Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAE47/974D6D7E48F011EA886EB445C4F9AE02/00E256B6834411EC8B56E409C4F9AE02.roa
File:                     00E256B6834411EC8B56E409C4F9AE02.roa (raw, json)
Hash identifier:          8ScoP4Wm2doypIaOeR+6jwPQTno+/x4xS7fmJvGum5U=
Subject key identifier:   CF:73:F5:63:AB:D3:C9:9F:C6:23:11:52:78:B3:5F:9F:22:5B:BF:B2
Certificate issuer:       /CN=A91FAE47/serialNumber=22F303C4AE2BBDCC1E9765106D235E9F32FF54FD
Certificate serial:       0964
Authority key identifier: 22:F3:03:C4:AE:2B:BD:CC:1E:97:65:10:6D:23:5E:9F:32:FF:54:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IvMDxK4rvcwel2UQbSNenzL_VP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FAE47/974D6D7E48F011EA886EB445C4F9AE02/00E256B6834411EC8B56E409C4F9AE02.roa
Signing time:             Mon 30 Jan 2023 21:48:03 +0000
ROA not before:           Mon 30 Jan 2023 21:48:03 +0000
ROA not after:            Fri 02 Jun 2023 00:00:00 +0000
asID:                     138623
IP address blocks:        103.106.0.0/24 maxlen: 24
                          103.106.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2404 (0x964)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FAE47/serialNumber=22F303C4AE2BBDCC1E9765106D235E9F32FF54FD
        Validity
            Not Before: Jan 30 21:48:03 2023 GMT
            Not After : Jun  2 00:00:00 2023 GMT
        Subject: CN=63d83b12-a4e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:4e:e4:6b:72:e1:4b:24:09:fc:5a:9d:69:2f:
                    ea:e9:dd:ae:96:98:a6:6f:53:38:f9:65:27:46:14:
                    8a:a9:ec:77:36:d5:08:d2:3a:c8:96:38:67:f9:d4:
                    2d:d4:30:b0:d4:26:87:69:7b:4d:82:dc:2c:93:4d:
                    05:82:27:65:0e:44:ad:f4:3a:99:64:3a:33:45:b5:
                    fe:86:75:69:92:89:2c:e6:ce:e5:04:c3:55:33:95:
                    59:e9:f5:e8:ad:c7:9f:e9:a9:be:0b:1f:79:da:81:
                    03:04:fc:c4:b4:e5:a9:63:6a:99:e7:ca:c9:e9:b8:
                    d8:87:e0:7c:1b:f2:74:73:b9:c8:15:c2:95:49:e8:
                    a0:bc:c1:80:f8:8b:b2:94:a8:d6:15:d2:8e:12:3f:
                    d6:66:fe:1f:e7:92:ed:34:d4:46:d4:57:27:2f:1a:
                    e5:42:30:ad:c9:6c:67:8b:a7:07:f7:a5:0c:a2:95:
                    5e:c0:12:a4:9b:45:54:7d:2a:93:76:ef:46:0d:e5:
                    0a:19:74:bc:1d:c3:96:b7:76:75:0d:29:bf:17:d5:
                    58:98:c5:c3:ac:8e:5e:12:77:b6:55:67:a2:51:a1:
                    fa:4a:b0:2e:22:ff:f2:db:18:04:06:fb:ce:3f:ed:
                    5e:d2:cb:7e:a6:89:26:51:28:ca:25:8f:0e:6d:0e:
                    87:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:73:F5:63:AB:D3:C9:9F:C6:23:11:52:78:B3:5F:9F:22:5B:BF:B2
            X509v3 Authority Key Identifier:
                keyid:22:F3:03:C4:AE:2B:BD:CC:1E:97:65:10:6D:23:5E:9F:32:FF:54:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FAE47/974D6D7E48F011EA886EB445C4F9AE02/IvMDxK4rvcwel2UQbSNenzL_VP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IvMDxK4rvcwel2UQbSNenzL_VP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAE47/974D6D7E48F011EA886EB445C4F9AE02/00E256B6834411EC8B56E409C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:c9:ad:bb:e8:60:6a:2c:33:33:77:14:21:10:57:40:39:22:
         2a:bc:10:1f:22:51:5f:af:75:52:0e:c0:32:24:5f:f8:b5:28:
         07:50:9d:1f:be:06:bb:27:24:93:e7:5d:ec:69:bd:20:f8:2c:
         4d:a3:d7:31:5e:bd:bd:d5:c1:cc:d6:fa:7d:ee:7e:e0:1b:a6:
         f4:e9:0e:9a:a3:98:a5:ee:94:7d:17:56:1e:79:74:b3:1d:1e:
         65:3a:48:eb:22:be:cf:99:cb:c0:67:3f:ec:92:0f:4e:f2:dd:
         6e:82:cb:4f:af:3f:56:e8:c1:d4:a3:c9:bf:df:08:9f:c9:75:
         5a:2e:16:0d:f3:3b:31:0f:44:98:92:43:14:3c:93:fb:57:9b:
         f8:af:fb:a5:4d:44:b1:49:34:eb:9f:a1:8b:1b:35:4e:68:af:
         64:b1:5f:48:0a:1a:22:c3:b5:e5:3b:df:3e:a6:a5:ee:05:69:
         95:13:88:4f:f5:19:54:ea:d6:65:8a:a3:d2:34:22:26:8a:d6:
         d5:f1:5d:b3:b3:5e:85:3d:0a:36:a7:e4:9d:74:8f:f8:a0:20:
         0c:a5:16:91:47:4a:75:c0:2c:47:32:3e:f5:d6:f4:57:22:e8:
         11:c2:2b:5f:f5:88:54:d3:b6:0d:1d:0a:47:f7:b9:09:91:2e:
         6a:92:e7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:40 2024 by rpki-client on console-ams.rpki-client.org