Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/83FDFA865CBC11ECA6B9CA25C4F9AE02.roa
File:                     83FDFA865CBC11ECA6B9CA25C4F9AE02.roa (raw, json)
Hash identifier:          QLbP+iEI+mnOAhmYh4Z3ggoPseIp+v032FCRFUq4ldw=
Subject key identifier:   B5:CE:0D:AB:58:1D:FC:27:BC:2A:B2:F3:EF:6E:29:73:EE:51:F0:29
Certificate issuer:       /CN=A9119363/serialNumber=E6F0819C59FDC641E45BCC33CB50F3CD854AC2F5
Certificate serial:       02F1
Authority key identifier: E6:F0:81:9C:59:FD:C6:41:E4:5B:CC:33:CB:50:F3:CD:85:4A:C2:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCBnFn9xkHkW8wzy1DzzYVKwvU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/83FDFA865CBC11ECA6B9CA25C4F9AE02.roa
Signing time:             Sat 29 Jul 2023 02:02:46 +0000
ROA not before:           Sat 29 Jul 2023 02:02:46 +0000
ROA not after:            Tue 28 Nov 2023 00:00:00 +0000
asID:                     136969
IP address blocks:        103.163.48.0/23 maxlen: 23
                          103.163.48.0/24 maxlen: 24
                          103.163.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 753 (0x2f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119363/serialNumber=E6F0819C59FDC641E45BCC33CB50F3CD854AC2F5
        Validity
            Not Before: Jul 29 02:02:46 2023 GMT
            Not After : Nov 28 00:00:00 2023 GMT
        Subject: CN=64c47346-ac96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7f:c4:2e:8c:39:83:d9:8d:d4:59:e9:0c:f6:
                    a7:5e:6b:40:6b:4f:4c:dd:a6:82:0d:d5:02:9b:67:
                    a8:6e:02:cb:92:d5:58:cf:f3:a3:ae:c9:b8:0d:02:
                    63:0c:4e:66:89:a2:e6:d4:9e:b9:53:f6:d5:84:b8:
                    62:69:b8:d9:0f:2e:2b:fb:25:d3:db:a9:0e:a5:91:
                    a6:b0:84:39:b0:2a:29:8d:cf:05:d1:33:5b:53:42:
                    97:77:0b:da:5c:1e:d0:10:e3:43:a9:d3:7a:ef:22:
                    d9:c0:0f:31:75:e4:fc:d4:3c:f6:2c:02:2b:7a:c1:
                    43:b8:e9:07:52:c0:b3:8b:bb:40:ca:f3:9d:95:af:
                    e7:f1:ee:d3:be:ff:90:58:49:d2:a3:0a:e8:da:ea:
                    09:bb:f8:24:cc:c3:71:0c:4a:10:79:be:36:08:a9:
                    de:95:16:6d:e1:ff:5b:6b:96:ae:57:cd:f2:80:01:
                    ea:69:1f:28:2b:d8:af:eb:a7:d0:4b:9b:bb:48:63:
                    60:4f:37:4f:0f:e5:26:64:d2:65:c8:e2:94:dd:e2:
                    52:11:d7:46:6f:08:34:3e:14:d6:3e:66:14:dd:e9:
                    4f:dc:59:30:a6:f1:dd:fc:28:34:d7:9e:80:90:6a:
                    57:bf:ac:50:31:a1:38:2d:35:9a:05:da:57:f7:6b:
                    4a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:CE:0D:AB:58:1D:FC:27:BC:2A:B2:F3:EF:6E:29:73:EE:51:F0:29
            X509v3 Authority Key Identifier:
                keyid:E6:F0:81:9C:59:FD:C6:41:E4:5B:CC:33:CB:50:F3:CD:85:4A:C2:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCBnFn9xkHkW8wzy1DzzYVKwvU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/83FDFA865CBC11ECA6B9CA25C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:b2:ce:bc:b4:56:9a:fa:de:e7:f9:91:7a:34:73:86:3c:0f:
         af:43:79:4c:bc:83:aa:4c:21:05:1c:3f:3c:78:f7:e6:49:b1:
         32:dc:d3:e2:f8:1b:a0:4a:65:4f:7a:45:04:0b:38:22:e9:6e:
         fe:74:52:b1:51:41:2a:0a:f8:be:1f:ad:7c:ed:f6:fa:2f:97:
         65:d1:18:15:a2:22:29:e8:a6:12:19:0c:b7:b5:1c:a6:fd:9f:
         df:7d:be:56:52:d1:dc:e8:10:7e:08:46:52:9f:e8:4b:a5:32:
         7c:98:cb:75:56:0c:d0:a7:2f:16:27:ae:17:e8:db:28:43:2c:
         bc:34:4f:90:48:e2:f6:0f:b1:30:4c:64:40:c9:2a:67:50:ee:
         d8:90:20:fe:6a:41:8a:66:c4:54:81:70:10:fb:61:d2:04:e4:
         ac:a7:c8:e6:89:41:1d:05:3a:9a:5d:1e:c9:96:4d:85:f1:bb:
         9f:58:61:a1:62:97:ed:c5:6e:c1:7b:ac:14:f9:5f:af:9c:2d:
         38:be:b2:cb:db:20:1f:70:1a:f9:2d:11:76:9f:4a:35:00:47:
         7c:9b:f7:5a:39:4d:c6:ef:dc:b4:b7:4b:32:5b:6f:82:14:5d:
         be:55:78:be:66:e6:eb:a5:81:07:81:30:cf:b5:b7:99:74:6d:
         b6:96:2c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-ams.rpki-client.org