/24 maxlen: 24
                          180.178.133.0/24 maxlen: 24
                          180.178.134.0/24 maxlen: 24
                          180.178.135.0/24 maxlen: 24
                          180.178.137.0/24 maxlen: 24
                          180.178.138.0/24 maxlen: 24
                          180.178.139.0/24 maxlen: 24
                          180.178.140.0/22 maxlen: 22
                          180.178.156.0/22 maxlen: 24
                          180.178.160.0/23 maxlen: 24
                          180.178.162.0/24 maxlen: 24
                          180.178.164.0/22 maxlen: 24
                          180.178.168.0/24 maxlen: 24
                          180.178.172.0/24 maxlen: 24
                          180.178.173.0/24 maxlen: 24
                          180.178.174.0/24 maxlen: 24
                          180.178.175.0/24 maxlen: 24
                          180.178.176.0/21 maxlen: 24
                          223.29.224.0/23 maxlen: 24
                          223.29.227.0/24 maxlen: 24
                          223.29.232.0/22 maxlen: 22
                          2401:4100::/33 maxlen: 33
                          2401:4100:8000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1751 (0x6d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F69E7
        Validity
            Not Before: Mar 29 13:48:23 2022 GMT
            Not After : Dec  1 00:00:00 2022 GMT
        Subject: CN=62430e27-e9cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f3:b1:88:ca:71:ba:99:37:d6:d5:49:37:81:
                    4f:ae:ab:32:f7:13:5a:20:10:14:59:e4:f4:22:46:
                    95:3e:6c:d4:59:e5:a2:e6:c8:71:7a:d6:4c:ff:4f:
                    0e:4f:0d:69:69:0c:ec:c7:53:5e:4d:d5:22:31:e5:
                    1f:20:fe:f5:9a:9a:7f:ad:6f:de:e7:f3:ab:4b:bc:
                    ee:af:a4:eb:16:e9:0c:96:3d:82:c3:e3:f3:57:a6:
                    02:dd:17:81:23:a0:65:81:1a:f7:80:03:46:c0:cb:
                    63:08:b6:fc:a2:59:9d:01:2c:3c:64:eb:a2:72:26:
                    23:bb:9d:e2:d1:65:d5:f2:50:ad:da:b1:1e:2b:9c:
                    9f:4c:df:b6:6e:b1:42:12:69:52:e5:7b:19:05:11:
                    cd:99:f1:2f:6c:89:69:3c:87:84:f4:da:0e:1e:93:
                    0b:33:ee:13:32:60:cf:6d:69:16:0a:4b:c7:a6:82:
                    a1:00:53:3f:8d:11:ed:22:48:5d:de:03:c5:fa:77:
                    9e:e4:e4:2e:73:fd:eb:b7:2e:c0:d9:1e:7a:01:5c:
                    14:be:56:77:a5:f8:de:75:e5:21:1c:8f:77:45:7b:
                    91:06:c5:11:34:3e:ac:de:45:8c:50:ac:59:89:b4:
                    d9:67:c7:a9:84:17:bc:d0:f7:c9:69:0b:ac:cf:b6:
                    fd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E0:FA:6D:83:F7:62:C1:02:19:12:71:C3:C3:1B:8E:78:76:FA:6D
            X509v3 Authority Key Identifier:
                keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/7452C6265D7411ECB1D03353C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.60.0/24
                  103.11.62.0/23
                  113.203.208.0-113.203.212.255
                  113.203.216.0/24
                  113.203.224.0/21
                  113.203.234.0-113.203.240.255
                  113.203.244.0/22
                  180.178.128.0/23
                  180.178.132.0/22
                  180.178.137.0-180.178.143.255
                  180.178.156.0-180.178.162.255
                  180.178.164.0-180.178.168.255
                  180.178.172.0-180.178.183.255
                  223.29.224.0/23
                  223.29.227.0/24
                  223.29.232.0/22
                IPv6:
                  2401:4100::-2401:4100:8000:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         70:41:f1:f5:09:27:63:0a:85:77:df:4a:ff:61:6b:63:4c:75:
         2a:6e:e8:79:1c:d1:e2:64:95:ac:ba:15:cd:62:da:53:fe:51:
         08:6d:38:56:58:f9:42:54:e1:67:a0:58:b2:13:f7:93:31:7b:
         ef:9b:fa:f9:75:3a:ee:50:99:6f:76:e6:3f:c9:23:8f:5c:04:
         1b:97:db:5f:8b:92:3d:79:8c:ed:0f:25:0c:ff:31:7d:cc:e5:
         c2:78:3b:c8:d3:78:e4:7e:25:e1:47:da:af:38:e4:f3:2a:a9:
         6f:f9:5b:5b:55:62:27:48:b2:4b:2b:f4:52:09:f2:c1:9e:e7:
         3e:aa:fc:7e:95:cb:b4:fd:5c:b6:a2:a8:e4:9f:d5:3b:f8:eb:
         e8:32:67:09:31:4e:4b:84:dd:bf:90:35:ba:1a:8c:ec:fb:03:
         02:68:a8:3d:c2:80:8f:b4:50:0e:c4:ff:d5:3a:26:9a:22:ee:
         06:c9:0a:38:87:76:59:02:92:a6:ff:95:3d:86:ab:af:e8:73:
         f4:8b:7f:9a:75:ae:87:b9:8a:a3:07:bc:8f:a1:68:76:8a:b4:
         63:af:8e:42:49:95:18:76:26:09:67:12:13:af:d5:bf:aa:f7:
         1c:85:52:56:5e:4d:47:45:03:c7:4b:da:a1:47:fe:0d:ca:f4:
         2c:9d:56:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 06:07:30 2025 by rpki-client