Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160744/8916DDAED1F511EC822F0E70C4F9AE02/153FD81CD50211EC916B8369C4F9AE02.roa
File:                     153FD81CD50211EC916B8369C4F9AE02.roa (raw, json)
Hash identifier:          TP2ViFdvAt8GRTIghIc8e/IQBUQ5jOsYIdndTwJBWX8=
Subject key identifier:   F5:14:B1:15:FE:7B:F4:F9:44:82:ED:30:99:C8:60:F6:EA:C4:36:91
Certificate issuer:       /CN=A9160744/serialNumber=8905B2119A20B38CA1266821D3ACC94B4B284F12
Certificate serial:       0F
Authority key identifier: 89:05:B2:11:9A:20:B3:8C:A1:26:68:21:D3:AC:C9:4B:4B:28:4F:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQWyEZogs4yhJmgh06zJS0soTxI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160744/8916DDAED1F511EC822F0E70C4F9AE02/153FD81CD50211EC916B8369C4F9AE02.roa
Signing time:             Mon 16 May 2022 10:22:27 +0000
ROA not before:           Mon 16 May 2022 10:22:27 +0000
ROA not after:            Thu 31 Aug 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        103.187.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160744/serialNumber=8905B2119A20B38CA1266821D3ACC94B4B284F12
        Validity
            Not Before: May 16 10:22:27 2022 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=628225e2-98fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c4:e6:41:a1:09:36:1e:d0:55:89:0a:80:3d:
                    f0:cd:1e:44:59:18:be:31:c6:0b:b8:bf:1e:6e:89:
                    b0:e6:05:c0:ea:e8:b7:2d:3b:a9:80:c1:22:1a:dd:
                    a0:0c:95:91:9b:8f:ce:25:e0:be:ff:b6:6e:50:8d:
                    e2:28:44:f1:63:92:65:c8:73:88:18:1d:7b:e6:0f:
                    f5:fc:76:d9:28:dd:97:4b:98:91:86:f7:73:06:9f:
                    0d:3e:da:00:ce:6a:7e:87:3d:90:53:db:66:7a:76:
                    b9:ee:6b:36:4a:b4:46:5a:a3:6d:95:07:92:f4:d5:
                    6c:a4:5a:06:57:c1:c8:27:af:6c:9c:89:b6:1b:e8:
                    f1:28:c3:c8:63:6e:c2:fa:e0:0c:3f:fa:71:de:de:
                    97:06:a3:a2:74:45:b5:5a:f1:b2:b5:ac:7a:cb:f3:
                    40:ef:37:81:57:e6:4b:99:f2:f1:f4:9f:f3:ba:41:
                    b4:76:c1:b2:5d:e4:4d:89:f9:52:60:d1:c0:3a:1e:
                    e8:1e:a8:8f:81:c0:6f:d9:02:75:c0:2c:c6:03:83:
                    24:73:b7:be:b1:fa:d1:17:eb:71:84:81:4d:2c:e9:
                    d6:6a:9a:99:d4:39:7b:aa:51:1f:49:ad:b1:ea:23:
                    67:52:2b:69:88:e3:10:a5:f3:4a:ef:6e:f4:7a:8b:
                    da:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:14:B1:15:FE:7B:F4:F9:44:82:ED:30:99:C8:60:F6:EA:C4:36:91
            X509v3 Authority Key Identifier:
                keyid:89:05:B2:11:9A:20:B3:8C:A1:26:68:21:D3:AC:C9:4B:4B:28:4F:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160744/8916DDAED1F511EC822F0E70C4F9AE02/iQWyEZogs4yhJmgh06zJS0soTxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQWyEZogs4yhJmgh06zJS0soTxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160744/8916DDAED1F511EC822F0E70C4F9AE02/153FD81CD50211EC916B8369C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:ee:03:94:d3:e2:7f:fa:3f:3b:46:37:bc:fb:c3:06:94:d4:
         1f:e9:f6:ee:fe:ef:95:ef:4e:1e:1d:65:33:99:6b:51:0c:41:
         fa:24:65:b0:10:39:18:1c:1d:51:ed:a5:b2:65:3c:e7:1f:93:
         ff:bd:b0:fc:0b:20:09:b1:73:99:94:d2:a9:b8:61:a6:02:16:
         db:a7:b7:89:04:f2:a4:c5:80:3b:ca:2e:99:25:70:10:6d:eb:
         71:14:8b:ec:a2:50:1f:ac:12:33:5c:89:b6:ad:9f:74:12:2f:
         7b:fd:88:84:f0:03:10:9a:4f:ed:80:f0:7e:6c:c8:1f:1b:a9:
         10:0d:d0:e4:89:b8:75:a5:78:e5:25:0c:e9:6f:11:33:5b:2a:
         63:e9:7c:be:d9:c0:8a:04:fe:f8:02:9f:06:47:06:a1:80:a6:
         fd:79:75:c7:fb:78:58:27:75:41:c0:96:01:03:d9:82:bf:be:
         46:dd:af:1e:41:55:9d:27:ee:f7:ad:5a:30:e6:46:5a:5d:5b:
         76:8d:5f:d2:a6:60:69:6f:59:54:8c:f3:61:91:92:27:32:48:
         97:f4:a6:9f:c9:a9:b1:d8:04:08:79:ae:4c:1f:c6:e7:ed:af:
         b1:48:aa:4a:2f:0c:bf:80:44:1f:00:80:3a:90:53:69:09:b4:
         86:77:b0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:44 2023 by rpki-client on console-fra.rpki-client.org