Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916155A/2D250014864411EB8A814D46C4F9AE02/5BC53460E74311EBA84BED2DC4F9AE02.roa
File:                     5BC53460E74311EBA84BED2DC4F9AE02.roa (raw, json)
Hash identifier:          /qLVWerJsEsSOcPnc3MfUIehFjcEpRfdQpBEvbF1uFo=
Subject key identifier:   CC:E1:BA:13:EB:01:75:9B:17:1F:29:DE:FF:A6:E7:0F:29:EC:F6:06
Certificate issuer:       /CN=A916155A/serialNumber=5DB5C2C014FF2DCDC03502A8995CA3EB3B36DE5F
Certificate serial:       0339
Authority key identifier: 5D:B5:C2:C0:14:FF:2D:CD:C0:35:02:A8:99:5C:A3:EB:3B:36:DE:5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbXCwBT_Lc3ANQKomVyj6zs23l8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916155A/2D250014864411EB8A814D46C4F9AE02/5BC53460E74311EBA84BED2DC4F9AE02.roa
Signing time:             Fri 29 Apr 2022 01:50:58 +0000
ROA not before:           Fri 29 Apr 2022 01:50:58 +0000
ROA not after:            Sun 28 Aug 2022 00:00:00 +0000
asID:                     136969
IP address blocks:        103.135.44.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 825 (0x339)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916155A/serialNumber=5DB5C2C014FF2DCDC03502A8995CA3EB3B36DE5F
        Validity
            Not Before: Apr 29 01:50:58 2022 GMT
            Not After : Aug 28 00:00:00 2022 GMT
        Subject: CN=626b4482-3541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f0:90:9a:99:7d:20:0d:ba:26:26:ac:eb:ca:
                    de:c8:79:d6:7f:f2:25:85:42:c3:9e:fe:74:39:e2:
                    c4:7c:0b:d5:28:e8:ec:c7:c2:c7:09:65:0c:a2:62:
                    96:08:54:d9:ed:2a:5c:f0:bb:40:7b:2a:86:48:0f:
                    d7:9e:20:dc:8e:0f:ea:b7:19:70:fc:52:a1:26:99:
                    6d:70:73:df:d5:0c:b5:b5:44:44:09:6e:32:85:f7:
                    93:f8:7a:dc:76:d5:c8:92:97:c1:33:1e:27:a1:cb:
                    07:79:be:b6:f7:9f:18:46:54:95:9b:e9:d7:83:b2:
                    7c:af:ee:3b:65:46:41:98:0d:12:93:ee:9a:e7:f6:
                    2b:dd:5a:4d:09:34:f8:c2:fc:0d:aa:be:71:58:04:
                    a2:72:e6:cf:58:1d:58:94:9e:4e:9f:c9:66:c6:9b:
                    11:9d:35:b7:ce:b6:8b:a2:ca:a0:56:64:d8:72:69:
                    02:20:7d:67:60:30:ed:82:75:54:61:5c:34:94:b2:
                    2f:36:48:a5:2d:c2:5a:5d:f7:cb:e2:9c:a1:9e:8e:
                    c9:3e:30:7b:6d:f8:f1:20:13:be:57:e5:da:88:63:
                    77:81:71:11:a8:8b:86:56:65:e0:96:fd:c2:08:4d:
                    81:f0:cb:ad:42:51:dd:7b:26:d1:44:d6:bb:16:42:
                    6c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E1:BA:13:EB:01:75:9B:17:1F:29:DE:FF:A6:E7:0F:29:EC:F6:06
            X509v3 Authority Key Identifier:
                keyid:5D:B5:C2:C0:14:FF:2D:CD:C0:35:02:A8:99:5C:A3:EB:3B:36:DE:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916155A/2D250014864411EB8A814D46C4F9AE02/XbXCwBT_Lc3ANQKomVyj6zs23l8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbXCwBT_Lc3ANQKomVyj6zs23l8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916155A/2D250014864411EB8A814D46C4F9AE02/5BC53460E74311EBA84BED2DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:4d:95:b1:be:4a:2e:9a:e3:d4:19:13:b9:e1:51:90:14:b5:
         3c:59:09:df:dd:ab:95:42:7d:17:0c:cd:32:1c:64:13:14:77:
         5d:47:5b:07:33:0f:83:5f:d9:85:c5:e3:16:b8:fc:82:dd:f1:
         c1:69:bb:89:f4:77:df:db:e5:92:69:e0:ce:c1:75:f1:52:d1:
         bd:53:1b:d7:11:ae:30:20:0c:ff:1e:03:57:07:f5:6c:20:5c:
         9e:68:64:96:23:96:88:6f:a6:22:33:31:af:42:fa:ef:25:b3:
         9c:2e:98:de:c1:95:bd:bb:de:19:26:f9:5d:6a:58:db:63:0a:
         c6:7d:e4:d1:52:b1:ac:4a:be:1f:bf:ba:a8:cc:e9:3e:90:ca:
         87:3b:a0:43:31:1b:82:40:dd:45:24:8e:a4:60:fb:bf:af:b2:
         b4:9a:f7:f3:0d:f7:c6:59:7a:9f:56:c1:f4:77:d0:c6:8e:c3:
         8f:a8:48:bf:6b:06:e5:7b:18:aa:f2:a8:27:f3:6d:ed:57:e9:
         4e:5f:21:b0:01:1d:56:1d:c7:15:da:36:3e:18:bb:45:ec:2d:
         96:5b:cd:6f:83:24:03:74:a6:16:9e:df:0c:c4:7f:29:1b:02:
         19:71:c9:da:7c:55:93:e1:08:27:16:df:da:96:d5:c0:1b:5c:
         ea:74:6a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:09 2024 by rpki-client on console-fra.rpki-client.org