Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/B4B6C2B0C1AA11EF83A31D6CC4F9AE02.roa
File:                     B4B6C2B0C1AA11EF83A31D6CC4F9AE02.roa (raw, json)
Hash identifier:          bw0f6KbJYjRey2+KDVpK9dBW3Yh7Jdgva8k4Bt7aCcM=
Subject key identifier:   48:38:6C:D9:3D:51:B1:15:25:EF:20:AB:C6:EA:1D:D5:60:47:F5:12
Certificate issuer:       /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Certificate serial:       D1
Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/B4B6C2B0C1AA11EF83A31D6CC4F9AE02.roa
Signing time:             Tue 24 Dec 2024 03:54:00 +0000
ROA not before:           Tue 24 Dec 2024 03:54:00 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     38047
IP address blocks:        103.118.40.0/22 maxlen: 22
                          103.118.40.0/23 maxlen: 23
                          103.118.40.0/24 maxlen: 24
                          103.118.41.0/24 maxlen: 24
                          103.118.42.0/23 maxlen: 23
                          103.118.42.0/24 maxlen: 24
                          103.118.43.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 209 (0xd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A66F
        Validity
            Not Before: Dec 24 03:54:00 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=676a3057-62af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:59:2a:12:52:e6:b6:2b:c1:ab:2a:01:8f:86:
                    a1:fa:47:8c:0e:1a:2d:ee:99:b9:d1:b2:82:95:3d:
                    46:17:39:ff:92:88:d2:85:a8:e0:98:db:86:2f:ee:
                    96:37:7e:01:b2:4a:eb:9f:b6:59:bc:57:47:cb:5b:
                    bf:d4:88:30:4f:b9:4b:ac:2d:b1:d6:b3:45:2e:96:
                    88:9b:24:03:48:f6:03:d3:54:2e:a3:34:35:5c:aa:
                    f9:7d:bb:80:3f:49:98:f8:d9:df:27:5e:34:96:86:
                    64:b1:b7:2d:74:19:5f:22:7b:c5:d2:54:7b:c0:80:
                    86:d9:ea:4a:34:fc:36:13:6f:12:5f:8a:f6:45:5e:
                    cc:04:4f:ee:a1:5a:04:ed:a8:97:1a:6b:eb:36:98:
                    d8:f6:47:39:c7:1b:93:07:83:b9:f2:28:bf:e2:43:
                    b8:a0:76:7a:27:79:a6:74:01:d7:4c:19:92:4d:f8:
                    f1:07:f2:a5:3a:23:67:ac:32:45:4f:01:1c:25:d8:
                    9e:1b:4f:31:88:9d:2b:a4:b7:d9:ae:4d:51:f5:d4:
                    86:7d:97:ff:10:88:db:45:17:bd:4e:89:a4:99:78:
                    c7:58:f0:9e:25:73:7f:d2:c2:4e:9b:12:ca:31:8a:
                    eb:7e:92:40:b8:2d:d4:7d:3b:f6:d8:8f:ae:33:bc:
                    ac:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:38:6C:D9:3D:51:B1:15:25:EF:20:AB:C6:EA:1D:D5:60:47:F5:12
            X509v3 Authority Key Identifier:
                keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/B4B6C2B0C1AA11EF83A31D6CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:42:d5:cd:9d:ed:02:b1:91:5f:38:e7:d3:03:a0:2a:d4:d2:
         29:4e:fe:e2:08:24:f4:e1:93:6a:42:29:56:23:2f:68:1c:6e:
         c3:a6:1a:40:00:65:fb:e1:e0:9d:71:0e:a7:f0:6c:71:53:b6:
         f0:c2:e6:ad:ce:7c:8b:d7:e3:95:78:2b:39:90:45:18:64:92:
         53:96:e3:bd:5e:eb:71:59:82:df:d9:0a:5e:e4:a0:7d:46:17:
         fa:08:48:f4:e9:0f:8a:3a:10:76:0a:7e:eb:dc:78:9e:ee:85:
         7f:ce:ed:dc:38:fb:39:8b:a1:f2:eb:6b:06:9d:cc:16:ad:b2:
         80:cd:74:a2:d0:bd:bf:31:4e:6e:39:c3:4e:13:9c:6c:dd:39:
         d1:e2:fd:95:2a:0c:35:8d:5b:58:8b:26:c5:83:b8:a0:c0:26:
         0c:d8:21:84:bf:d2:08:58:9d:69:9b:a1:48:d3:9e:97:e0:b6:
         70:50:99:d0:d0:96:2c:5c:ca:31:92:7d:2a:91:c6:35:ef:e2:
         e6:cd:a1:7e:05:e6:39:86:06:ab:d1:53:c9:3a:d7:23:1d:b1:
         8d:50:2b:88:fa:36:d7:ee:af:30:04:7f:89:d8:3b:50:d7:2b:
         16:58:f9:58:a0:76:75:38:84:e5:39:13:4d:56:6c:7f:04:81:
         30:ec:39:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:40:22 2025 by rpki-client