Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2337/4F48F8F81B3311EAAD922842C4F9AE02/B8193C54BDE411EAB947BE63C4F9AE02.roa
File:                     B8193C54BDE411EAB947BE63C4F9AE02.roa (raw, json)
Hash identifier:          yK0BrUDGGpik5/2cVKn8E9qKw5c0TtVaNgYExIBvqFI=
Subject key identifier:   B2:FB:C4:5E:93:26:39:D1:24:EA:6E:77:C5:52:3C:34:4B:18:2F:77
Certificate issuer:       /CN=A91E2337/serialNumber=351CEF945094D37A44471E1C0A7B7AB73AEBB99C
Certificate serial:       0558
Authority key identifier: 35:1C:EF:94:50:94:D3:7A:44:47:1E:1C:0A:7B:7A:B7:3A:EB:B9:9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NRzvlFCU03pERx4cCnt6tzrruZw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2337/4F48F8F81B3311EAAD922842C4F9AE02/B8193C54BDE411EAB947BE63C4F9AE02.roa
Signing time:             Wed 24 Feb 2021 20:34:44 +0000
ROA not before:           Wed 24 Feb 2021 20:34:44 +0000
ROA not after:            Sun 01 May 2022 00:00:00 +0000
asID:                     24373
IP address blocks:        103.84.94.0/24 maxlen: 24
                          103.84.95.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1368 (0x558)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2337/serialNumber=351CEF945094D37A44471E1C0A7B7AB73AEBB99C
        Validity
            Not Before: Feb 24 20:34:44 2021 GMT
            Not After : May  1 00:00:00 2022 GMT
        Subject: CN=6036b864-cf04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:74:00:bf:71:f1:e4:0a:09:e3:99:51:5a:e4:
                    16:d8:c4:18:61:f4:d8:3d:9e:36:ea:b9:be:52:bc:
                    34:ec:c1:aa:25:0c:1f:76:f2:ed:92:51:03:dd:42:
                    b9:9d:a0:be:06:4d:73:1f:2e:2b:cb:9d:7b:c3:25:
                    ee:5f:f5:78:97:1d:ce:43:f1:d4:d0:6e:95:53:b2:
                    e2:c1:19:d0:01:6d:6f:78:d5:df:63:20:a8:62:39:
                    d1:a2:85:01:db:28:ce:7c:28:86:49:3b:42:24:af:
                    40:ca:80:a6:d6:4b:80:99:91:19:3d:02:b8:ab:0a:
                    1d:20:a3:e2:74:0f:11:9c:fd:2a:26:36:f0:14:13:
                    5e:8d:44:59:27:33:01:f0:f3:40:49:af:ce:74:36:
                    c9:95:b0:5e:22:74:0e:ce:b2:98:d8:d3:86:b3:89:
                    50:26:e1:32:15:8c:e0:67:43:78:3d:a7:f6:6f:56:
                    05:35:b9:c6:36:98:a0:bc:0e:48:44:1d:b0:50:02:
                    0b:e8:3e:c1:c5:2d:cd:b1:08:72:06:37:ec:2f:f9:
                    cc:35:0d:d1:dc:dc:9f:a4:3f:c3:71:b6:fe:3b:64:
                    3c:d3:99:7c:03:ee:ba:68:b2:3f:9e:40:a7:8f:e2:
                    45:5c:9b:a8:c5:6e:95:31:6b:e5:c4:d8:16:78:69:
                    28:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:FB:C4:5E:93:26:39:D1:24:EA:6E:77:C5:52:3C:34:4B:18:2F:77
            X509v3 Authority Key Identifier:
