Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91857810000/1/3130332e3134312e36392e302f32342d3234203d3e20313338313536.roa
File:                     3130332e3134312e36392e302f32342d3234203d3e20313338313536.roa (raw, json)
Hash identifier:          YpQuZD2Qy8UZ4rFVcfps2dEKj9y46ybucNkBdGMJkiI=
Subject key identifier:   20:98:D6:21:89:37:66:DA:6F:E5:26:DD:B0:F2:F2:55:B8:F5:C1:7C
Certificate issuer:       /CN=A91857810000/serialNumber=6B154E1DE7185CF18264814F64D7DDD9986615C1
Certificate serial:       1B3172E6A9B7791C98AA07B88D38078D077282D8
Authority key identifier: 6B:15:4E:1D:E7:18:5C:F1:82:64:81:4F:64:D7:DD:D9:98:66:15:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/axVOHecYXPGCZIFPZNfd2ZhmFcE.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91857810000/1/3130332e3134312e36392e302f32342d3234203d3e20313338313536.roa
Signing time:             Mon 28 Nov 2022 08:24:38 +0000
ROA not before:           Mon 28 Nov 2022 08:19:38 +0000
ROA not after:            Mon 27 Nov 2023 08:24:38 +0000
asID:                     138156
IP address blocks:        103.141.69.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:31:72:e6:a9:b7:79:1c:98:aa:07:b8:8d:38:07:8d:07:72:82:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91857810000/serialNumber=6B154E1DE7185CF18264814F64D7DDD9986615C1
        Validity
            Not Before: Nov 28 08:19:38 2022 GMT
            Not After : Nov 27 08:24:38 2023 GMT
        Subject: CN=2098D621893766DA6FE526DDB0F2F255B8F5C17C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:89:04:25:dd:94:ba:96:95:75:82:09:ce:02:
                    b3:83:73:1c:48:4f:a9:5f:97:ce:74:ba:6e:9b:2e:
                    fd:45:88:d8:15:7c:05:b6:b8:d2:1d:a8:8e:ab:98:
                    79:e7:e2:18:db:f0:51:4a:7f:72:be:44:b1:20:ea:
                    2b:69:cc:a9:7c:ae:48:08:c4:9e:5c:c8:fa:c3:98:
                    95:a5:f8:fc:8a:55:85:82:3c:a7:f9:88:92:27:23:
                    6f:b2:1b:bb:17:fc:1f:54:19:41:1d:aa:61:ba:d1:
                    c1:97:03:bd:44:09:d8:00:07:e0:39:86:ef:2c:db:
                    72:a8:47:2f:a0:1e:00:de:f5:d2:0b:f3:e8:96:fb:
                    9a:ac:7e:8c:2a:36:f8:78:00:dc:d2:e4:51:2d:f4:
                    50:a8:96:11:0c:ca:b7:2e:fe:2b:3a:98:dd:c6:d7:
                    fe:b9:e3:70:57:6d:a3:df:7c:fd:87:66:9d:4c:17:
                    f3:56:73:9f:a5:65:25:3c:4c:ac:e3:8a:05:56:a0:
                    8a:75:f0:34:43:38:5f:15:8c:ca:76:fb:75:ff:a0:
                    8b:50:3a:d7:91:45:50:f0:44:0f:3c:65:9c:aa:62:
                    86:86:f6:b2:ff:5d:9a:c9:3a:65:41:6d:3c:d6:71:
                    4f:c2:55:02:bd:88:32:22:ef:29:ba:3b:83:30:d3:
                    86:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:98:D6:21:89:37:66:DA:6F:E5:26:DD:B0:F2:F2:55:B8:F5:C1:7C
            X509v3 Authority Key Identifier:
