Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAFB1/AB307048D52011ECB07B6035C4F9AE02/0FCBD068D52811EC9A064031C4F9AE02.roa
File:                     0FCBD068D52811EC9A064031C4F9AE02.roa (raw, json)
Hash identifier:          A0dKBsGtRUK2ZxwD5RnEM7Z/ZpdAYvR8tgjxK4N8EKc=
Subject key identifier:   F6:57:3C:49:E7:8B:12:1F:C0:17:16:FA:BA:14:81:CE:70:2D:AD:31
Certificate issuer:       /CN=A91FAFB1/serialNumber=F3190194F8FAE29AF17EC19FC88CA6742CD5CDEA
Certificate serial:       CE
Authority key identifier: F3:19:01:94:F8:FA:E2:9A:F1:7E:C1:9F:C8:8C:A6:74:2C:D5:CD:EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xkBlPj64prxfsGfyIymdCzVzeo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FAFB1/AB307048D52011ECB07B6035C4F9AE02/0FCBD068D52811EC9A064031C4F9AE02.roa
Signing time:             Fri 26 Aug 2022 05:03:33 +0000
ROA not before:           Fri 26 Aug 2022 05:03:33 +0000
ROA not after:            Tue 31 Oct 2023 00:00:00 +0000
asID:                     135330
IP address blocks:        103.119.44.0/22 maxlen: 22
                          103.119.44.0/24 maxlen: 24
                          103.119.45.0/24 maxlen: 24
                          103.119.46.0/24 maxlen: 24
                          103.119.47.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FAFB1/serialNumber=F3190194F8FAE29AF17EC19FC88CA6742CD5CDEA
        Validity
            Not Before: Aug 26 05:03:33 2022 GMT
            Not After : Oct 31 00:00:00 2023 GMT
        Subject: CN=63085424-0179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:94:0c:48:ce:0e:eb:cd:fc:0f:15:2a:aa:7f:
                    2d:c8:a4:7b:b0:64:e5:9a:af:9b:c3:05:ac:07:0f:
                    33:ac:1c:92:8d:89:61:44:64:e5:c9:92:b9:9a:7d:
                    0a:80:56:f9:01:27:ff:82:63:e8:8f:d2:2c:c1:16:
                    81:3d:bd:d9:d2:a1:e8:b0:b9:14:29:7a:9b:d9:e1:
                    32:e9:2c:c5:7b:4e:b7:cd:8a:32:af:84:d5:19:a3:
                    52:f5:19:d4:d8:6a:fc:14:37:26:f8:f5:f4:ca:30:
                    3c:72:66:37:c3:42:a2:de:fa:41:44:db:ce:6d:a1:
                    3f:1b:d6:65:f6:02:b9:a7:43:25:f3:e8:82:55:9a:
                    ec:a0:5f:fd:b7:48:82:08:aa:b7:bd:17:b6:d6:6e:
                    78:f0:30:6a:4d:da:d0:c3:39:63:63:ed:c3:f6:e1:
                    b2:97:84:a4:43:cd:0c:e5:1f:70:78:fa:a3:2e:ff:
                    45:cf:48:55:52:4b:92:7f:67:a2:35:35:c3:fc:a4:
                    1d:c3:c0:b2:14:5f:24:2a:ec:a0:63:ae:4d:fd:92:
                    44:01:4c:dc:ce:3e:86:76:68:ca:7f:c4:80:a2:93:
                    57:d0:b2:95:51:63:af:da:df:42:54:a3:95:4a:73:
                    2f:df:2c:20:11:72:4a:9f:30:74:59:36:59:64:a7:
                    18:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:57:3C:49:E7:8B:12:1F:C0:17:16:FA:BA:14:81:CE:70:2D:AD:31
            X509v3 Authority Key Identifier:
