Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDCA4/EED99E32CB7E11E8993D1776C4F9AE02/20CF9C2E6A4F11EEBF117E0AC4F9AE02.roa
File:                     20CF9C2E6A4F11EEBF117E0AC4F9AE02.roa (raw, json)
Hash identifier:          hpcZJ5PQLE0OCG+G8evXRZV5YP8/FeemxDcIMQPFJuw=
Subject key identifier:   C2:69:1D:A3:AD:01:75:1F:F4:B8:27:52:E1:72:E0:F6:03:E6:57:67
Certificate issuer:       /CN=A91FDCA4/serialNumber=762763B7D600972930E9DE7A1442C5D30F68C484
Certificate serial:       1166
Authority key identifier: 76:27:63:B7:D6:00:97:29:30:E9:DE:7A:14:42:C5:D3:0F:68:C4:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/didjt9YAlykw6d56FELF0w9oxIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDCA4/EED99E32CB7E11E8993D1776C4F9AE02/20CF9C2E6A4F11EEBF117E0AC4F9AE02.roa
Signing time:             Sat 14 Oct 2023 05:04:18 +0000
ROA not before:           Sat 14 Oct 2023 05:04:18 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     48011
IP address blocks:        103.130.145.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4454 (0x1166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDCA4/serialNumber=762763B7D600972930E9DE7A1442C5D30F68C484
        Validity
            Not Before: Oct 14 05:04:18 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=652a2152-c131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:60:ad:ac:ac:d7:ce:ba:a2:e6:fd:fb:65:1c:
                    1f:43:ec:df:05:72:0d:38:45:09:80:1b:d8:5b:84:
                    e5:d1:c2:84:f4:03:70:46:5e:1e:0b:9e:2c:19:f7:
                    55:89:4b:fb:c0:f7:3a:cf:21:09:1f:7a:4e:8e:13:
                    0f:da:7e:56:7e:68:57:c5:14:ec:8d:2c:17:1a:4f:
                    c9:f9:4d:4f:b4:ef:08:b9:85:b3:48:a3:21:c9:b8:
                    02:58:f9:d7:ac:7d:a9:75:27:b2:52:f3:94:2c:07:
                    44:38:62:6e:01:f1:ce:0f:54:49:9c:b1:71:c5:7e:
                    71:48:fd:f2:46:50:06:2d:8c:25:47:a9:29:23:ed:
                    78:e9:6a:1c:e2:38:45:e2:81:c0:e0:1e:51:11:01:
                    f0:45:d0:e8:f6:74:67:b3:9c:26:34:ed:35:1e:81:
                    21:9c:9c:68:65:15:e6:b6:4a:ee:9a:d6:e6:c0:e0:
                    48:eb:9e:50:c2:40:24:79:0e:93:b4:ce:3a:a5:21:
                    76:61:6e:fc:39:fb:16:ea:d7:b3:66:5e:14:50:5e:
                    7a:2c:44:dd:4a:8e:bf:95:a8:ec:d4:e7:c1:63:0f:
                    8f:43:dd:19:78:26:f3:a7:6b:4a:c3:e3:60:60:3f:
                    a7:1c:78:54:c3:54:07:e0:06:bd:ec:a9:e9:a3:d8:
                    13:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:69:1D:A3:AD:01:75:1F:F4:B8:27:52:E1:72:E0:F6:03:E6:57:67
            X509v3 Authority Key Identifier:
                keyid:76:27:63:B7:D6:00:97:29:30:E9:DE:7A:14:42:C5:D3:0F:68:C4:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDCA4/EED99E32CB7E11E8993D1776C4F9AE02/didjt9YAlykw6d56FELF0w9oxIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/didjt9YAlykw6d56FELF0w9oxIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDCA4/EED99E32CB7E11E8993D1776C4F9AE02/20CF9C2E6A4F11EEBF117E0AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:97:20:6d:4b:5a:14:3a:3c:60:fd:9d:67:b0:1d:29:88:04:
         50:a3:4c:d3:b7:03:3c:7d:63:54:05:03:ea:b3:47:10:36:96:
         28:50:6e:ea:4d:b5:f9:23:b9:8f:8c:11:65:9b:cc:a7:1e:a6:
         0f:69:48:bb:86:79:7e:14:9a:6e:13:6e:09:88:46:f7:95:ee:
         d6:35:fd:cd:21:8d:bd:26:05:aa:3b:c0:4d:e0:61:c3:04:d6:
         3f:a0:da:d7:70:1c:0d:d8:64:f2:d7:c0:b2:22:f9:8a:5a:f3:
         83:62:f7:85:cf:64:4c:49:93:57:32:7d:2f:de:a7:14:a1:f8:
         6a:7a:a8:39:23:ec:9a:14:86:48:ac:04:ce:45:97:8c:28:d3:
         ca:4b:f3:1b:73:2a:e1:48:a0:af:b9:eb:73:6f:58:2d:8e:21:
         cf:c0:1d:62:c5:18:f5:2c:7a:61:89:6c:b6:52:87:cd:c6:46:
         d0:a4:cb:c9:83:69:02:26:9e:66:7d:8f:54:2b:04:85:28:51:
         ee:94:1c:4f:c9:3d:27:e6:11:26:78:47:92:40:a8:95:77:fe:
         f8:02:fe:dc:e2:e7:eb:fc:1c:c8:86:26:65:3b:43:aa:9d:61:
         00:b4:f3:86:70:f5:15:18:35:6f:7d:ad:c0:eb:09:d9:d8:33:
         9a:62:9a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:40 2024 by rpki-client on console-ams.rpki-client.org