Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916421F/FD95A6CA69D211EAB7D95E33C4F9AE02/612B16DC4AD411EC9C442D1FC4F9AE02.roa
File:                     612B16DC4AD411EC9C442D1FC4F9AE02.roa (raw, json)
Hash identifier:          37pl8W17O6yU2IUv6SO9qby1ZjyqcZbV16eIkDVt7AU=
Subject key identifier:   C0:E0:0A:72:63:3E:CA:24:B8:9B:38:DF:79:9D:E6:46:2B:39:20:4B
Certificate issuer:       /CN=A916421F/serialNumber=601838C122D1D0E626763154DD906DA816C7996C
Certificate serial:       05D8
Authority key identifier: 60:18:38:C1:22:D1:D0:E6:26:76:31:54:DD:90:6D:A8:16:C7:99:6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBg4wSLR0OYmdjFU3ZBtqBbHmWw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916421F/FD95A6CA69D211EAB7D95E33C4F9AE02/612B16DC4AD411EC9C442D1FC4F9AE02.roa
Signing time:             Sun 21 Nov 2021 14:07:37 +0000
ROA not before:           Sun 21 Nov 2021 14:07:37 +0000
ROA not after:            Fri 01 Jul 2022 00:00:00 +0000
asID:                     138197
IP address blocks:        103.149.167.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1496 (0x5d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916421F/serialNumber=601838C122D1D0E626763154DD906DA816C7996C
        Validity
            Not Before: Nov 21 14:07:37 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=619a52a8-0acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b2:1c:58:da:f5:34:c3:cb:7c:4f:33:ed:39:
                    4c:6e:30:85:af:f7:b5:1f:36:57:63:9d:6f:ec:ed:
                    d7:bf:38:3b:18:a4:ea:10:d7:b7:98:1c:98:3e:c0:
                    fe:1d:c7:3b:f4:63:8e:c2:90:0f:37:0a:c8:0a:da:
                    42:78:d5:e3:9a:6b:62:aa:7a:50:0c:e3:0d:43:a0:
                    a6:a5:a3:95:89:b7:7d:d5:65:f4:f1:1e:d2:42:9b:
                    52:4b:67:61:10:67:32:78:67:f1:c8:cc:fd:55:15:
                    f2:5b:78:52:55:d8:ab:f6:f7:d4:be:fe:31:32:9f:
                    40:e8:3e:7f:f0:0e:14:2c:6e:c1:18:ef:e1:37:e4:
                    23:e9:c5:49:c6:ba:25:47:18:74:a7:0f:6a:68:b8:
                    13:17:84:7c:e9:cc:04:47:1b:57:e7:4c:7a:85:69:
                    6e:81:3e:a8:2b:4e:d8:b4:07:d9:f4:24:3e:13:a4:
                    e7:d3:43:bb:ea:88:5b:93:43:f1:29:2f:67:cd:ff:
                    76:9a:e0:85:1d:94:87:82:de:16:a7:0b:3e:09:6e:
                    35:ee:6f:89:8b:11:8f:1d:6f:82:8e:43:56:9f:99:
                    25:a4:f3:7c:c8:98:90:2e:9a:00:24:d2:2c:4d:2f:
                    29:f8:25:fb:0e:e1:db:9b:6b:dc:31:e8:f7:11:eb:
                    14:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E0:0A:72:63:3E:CA:24:B8:9B:38:DF:79:9D:E6:46:2B:39:20:4B
            X509v3 Authority Key Identifier:
                keyid:60:18:38:C1:22:D1:D0:E6:26:76:31:54:DD:90:6D:A8:16:C7:99:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916421F/FD95A6CA69D211EAB7D95E33C4F9AE02/YBg4wSLR0OYmdjFU3ZBtqBbHmWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBg4wSLR0OYmdjFU3ZBtqBbHmWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916421F/FD95A6CA69D211EAB7D95E33C4F9AE02/612B16DC4AD411EC9C442D1FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:b1:33:9b:2a:62:a5:75:f7:df:c3:71:dd:87:34:37:d4:02:
         84:6e:8d:af:db:93:25:aa:34:24:c8:71:b7:8b:e5:10:22:4a:
         b6:8a:c1:ce:84:25:a0:ad:e8:31:50:fb:51:bc:0d:da:bd:1a:
         8d:ce:aa:7f:3f:78:00:09:fa:c6:63:01:11:a8:9b:8f:af:c0:
         4c:d9:2f:a1:74:f8:87:3d:ac:d6:e0:fe:b5:89:82:9e:45:83:
         10:62:67:f4:50:ae:b4:1a:ac:4e:86:d3:cd:1e:4a:ad:e1:07:
         f9:f2:77:12:00:79:05:36:3f:a8:64:f2:dc:a7:85:c5:2c:b5:
         d8:37:1f:b9:31:35:f1:b6:39:27:bf:b9:41:87:54:86:36:20:
         2c:bf:2a:7b:83:bd:c1:d1:60:d6:86:64:61:91:4f:b7:32:42:
         e0:85:cf:e0:2b:75:d4:ac:86:5e:20:62:be:90:ad:65:ec:e6:
         14:a9:5f:89:9f:e5:f1:27:b7:fa:5a:e0:7a:01:f6:0c:08:05:
         4e:53:c6:92:53:6f:2e:c2:bd:14:d6:e3:1e:6d:de:72:97:6a:
         75:35:92:e7:17:b9:e2:dc:8a:e1:0e:de:2d:4f:3f:19:58:a4:
         c9:7f:5d:83:c3:36:e0:86:71:3a:9b:ca:8b:97:b6:da:a4:bc:
         58:af:ad:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:09 2024 by rpki-client on console-fra.rpki-client.org