                keyid:35:1C:EF:94:50:94:D3:7A:44:47:1E:1C:0A:7B:7A:B7:3A:EB:B9:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2337/4F48F8F81B3311EAAD922842C4F9AE02/NRzvlFCU03pERx4cCnt6tzrruZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NRzvlFCU03pERx4cCnt6tzrruZw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2337/4F48F8F81B3311EAAD922842C4F9AE02/B8193C54BDE411EAB947BE63C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:9f:d0:3d:cd:6a:7a:61:1a:31:9f:16:45:86:c3:de:26:73:
         55:58:37:af:b7:67:9d:06:40:da:99:c7:ad:f6:35:33:bf:3e:
         a4:b1:69:4f:12:f2:cd:51:79:49:9d:13:c0:1d:8e:4f:06:62:
         ba:83:8b:61:6c:dc:ad:5c:3d:49:df:55:69:e5:fe:62:6a:05:
         61:87:9f:c4:14:03:d3:ed:8a:fa:c8:cf:12:c5:48:35:48:4c:
         5a:66:1c:bc:ef:95:fa:56:8c:a8:d5:fa:ca:d4:52:33:80:d7:
         ff:f2:db:4a:39:f3:bc:9c:17:68:b7:4c:45:71:66:f3:8d:fe:
         19:20:56:b3:c8:e2:00:f6:88:85:d4:f2:83:4d:72:86:49:89:
         20:df:e2:7f:34:cf:60:5d:d4:85:07:fb:e5:56:94:46:de:36:
         c0:8a:db:0e:11:38:95:6b:49:bf:6d:d6:45:3c:91:df:b0:44:
         d2:b1:3b:c1:c1:fc:59:76:a9:b2:80:f9:4f:75:a2:fe:46:b5:
         c0:dd:f8:a1:71:1e:37:0e:3b:d0:88:01:66:31:ad:fe:06:87:
         da:20:ff:b0:26:5e:90:5d:71:fe:1f:2e:f4:21:24:a7:15:2b:
         80:2d:23:83:ed:1a:17:e0:2c:b4:3e:2d:01:aa:fa:f2:43:d2:
         00:59:25:e3
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTIzMzcxMTAvBgNVBAUTKDM1MUNFRjk0NTA5NEQzN0E0NDQ3MUUxQzBBN0I3QUI3
M0FFQkI5OUMwHhcNMjEwMjI0MjAzNDQ0WhcNMjIwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MDM2Yjg2NC1jZjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyHQAv3Hx5AoJ45lRWuQW2MQYYfTYPZ426rm+Urw07MGqJQwfdvLtklED3UK5
naC+Bk1zHy4ry517wyXuX/V4lx3OQ/HU0G6VU7LiwRnQAW1veNXfYyCoYjnRooUB
2yjOfCiGSTtCJK9AyoCm1kuAmZEZPQK4qwodIKPidA8RnP0qJjbwFBNejURZJzMB
8PNASa/OdDbJlbBeInQOzrKY2NOGs4lQJuEyFYzgZ0N4Paf2b1YFNbnGNpigvA5I
RB2wUAIL6D7BxS3NsQhyBjfsL/nMNQ3R3NyfpD/Dcbb+O2Q805l8A+66aLI/nkCn
j+JFXJuoxW6VMWvlxNgWeGkopQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLL7xF6T
JjnRJOpud8VSPDRLGC93MB8GA1UdIwQYMBaAFDUc75RQlNN6REceHAp7erc667mc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjMzNy80RjQ4RjhGODFC
MzMxMUVBQUQ5MjI4NDJDNEY5QUUwMi9OUnp2bEZDVTAzcEVSeDRjQ250NnR6cnJ1
WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05SenZsRkNVMDNwRVJ4NGNDbnQ2dHpycnVady5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTIzMzcvNEY0OEY4RjgxQjMzMTFFQUFEOTIyODQyQzRGOUFFMDIvQjgxOTNDNTRC
REU0MTFFQUI5NDdCRTYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnVF4wDQYJKoZIhvcNAQELBQADggEBAGmf0D3NanphGjGf
FkWGw94mc1VYN6+3Z50GQNqZx632NTO/PqSxaU8S8s1ReUmdE8Adjk8GYrqDi2Fs
3K1cPUnfVWnl/mJqBWGHn8QUA9PtivrIzxLFSDVITFpmHLzvlfpWjKjV+srUUjOA
1//y20o587ycF2i3TEVxZvON/hkgVrPI4gD2iIXU8oNNcoZJiSDf4n80z2Bd1IUH
++VWlEbeNsCK2w4ROJVrSb9t1kU8kd+wRNKxO8HB/Fl2qbKA+U91ov5GtcDd+KFx
HjcOO9CIAWYxrf4Gh9og/7AmXpBdcf4fLvQhJKcVK4AtI4PtGhfgLLQ+LQGq+vJD
0gBZJeM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:44 2024 by rpki-client on console-fra.rpki-client.org