Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912EC9C/8CEB3596846C11ECB2A7D75AC4F9AE02/76423FB056A311EDA2BF5121C4F9AE02.roa
File:                     76423FB056A311EDA2BF5121C4F9AE02.roa (raw, json)
Hash identifier:          nBO4TDkQ9KTcBqIPPktaxpg+l1fCbSXminQmNbnkMUY=
Subject key identifier:   C7:D9:F8:4E:13:E6:54:FD:9E:B0:79:3E:EB:2A:38:1F:3B:70:BB:35
Certificate issuer:       /CN=A912EC9C/serialNumber=026AD86ACB362DAE6C6221242E768DA643513A9D
Certificate serial:       023F
Authority key identifier: 02:6A:D8:6A:CB:36:2D:AE:6C:62:21:24:2E:76:8D:A6:43:51:3A:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AmrYass2La5sYiEkLnaNpkNROp0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912EC9C/8CEB3596846C11ECB2A7D75AC4F9AE02/76423FB056A311EDA2BF5121C4F9AE02.roa
Signing time:             Wed 01 Mar 2023 04:54:35 +0000
ROA not before:           Wed 01 Mar 2023 04:54:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203141
IP address blocks:        103.178.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 575 (0x23f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912EC9C/serialNumber=026AD86ACB362DAE6C6221242E768DA643513A9D
        Validity
            Not Before: Mar  1 04:54:35 2023 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=63feda8b-1456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fe:b6:98:27:99:31:11:92:ea:28:e2:64:7e:
                    96:26:ae:30:c0:b3:86:2d:c2:b5:29:40:6c:5f:5a:
                    fe:19:47:a0:c7:4e:eb:ad:3f:c9:cc:52:a0:d9:43:
                    fe:7a:ae:46:b3:c1:13:6f:c8:64:1d:7f:89:fd:b7:
                    0d:b5:67:9d:4d:e2:65:14:98:38:58:61:21:27:50:
                    bb:5c:69:6b:10:92:1f:86:b4:49:8f:0e:bd:75:f9:
                    fb:be:c6:73:e5:81:6f:b4:9d:b8:0b:61:5b:78:30:
                    89:85:2f:30:f6:f5:60:7d:79:b4:8b:4d:61:85:00:
                    c0:83:57:41:40:d7:9e:c5:cb:17:1d:32:31:b5:f2:
                    e8:68:07:1c:20:d9:d5:a6:b3:74:02:9c:41:40:2d:
                    c0:e4:04:1f:01:2b:30:77:cc:57:9c:8c:a0:12:02:
                    8b:00:4d:f5:6f:ea:91:28:1b:61:60:ef:1e:2e:a4:
                    e6:4a:77:d5:6a:3f:65:ef:48:6a:f0:fd:4a:25:1a:
                    e2:08:49:a2:d8:8c:2c:89:17:ea:4a:c8:0f:b4:6d:
                    b5:29:8b:5e:ae:77:b8:25:d9:0d:71:92:92:d1:e5:
                    2c:70:4a:d9:88:b9:61:08:f0:0d:06:12:b1:41:84:
                    ab:83:87:79:0b:8c:5b:a1:82:de:53:0b:14:19:78:
                    11:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D9:F8:4E:13:E6:54:FD:9E:B0:79:3E:EB:2A:38:1F:3B:70:BB:35
            X509v3 Authority Key Identifier:
                keyid:02:6A:D8:6A:CB:36:2D:AE:6C:62:21:24:2E:76:8D:A6:43:51:3A:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912EC9C/8CEB3596846C11ECB2A7D75AC4F9AE02/AmrYass2La5sYiEkLnaNpkNROp0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AmrYass2La5sYiEkLnaNpkNROp0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EC9C/8CEB3596846C11ECB2A7D75AC4F9AE02/76423FB056A311EDA2BF5121C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:83:5f:1f:88:57:14:d7:32:39:8e:89:33:21:63:c9:86:d7:
         aa:84:54:fe:8d:9b:95:2a:ff:8f:22:26:75:8c:a5:04:9d:ed:
         ff:d6:c3:3f:7e:b3:c4:7a:90:64:44:07:14:29:ef:52:a6:15:
         07:50:1d:3d:89:7b:14:20:ed:dd:87:61:65:2e:7f:08:95:f6:
         bd:9b:36:86:74:59:08:66:72:22:78:57:d9:d2:1f:d6:19:26:
         72:8e:71:0e:0b:fa:97:52:cf:29:0f:9c:3b:ea:22:e9:5b:5f:
         eb:87:c4:28:de:ea:f8:45:80:45:ea:7d:42:d7:ef:3c:ce:40:
         ed:f4:a0:c8:de:f2:ed:38:89:06:25:e7:f8:0a:e5:d5:1a:00:
         64:02:57:af:3a:ae:47:0a:2c:76:15:ce:df:bd:0d:90:72:f4:
         e7:da:84:36:9f:4d:87:f1:6f:ef:64:8a:80:95:da:99:a8:ca:
         bb:24:75:bf:e9:4f:d2:aa:c3:4e:27:35:d0:6c:e5:9f:b0:05:
         49:d2:d9:51:68:0e:76:42:8d:7e:09:61:2f:9f:7e:0a:f3:6b:
         19:b1:90:5a:ba:82:fe:c1:80:6f:1a:9a:6f:bd:ad:a9:63:a9:
         2a:fc:8e:3d:f3:5b:30:db:75:8d:55:ec:6b:51:be:ed:5a:4f:
         15:22:b5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:58 2024 by rpki-client on console-fra.rpki-client.org