Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/E6ED26863FEB11EDA6D80B0CC4F9AE02.roa
File:                     E6ED26863FEB11EDA6D80B0CC4F9AE02.roa (raw, json)
Hash identifier:          xQ87bY6hNNuCreqnrjw6Emzw911kzuY7Mn+cU34ci80=
Subject key identifier:   C8:2A:29:56:1B:8D:B0:2C:96:AC:FB:0B:C0:C1:0F:E5:3E:BB:81:F1
Certificate issuer:       /CN=A9119363/serialNumber=E6F0819C59FDC641E45BCC33CB50F3CD854AC2F5
Certificate serial:       02F0
Authority key identifier: E6:F0:81:9C:59:FD:C6:41:E4:5B:CC:33:CB:50:F3:CD:85:4A:C2:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCBnFn9xkHkW8wzy1DzzYVKwvU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/E6ED26863FEB11EDA6D80B0CC4F9AE02.roa
Signing time:             Sat 29 Jul 2023 02:02:45 +0000
ROA not before:           Sat 29 Jul 2023 02:02:45 +0000
ROA not after:            Tue 28 Nov 2023 00:00:00 +0000
asID:                     134489
IP address blocks:        103.163.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 752 (0x2f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119363/serialNumber=E6F0819C59FDC641E45BCC33CB50F3CD854AC2F5
        Validity
            Not Before: Jul 29 02:02:45 2023 GMT
            Not After : Nov 28 00:00:00 2023 GMT
        Subject: CN=64c47345-8145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:95:1d:55:a9:9c:aa:85:f9:25:49:94:58:b9:
                    38:b7:e1:3a:bb:11:69:ed:74:14:14:f5:07:b2:f6:
                    f6:5f:dd:7c:61:c7:09:5b:a1:85:79:6d:50:75:48:
                    31:4f:2e:89:ed:33:18:c5:06:46:7d:0f:a0:2d:c1:
                    23:45:b9:17:44:b8:8c:ac:59:40:46:c9:1e:3b:dc:
                    35:b1:49:66:2b:01:ce:e6:02:63:3c:ac:2a:4e:d6:
                    33:bd:d8:74:41:5e:5d:e8:91:78:4f:12:d3:a0:a5:
                    fb:53:5b:07:87:82:bf:0b:f3:0c:ed:8c:16:e7:ee:
                    3d:32:e2:25:e2:f9:95:a9:c5:75:8e:db:fe:f7:0e:
                    19:37:b7:da:35:56:1a:6e:39:f3:d0:6b:91:e0:85:
                    e3:10:c7:0d:f9:85:cb:e7:67:a1:38:c1:39:9f:29:
                    38:64:78:18:96:29:1f:3b:aa:11:d7:46:2b:88:8e:
                    01:87:64:c3:ae:8a:8f:fa:cc:96:b5:7f:d2:de:49:
                    cd:f0:5c:9c:8a:ac:8d:f4:bd:6a:b8:43:35:de:d8:
                    3f:e8:bf:df:d5:ff:f5:2a:8c:a4:68:43:af:4d:15:
                    34:58:e5:8f:94:10:e9:fd:5a:1a:71:be:8d:9c:b5:
                    35:7b:3d:ba:36:22:81:73:9e:36:62:04:60:ff:4b:
                    25:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:2A:29:56:1B:8D:B0:2C:96:AC:FB:0B:C0:C1:0F:E5:3E:BB:81:F1
            X509v3 Authority Key Identifier:
                keyid:E6:F0:81:9C:59:FD:C6:41:E4:5B:CC:33:CB:50:F3:CD:85:4A:C2:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/5vCBnFn9xkHkW8wzy1DzzYVKwvU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCBnFn9xkHkW8wzy1DzzYVKwvU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/E6ED26863FEB11EDA6D80B0CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:ea:08:5e:19:55:2f:e8:ca:86:62:52:fe:25:0f:a8:b5:bf:
         6a:db:75:dc:3b:4e:8e:77:20:32:96:9d:64:1b:b1:c3:74:b9:
         7b:0b:01:8a:5b:2c:30:27:19:5c:e2:e2:44:c6:9a:b8:7d:e9:
         6d:24:00:cf:c4:3f:12:82:79:67:fa:13:25:c5:e9:06:ec:29:
         71:32:b3:e3:5d:b1:85:ee:84:52:48:29:f7:61:44:a5:e9:df:
         73:8f:e5:d7:dc:c6:d0:7e:59:58:ac:79:8a:15:44:dd:46:cd:
         d7:3a:84:98:e3:66:10:81:e9:ce:d3:2e:64:20:06:28:c0:34:
         87:f3:97:26:25:19:fd:00:43:cb:0a:df:d3:17:f5:c0:5b:ce:
         c1:42:b3:a6:9b:f4:a3:3b:68:8e:a0:3f:d7:f9:b7:c2:cb:73:
         1e:1e:98:a3:f0:86:62:56:e4:e0:65:98:6c:93:ca:f2:61:57:
         73:8a:65:dd:c9:28:9e:6c:c1:4b:4c:fd:40:e6:b3:b1:0c:4a:
         ec:e4:e2:45:7d:dc:96:ef:e3:b8:96:55:ba:9b:4f:f3:6e:a7:
         17:87:a3:21:a4:09:a2:c3:37:35:94:b2:56:9c:f4:5e:c0:ee:
         e9:2c:05:bd:b8:9a:2c:e2:5a:2e:42:9b:99:aa:1f:46:8e:b6:
         64:59:29:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:55 2024 by rpki-client on console-fra.rpki-client.org