Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A918C2870000/0/3230332e3137362e3138392e302f32342d3234203d3e203635303030.roa
File:                     3230332e3137362e3138392e302f32342d3234203d3e203635303030.roa (raw, json)
Hash identifier:          yohUxIfsBz/7021EJZ8H6tpGjfUGGniBtL8ePqkbGQ4=
Subject key identifier:   86:8B:87:18:0E:3F:DE:10:2B:CE:A4:3F:82:4E:38:C4:56:8D:FF:2F
Certificate issuer:       /CN=A918C2870000/serialNumber=5E04F3FDBEC5CC6840F6E28215B9095A3E51172B
Certificate serial:       6C79E955DC70C0FFCE97B436D75812057A157923
Authority key identifier: 5E:04:F3:FD:BE:C5:CC:68:40:F6:E2:82:15:B9:09:5A:3E:51:17:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgTz_b7FzGhA9uKCFbkJWj5RFys.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A918C2870000/0/3230332e3137362e3138392e302f32342d3234203d3e203635303030.roa
Signing time:             Thu 19 Nov 2020 00:20:55 +0000
ROA not before:           Thu 19 Nov 2020 00:15:55 +0000
ROA not after:            Thu 18 Nov 2021 00:20:55 +0000
asID:                     65000
IP address blocks:        203.176.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:79:e9:55:dc:70:c0:ff:ce:97:b4:36:d7:58:12:05:7a:15:79:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C2870000/serialNumber=5E04F3FDBEC5CC6840F6E28215B9095A3E51172B
        Validity
            Not Before: Nov 19 00:15:55 2020 GMT
            Not After : Nov 18 00:20:55 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bf:a5:d6:c9:ee:da:c2:58:cd:f9:b0:61:22:
                    39:a9:ae:5c:27:48:11:fe:3e:f7:16:8f:12:09:5b:
                    da:67:06:db:55:1b:f9:a6:30:96:d6:9c:19:74:ee:
                    32:4e:0b:1b:25:e6:98:29:96:d8:59:a3:c9:65:f5:
                    e1:f2:4e:65:8a:bc:55:b0:f7:52:a2:cb:c1:ae:67:
                    61:e9:d4:60:16:8a:36:f0:ff:7f:94:cd:31:0c:bd:
                    33:5a:ea:f5:ce:3d:8c:4f:da:a9:92:07:4c:c6:fe:
                    e7:b1:f5:3a:c2:c0:e0:12:e8:54:c9:ce:07:e9:27:
                    78:a3:d3:30:30:1b:92:62:44:7d:86:83:3c:be:88:
                    2f:83:93:2e:ee:ac:47:55:d8:93:90:aa:ce:7d:be:
                    79:d7:ae:0b:a7:0e:1d:04:8c:6f:6a:f4:9b:a1:0c:
                    2e:e6:57:03:d0:33:a8:d3:a9:63:49:e7:73:aa:d6:
                    c7:e8:7e:ce:13:95:6a:0f:8c:21:7d:83:34:ff:df:
                    78:69:04:b7:97:ff:70:a0:5b:25:f6:78:e6:14:df:
                    b7:5d:dc:7c:b8:2f:65:e5:54:0d:71:b0:eb:45:11:
                    5c:37:52:f3:73:92:e3:2f:15:99:18:75:52:9f:a8:
                    0e:d9:15:3f:60:4d:33:87:66:5e:2a:97:4b:cf:21:
                    b0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8B:87:18:0E:3F:DE:10:2B:CE:A4:3F:82:4E:38:C4:56:8D:FF:2F
            X509v3 Authority Key Identifier:
                keyid:5E:04:F3:FD:BE:C5:CC:68:40:F6:E2:82:15:B9:09:5A:3E:51:17:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0/5E04F3FDBEC5CC6840F6E28215B9095A3E51172B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgTz_b7FzGhA9uKCFbkJWj5RFys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0/3230332e3137362e3138392e302f32342d3234203d3e203635303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.176.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:93:1f:c9:32:05:34:3b:f7:af:6b:aa:09:0f:3a:ea:8f:64:
         b5:95:67:52:4e:b8:55:75:0f:16:54:43:a7:28:06:19:9f:48:
         ab:51:34:ed:47:ee:bb:01:9c:5b:0b:45:2e:cf:c7:ca:10:c4:
         52:32:b5:08:c8:89:2a:4b:fa:28:92:73:a4:2d:82:58:2e:ba:
         5c:fe:35:85:c7:4c:a6:97:1e:92:20:03:61:5a:0e:a2:b2:67:
         5a:7b:f6:39:d3:a9:05:34:d4:e2:79:1b:b1:34:dc:4d:02:ce:
         a0:7c:6a:d2:93:1c:81:c0:d2:2e:16:73:fe:8b:3c:cf:db:e1:
         0f:99:cb:f1:e2:a2:b3:4b:88:7a:02:b6:9c:96:8d:b8:b7:73:
         02:5c:a6:93:a9:c5:4d:a1:f8:fa:ef:9f:10:f0:54:ae:67:73:
         ab:20:bf:a2:76:04:d6:95:4c:c9:dd:d1:5e:52:fe:2e:08:92:
         bd:35:3e:87:fe:66:91:96:2b:c0:f7:eb:a8:1e:3e:7e:8e:fb:
         82:bd:c5:94:a9:b4:81:fb:08:93:30:a4:a0:c3:ef:16:00:3d:
         c8:40:60:87:b5:3a:53:4a:41:c1:ae:70:05:41:25:eb:a4:18:
         da:a4:02:ef:0c:88:5d:ad:dd:16:cb:e9:86:10:41:91:3d:64:
         50:2f:b7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org