                keyid:F3:19:01:94:F8:FA:E2:9A:F1:7E:C1:9F:C8:8C:A6:74:2C:D5:CD:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FAFB1/AB307048D52011ECB07B6035C4F9AE02/8xkBlPj64prxfsGfyIymdCzVzeo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xkBlPj64prxfsGfyIymdCzVzeo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAFB1/AB307048D52011ECB07B6035C4F9AE02/0FCBD068D52811EC9A064031C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:00:a0:fd:af:d6:ba:d2:f9:76:58:e7:10:c0:09:f5:37:e9:
         54:fe:94:41:6e:f5:e4:dc:fa:74:e4:52:f8:63:22:13:54:02:
         d3:20:f8:17:68:d7:59:a3:6a:89:23:21:b8:d3:ac:1d:36:30:
         2d:83:02:ad:ca:a7:fe:3e:b2:6c:54:7e:10:01:56:e8:05:63:
         3a:03:da:c2:7c:05:04:8b:ef:3f:53:d1:7f:6d:d2:cc:d6:5e:
         02:b2:40:77:77:cf:a5:25:ab:33:86:9a:02:24:75:5a:78:4a:
         d6:8b:b2:92:18:37:c1:14:2d:83:a5:43:d3:70:0a:9f:ef:31:
         ee:ac:cd:68:6e:b9:f8:9c:dd:8e:8a:ae:99:d5:31:17:5f:9b:
         69:07:4c:b3:8a:6e:c1:81:1e:35:c8:6c:79:de:16:bc:69:3d:
         8e:eb:73:da:2e:27:ea:86:2d:cc:b3:f4:53:03:13:14:ee:59:
         79:f5:db:d4:9b:07:2c:58:70:83:0f:e8:f2:b3:a1:9c:59:af:
         0b:72:b4:5a:ef:4a:8a:11:e6:8e:a6:e3:74:de:f0:7f:2f:7e:
         a4:c9:89:c0:c3:7a:5d:bb:26:d9:d5:d4:a5:cd:98:9b:5a:6a:
         22:bc:cd:50:c1:f7:92:ba:63:93:93:d6:52:54:c4:cc:e3:00:
         ae:67:40:d2
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkFGQjExMTAvBgNVBAUTKEYzMTkwMTk0RjhGQUUyOUFGMTdFQzE5RkM4OENBNjc0
MkNENUNERUEwHhcNMjIwODI2MDUwMzMzWhcNMjMxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzA4NTQyNC0wMTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyJQMSM4O6838DxUqqn8tyKR7sGTlmq+bwwWsBw8zrBySjYlhRGTlyZK5mn0K
gFb5ASf/gmPoj9IswRaBPb3Z0qHosLkUKXqb2eEy6SzFe063zYoyr4TVGaNS9RnU
2Gr8FDcm+PX0yjA8cmY3w0Ki3vpBRNvObaE/G9Zl9gK5p0Ml8+iCVZrsoF/9t0iC
CKq3vRe21m548DBqTdrQwzljY+3D9uGyl4SkQ80M5R9wePqjLv9Fz0hVUkuSf2ei
NTXD/KQdw8CyFF8kKuygY65N/ZJEAUzczj6GdmjKf8SAopNX0LKVUWOv2t9CVKOV
SnMv3ywgEXJKnzB0WTZZZKcYYQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPZXPEnn
ixIfwBcW+roUgc5wLa0xMB8GA1UdIwQYMBaAFPMZAZT4+uKa8X7Bn8iMpnQs1c3q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUZCMS9BQjMwNzA0OEQ1
MjAxMUVDQjA3QjYwMzVDNEY5QUUwMi84eGtCbFBqNjRwcnhmc0dmeUl5bWRDelZ6
ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzh4a0JsUGo2NHByeGZzR2Z5SXltZEN6Vnplby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkFGQjEvQUIzMDcwNDhENTIwMTFFQ0IwN0I2MDM1QzRGOUFFMDIvMEZDQkQwNjhE
NTI4MTFFQzlBMDY0MDMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJndywwDQYJKoZIhvcNAQELBQADggEBAA0AoP2v1rrS+XZY
5xDACfU36VT+lEFu9eTc+nTkUvhjIhNUAtMg+Bdo11mjaokjIbjTrB02MC2DAq3K
p/4+smxUfhABVugFYzoD2sJ8BQSL7z9T0X9t0szWXgKyQHd3z6UlqzOGmgIkdVp4
StaLspIYN8EULYOlQ9NwCp/vMe6szWhuufic3Y6KrpnVMRdfm2kHTLOKbsGBHjXI
bHneFrxpPY7rc9ouJ+qGLcyz9FMDExTuWXn129SbByxYcIMP6PKzoZxZrwtytFrv
SooR5o6m43Te8H8vfqTJicDDel27JtnV1KXNmJtaaiK8zVDB95K6Y5OT1lJUxMzj
AK5nQNI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:40 2024 by rpki-client on console-ams.rpki-client.org