Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/7/3130332e3138342e3137342e302f32332d3234203d3e20313439363534.roa
File:                     3130332e3138342e3137342e302f32332d3234203d3e20313439363534.roa (raw, json)
Hash identifier:          VfGZPhkL97/U5u9qT0wC9JwFQ8JqHkxGPmKyle4fFls=
Subject key identifier:   2F:95:5E:3D:BA:82:13:EB:BB:DE:1E:8E:44:2C:C8:07:DB:D3:55:38
Certificate issuer:       /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75
Certificate serial:       37571C84D357198A9D134C23627680CD120BE79C
Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/7/3130332e3138342e3137342e302f32332d3234203d3e20313439363534.roa
Signing time:             Sun 01 Jan 2023 03:43:38 +0000
ROA not before:           Sun 01 Jan 2023 03:38:38 +0000
ROA not after:            Sun 31 Dec 2023 03:43:38 +0000
asID:                     149654
IP address blocks:        103.184.174.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:57:1c:84:d3:57:19:8a:9d:13:4c:23:62:76:80:cd:12:0b:e7:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75
        Validity
            Not Before: Jan  1 03:38:38 2023 GMT
            Not After : Dec 31 03:43:38 2023 GMT
        Subject: CN=2F955E3DBA8213EBBBDE1E8E442CC807DBD35538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:32:40:26:ee:4c:3c:33:8a:ee:62:3a:f9:92:
                    57:30:97:75:0f:77:05:05:9a:43:0e:6d:b7:b3:b7:
                    38:c8:0e:73:19:92:94:7b:65:a6:76:67:d4:d2:ae:
                    9b:32:95:4a:86:dd:ad:df:2a:5e:7d:2c:ee:b5:6a:
                    48:a0:ed:e6:3a:9d:56:3f:2d:a4:4a:c9:f5:98:5e:
                    97:8d:b7:6d:2f:5b:0e:cd:f0:8c:3a:73:71:b8:d6:
                    f2:93:dc:a5:7b:e9:a3:12:97:74:82:c0:03:85:60:
                    9e:a1:57:10:64:99:a8:3a:53:96:58:eb:cc:92:f2:
                    79:71:d0:e6:64:3c:79:88:e9:58:c3:dc:3b:41:1d:
                    e1:22:ff:16:97:26:38:be:a9:7f:f8:08:b9:e9:f2:
                    1d:36:b8:be:73:9e:1b:58:78:54:7b:93:be:6d:15:
                    08:e0:a7:69:85:fc:a2:a9:b7:f3:fd:80:d0:19:1e:
                    b0:48:c6:48:68:58:ef:e3:3b:14:88:bb:17:b7:ec:
                    d5:75:b6:4f:a2:a0:80:45:bb:69:4d:40:e8:b9:1e:
                    42:aa:06:3d:a6:72:8d:9f:3b:c1:0e:9b:c9:5a:45:
                    f3:7b:ba:c6:43:d8:3d:4c:44:67:b8:14:3e:c6:11:
                    69:5e:42:7e:d4:da:45:65:22:e2:ac:cd:c6:40:7f:
                    32:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:95:5E:3D:BA:82:13:EB:BB:DE:1E:8E:44:2C:C8:07:DB:D3:55:38
            X509v3 Authority Key Identifier:
                keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/3130332e3138342e3137342e302f32332d3234203d3e20313439363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:fc:84:e2:40:5d:ea:b2:e9:9e:8c:51:c8:fc:92:e3:10:98:
         de:1a:15:f3:9a:4e:e5:b4:03:7d:3d:d3:3f:c9:d5:2d:b5:06:
         2b:e2:bb:c9:3e:6f:8c:57:f1:74:26:37:16:de:66:6c:1d:e9:
         e7:44:7e:d4:5c:17:f7:5c:b9:96:e0:74:fd:ae:7c:d6:e2:84:
         e1:58:c4:87:e5:e8:f9:ec:6d:a6:95:79:f1:29:a8:61:28:3d:
         50:50:0d:7c:cc:de:8f:c5:e6:26:35:16:56:c9:9c:f9:95:18:
         f8:ff:c7:0d:0c:89:6a:d2:5a:4e:38:8d:2f:7b:b6:b2:95:10:
         7d:5e:0f:f5:ba:d6:b3:83:99:e8:f1:94:a4:a1:18:0b:7c:59:
         88:b7:ad:4e:fb:2a:4d:22:72:de:72:bb:db:32:d6:3c:3e:4b:
         64:be:17:84:a5:3e:3b:9f:e2:33:0c:96:5c:93:b7:52:8a:3e:
         a4:6a:29:81:6e:60:e2:6b:6b:bf:d3:43:ab:04:1e:47:cb:88:
         b5:6c:56:d3:21:0e:5a:e8:45:48:07:f5:6d:7b:c0:02:c4:d1:
         08:30:9c:a3:0e:65:1a:7c:f2:81:2b:13:c5:bd:bd:d1:ef:e4:
         f6:8c:b3:a6:e9:05:cd:cc:10:da:dc:4c:26:11:28:e2:83:e3:
         70:62:2e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org