Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE730/0DEC44E47D0811E78E22875EC4F9AE02/A97BCC3850C811ED99224F55C4F9AE02.roa
File:                     A97BCC3850C811ED99224F55C4F9AE02.roa (raw, json)
Hash identifier:          ekrlfk57fvnjSevbRaiAQVPJQUaBiOpBOtPNst9LUWM=
Subject key identifier:   44:82:3B:BF:04:06:49:84:30:F4:94:90:33:AD:5D:ED:94:B0:C1:60
Certificate issuer:       /CN=A91CE730/serialNumber=972D52AD33D21109CD35743961F206D76028E37D
Certificate serial:       1732
Authority key identifier: 97:2D:52:AD:33:D2:11:09:CD:35:74:39:61:F2:06:D7:60:28:E3:7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ly1SrTPSEQnNNXQ5YfIG12Ao430.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE730/0DEC44E47D0811E78E22875EC4F9AE02/A97BCC3850C811ED99224F55C4F9AE02.roa
Signing time:             Thu 20 Oct 2022 22:43:49 +0000
ROA not before:           Thu 20 Oct 2022 22:43:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     133556
IP address blocks:        103.227.64.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5938 (0x1732)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE730/serialNumber=972D52AD33D21109CD35743961F206D76028E37D
        Validity
            Not Before: Oct 20 22:43:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6351cf24-0210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:31:61:ff:15:25:3f:3a:cb:13:36:f9:87:a3:
                    18:6e:56:fe:b7:60:4d:ca:35:91:3b:f7:c3:c9:5d:
                    5c:c3:0c:5d:2c:28:11:03:7e:59:f4:05:17:7a:03:
                    31:f9:b7:bb:45:ba:12:ca:f2:0d:9d:31:c4:b6:2c:
                    21:d9:5d:96:64:03:db:8e:29:f8:29:fb:ab:7a:82:
                    ed:56:e4:f1:6d:7b:eb:8b:b5:d0:4f:d9:5e:1c:5d:
                    52:60:57:9b:12:80:6e:d2:cc:82:3a:4e:54:20:ad:
                    31:35:04:19:85:5e:e3:41:de:cf:5c:4a:a4:ee:4e:
                    30:16:48:7b:67:a4:a5:c1:3a:8a:18:fd:80:c3:f7:
                    6b:ed:fa:7d:ab:72:eb:b5:7b:0b:ce:8c:23:3b:36:
                    b5:e3:17:c0:f4:47:7c:8e:65:f9:39:29:d5:b8:3a:
                    e7:3f:f9:f1:16:51:31:c6:8d:ba:f7:14:6f:3e:47:
                    34:8f:56:d2:1a:2f:8f:b4:44:70:47:0f:e8:07:84:
                    bc:9d:31:12:66:49:eb:ae:9d:06:29:b5:f1:4f:59:
                    ab:66:e2:74:a1:25:8a:e9:da:37:da:78:45:bb:65:
                    9a:fe:fe:f4:ec:76:a5:a1:7c:a3:71:52:18:f5:f3:
                    56:8f:51:b3:d4:9c:66:f3:5b:e2:d8:fb:78:ca:95:
                    8a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:82:3B:BF:04:06:49:84:30:F4:94:90:33:AD:5D:ED:94:B0:C1:60
            X509v3 Authority Key Identifier:
                keyid:97:2D:52:AD:33:D2:11:09:CD:35:74:39:61:F2:06:D7:60:28:E3:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE730/0DEC44E47D0811E78E22875EC4F9AE02/ly1SrTPSEQnNNXQ5YfIG12Ao430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ly1SrTPSEQnNNXQ5YfIG12Ao430.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE730/0DEC44E47D0811E78E22875EC4F9AE02/A97BCC3850C811ED99224F55C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:3d:46:41:66:ca:e7:7c:33:80:0c:e4:87:fb:3b:98:6c:54:
         12:2b:64:81:f0:05:e1:ea:e2:54:59:3f:22:58:7a:7f:b4:18:
         76:65:5c:36:68:84:35:91:48:a8:cd:4e:2a:c0:a7:6d:dc:0f:
         9b:d8:90:b9:22:3d:27:0c:bd:bd:58:2c:9e:b0:6b:f2:54:a5:
         d8:55:a0:5b:15:39:8b:56:3a:79:da:d1:3e:5f:c4:12:64:42:
         52:d5:90:1a:a8:08:20:94:95:ca:b6:9b:d2:a0:ca:52:53:a9:
         f3:2f:a0:ac:7c:76:ce:b2:f3:3c:f6:9f:45:8a:84:34:38:de:
         7e:86:5f:ff:75:11:3a:b5:a3:1c:f6:7a:51:ef:0d:a2:57:a6:
         7e:03:4b:14:6b:e4:80:b5:e0:b4:83:b7:ce:7e:0e:a6:23:bd:
         47:f2:95:4d:ed:c5:e5:76:4b:81:02:3d:a3:85:ef:24:55:09:
         b9:b4:42:24:d5:ac:19:f7:e0:20:36:d9:d9:e4:7b:4f:86:bf:
         7a:92:76:b5:85:6f:2e:36:8a:11:a5:86:55:e5:7a:8b:c0:f3:
         59:28:cd:01:98:1e:ef:e1:5e:36:e3:4f:38:89:a0:7a:3f:66:
         5c:ab:27:10:73:c2:1b:64:c3:1f:ed:2b:41:0d:69:a1:37:cb:
         be:83:3e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:27 2024 by rpki-client on console-ams.rpki-client.org