                keyid:6B:15:4E:1D:E7:18:5C:F1:82:64:81:4F:64:D7:DD:D9:98:66:15:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91857810000/1/6B154E1DE7185CF18264814F64D7DDD9986615C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/axVOHecYXPGCZIFPZNfd2ZhmFcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91857810000/1/3130332e3134312e36392e302f32342d3234203d3e20313338313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:11:35:90:e8:45:f4:8c:84:51:9b:c8:e0:53:5d:5b:11:86:
         6c:aa:2d:7f:e7:34:2e:3a:00:dc:93:2d:2e:d6:d2:a5:cb:28:
         b6:79:46:29:d4:d6:61:e3:14:84:96:8c:82:48:93:aa:40:80:
         2e:48:72:73:41:7b:b1:99:e1:46:d4:d2:1c:10:25:c1:44:34:
         8f:73:60:66:dc:34:9c:f3:f9:06:2e:d7:cb:39:8b:eb:ef:9f:
         54:90:b9:ba:48:f9:e7:be:31:25:9f:fe:a5:eb:d0:a3:7e:17:
         87:40:8d:c5:fd:57:d1:5c:bd:ce:b1:0f:3a:c8:87:a1:0e:b3:
         25:08:54:79:52:60:71:7a:0d:f5:8b:42:dc:76:d2:5e:2c:cc:
         f8:c0:0a:8e:cb:7f:46:fc:95:3a:3e:04:8a:81:d1:93:f6:45:
         dc:6a:59:60:7d:2c:d4:1e:8c:76:4a:d6:bc:87:e5:64:b7:a3:
         a9:9d:ab:9c:90:06:9d:10:bd:40:77:73:78:75:e4:ce:a8:fe:
         24:2e:84:0c:38:0e:52:a6:f2:f1:5f:7c:b7:9c:75:61:3c:b3:
         de:66:f9:be:83:b2:91:f8:83:2b:51:a9:27:6b:3b:f0:1c:ba:
         75:3e:60:52:c1:46:7f:9d:ba:fa:37:ba:ce:9a:f5:5f:28:4c:
         72:49:5d:7a
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUGzFy5qm3eRyYqge4jTgHjQdygtgwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODU3ODEwMDAwMTEwLwYDVQQFEyg2QjE1NEUxREU3
MTg1Q0YxODI2NDgxNEY2NEQ3REREOTk4NjYxNUMxMB4XDTIyMTEyODA4MTkzOFoX
DTIzMTEyNzA4MjQzOFowMzExMC8GA1UEAxMoMjA5OEQ2MjE4OTM3NjZEQTZGRTUy
NkREQjBGMkYyNTVCOEY1QzE3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKGJBCXdlLqWlXWCCc4Cs4NzHEhPqV+XznS6bpsu/UWI2BV8Bba40h2ojquY
eefiGNvwUUp/cr5EsSDqK2nMqXyuSAjEnlzI+sOYlaX4/IpVhYI8p/mIkicjb7Ib
uxf8H1QZQR2qYbrRwZcDvUQJ2AAH4DmG7yzbcqhHL6AeAN710gvz6Jb7mqx+jCo2
+HgA3NLkUS30UKiWEQzKty7+KzqY3cbX/rnjcFdto998/YdmnUwX81Zzn6VlJTxM
rOOKBVaginXwNEM4XxWMynb7df+gi1A615FFUPBEDzxlnKpihob2sv9dmsk6ZUFt
PNZxT8JVAr2IMiLvKbo7gzDThk8CAwEAAaOCAhQwggIQMB0GA1UdDgQWBBQgmNYh
iTdm2m/lJt2w8vJVuPXBfDAfBgNVHSMEGDAWgBRrFU4d5xhc8YJkgU9k193ZmGYV
wTAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE4NTc4MTAwMDAvMS82QjE1NEUx
REU3MTg1Q0YxODI2NDgxNEY2NEQ3REREOTk4NjYxNUMxLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9heFZPSGVjWVhQ
R0NaSUZQWk5mZDJaaG1GY0UuY2VyMIGOBggrBgEFBQcBCwSBgTB/MH0GCCsGAQUF
BzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTg1
NzgxMDAwMC8xLzMxMzAzMzJlMzEzNDMxMmUzNjM5MmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzEzMzM4MzEzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ41FMA0GCSqGSIb3DQEBCwUA
A4IBAQAMETWQ6EX0jIRRm8jgU11bEYZsqi1/5zQuOgDcky0u1tKlyyi2eUYp1NZh
4xSEloyCSJOqQIAuSHJzQXuxmeFG1NIcECXBRDSPc2Bm3DSc8/kGLtfLOYvr759U
kLm6SPnnvjEln/6l69CjfheHQI3F/VfRXL3OsQ86yIehDrMlCFR5UmBxeg31i0Lc
dtJeLMz4wAqOy39G/JU6PgSKgdGT9kXcallgfSzUHox2Sta8h+Vkt6OpnauckAad
EL1Ad3N4deTOqP4kLoQMOA5SpvLxX3y3nHVhPLPeZvm+g7KR+IMrUaknazvwHLp1
PmBSwUZ/nbr6N7rOmvVfKExySV16
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org