Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A916C75D0000/0/3130332e3137322e34302e302f32332d3234203d3e203338313336.roa
File:                     3130332e3137322e34302e302f32332d3234203d3e203338313336.roa (raw, json)
Hash identifier:          EYLRdy4B+uy4rOgrkYU9IwpcEC0Js43S8x2/KlOQNec=
Subject key identifier:   D5:81:25:58:CA:45:57:48:50:81:1E:93:2D:2C:7F:66:33:E5:C0:4A
Certificate issuer:       /CN=A916C75D0000/serialNumber=492C94B5D5EC5F8E371BA1D7C081A711B8E26A6D
Certificate serial:       25EFCB3AA898D8CD74045ABD2A28943B2138A309
Authority key identifier: 49:2C:94:B5:D5:EC:5F:8E:37:1B:A1:D7:C0:81:A7:11:B8:E2:6A:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSyUtdXsX443G6HXwIGnEbjiam0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A916C75D0000/0/3130332e3137322e34302e302f32332d3234203d3e203338313336.roa
Signing time:             Wed 19 Jun 2024 12:59:28 +0000
ROA not before:           Wed 19 Jun 2024 12:54:28 +0000
ROA not after:            Wed 18 Jun 2025 12:59:28 +0000
asID:                     38136
IP address blocks:        103.172.40.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ef:cb:3a:a8:98:d8:cd:74:04:5a:bd:2a:28:94:3b:21:38:a3:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C75D0000/serialNumber=492C94B5D5EC5F8E371BA1D7C081A711B8E26A6D
        Validity
            Not Before: Jun 19 12:54:28 2024 GMT
            Not After : Jun 18 12:59:28 2025 GMT
        Subject: CN=D5812558CA45574850811E932D2C7F6633E5C04A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:10:9a:17:05:c2:5d:5e:ce:01:4c:92:64:13:
                    c8:29:e6:7e:4c:9a:f1:45:91:d1:ca:f9:c3:5a:dc:
                    a6:00:59:cd:02:2f:d1:66:19:21:45:bc:5f:e0:ce:
                    2a:53:dc:bc:63:bf:61:9d:58:79:e3:76:d4:9f:b1:
                    20:9c:9e:da:17:c6:87:10:c4:33:13:86:41:c2:43:
                    43:c3:83:3f:86:a4:12:cf:1b:82:5b:6c:f7:9b:4d:
                    75:5c:d1:f3:d3:65:d4:89:ed:76:0c:fa:f6:4c:be:
                    13:fc:11:1f:cb:58:d5:8c:ce:98:94:dc:c3:4a:62:
                    2e:99:79:90:72:f5:32:5a:9d:2e:86:7d:f2:d9:b1:
                    65:df:3c:e7:17:71:28:ca:e8:95:a6:0a:d9:d3:f3:
                    57:ec:c3:b3:d6:fb:09:83:74:d1:be:46:fc:ff:ca:
                    bb:66:a6:c8:32:bb:10:a2:df:cc:6d:a6:e2:3f:78:
                    58:45:3b:27:0a:dd:0e:2b:bd:6d:d3:cf:76:b5:73:
                    71:2d:fd:62:91:0d:4d:66:01:7b:21:49:70:1a:34:
                    43:ed:25:bf:d5:0d:b8:ab:ce:90:7f:d1:a4:a1:6d:
                    31:04:c1:5e:75:f0:ce:a1:f7:cb:69:cb:6d:bd:80:
                    88:cf:94:42:ad:1b:43:11:d8:15:74:ef:a4:16:d4:
                    14:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:81:25:58:CA:45:57:48:50:81:1E:93:2D:2C:7F:66:33:E5:C0:4A
            X509v3 Authority Key Identifier:
                keyid:49:2C:94:B5:D5:EC:5F:8E:37:1B:A1:D7:C0:81:A7:11:B8:E2:6A:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A916C75D0000/0/492C94B5D5EC5F8E371BA1D7C081A711B8E26A6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSyUtdXsX443G6HXwIGnEbjiam0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A916C75D0000/0/3130332e3137322e34302e302f32332d3234203d3e203338313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d5:88:f5:41:2f:1c:17:5e:2a:d3:19:61:d6:54:9a:66:95:83:
         f0:09:bf:29:d8:95:8b:68:7c:7d:ad:da:ee:6c:c2:7e:0d:26:
         7b:8c:4e:c7:ab:b3:ed:16:42:27:20:8d:38:4d:7a:93:04:cd:
         16:ba:c4:04:14:10:d0:2b:5f:de:dc:39:be:07:14:ae:27:a8:
         fa:28:2c:3a:78:85:09:3a:e2:93:51:a6:bf:03:40:d3:0e:40:
         55:1c:25:d5:b5:62:c5:94:d2:20:d3:e2:be:a4:45:d1:15:f7:
         e2:b4:3c:a0:0c:fa:c0:f6:cf:e2:d6:83:2c:1f:26:ec:f2:91:
         82:65:2b:42:07:7f:e0:9d:02:c3:de:f3:04:2c:2f:24:46:fd:
         24:55:e9:78:6c:24:f6:25:1c:9a:35:c8:da:fa:97:7a:85:3d:
         41:be:47:be:ce:a0:fe:1b:d3:eb:f5:2d:42:5f:c6:f1:1b:63:
         94:1c:de:d0:0a:76:f1:bd:30:a6:0b:e0:97:71:de:67:63:95:
         7f:c8:1b:8c:46:ab:ff:6b:9f:8c:69:58:ba:3e:61:da:9a:3c:
         66:7b:92:98:84:0b:a5:c6:5c:f5:1d:75:f4:cc:a8:4a:48:a0:
         81:ac:b2:98:f5:a5:87:94:3e:4c:f7:c1:d1:7c:26:a2:52:26:
         a6:3b:72:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 08:47:21 2024 by rpki-client on console-ams.rpki-client.org