Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/A20F60064E3511EFBFA22132C4F9AE02.roa
File:                     A20F60064E3511EFBFA22132C4F9AE02.roa (raw, json)
Hash identifier:          R0gTc/BmIYY22dSLnRIvYfPD+cuEeRCvek/dGjTJ5eA=
Subject key identifier:   38:FD:1D:42:AA:7A:C4:97:57:04:D1:A1:BC:61:98:43:17:03:2E:74
Certificate issuer:       /CN=A914FA25/serialNumber=B0014A8306C52E404F67CA2F8E586F9B868E8CAB
Certificate serial:       12
Authority key identifier: B0:01:4A:83:06:C5:2E:40:4F:67:CA:2F:8E:58:6F:9B:86:8E:8C:AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/A20F60064E3511EFBFA22132C4F9AE02.roa
Signing time:             Tue 30 Jul 2024 05:36:13 +0000
ROA not before:           Tue 30 Jul 2024 05:36:13 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     137496
IP address blocks:        2402:8dc0::/32 maxlen: 32
                          2402:8dc0::/48 maxlen: 48
                          2402:8dc0:1::/48 maxlen: 48
                          2402:8dc0:2::/48 maxlen: 48
                          2402:8dc0:3::/48 maxlen: 48
                          2402:8dc0:4::/48 maxlen: 48
                          2402:8dc0:10::/48 maxlen: 48
                          2402:8dc0:11::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914FA25
        Validity
            Not Before: Jul 30 05:36:13 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=66a87bcd-4129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:bd:c5:78:67:b9:c9:f5:9d:dd:01:6a:0e:8e:
                    db:69:57:04:9e:a9:5b:ee:f4:c2:7c:eb:35:92:a6:
                    fa:46:7f:96:97:85:c6:ab:f5:61:12:d2:10:40:6c:
                    05:43:0c:a6:c2:16:4d:29:c8:e3:73:d1:27:0a:77:
                    62:b9:42:da:12:14:f8:05:4c:1f:f1:e7:f4:e1:c0:
                    9f:52:d7:a5:e2:09:b5:e0:38:b2:de:e5:d7:ae:30:
                    d7:da:1e:6c:aa:b2:12:11:8f:6f:36:fe:ce:ec:e1:
                    c4:fa:45:4f:30:a0:4f:98:35:90:03:e3:5c:c3:3a:
                    09:c7:2c:fd:d7:11:b5:e8:e6:36:ba:40:eb:cc:a0:
                    40:6b:74:cd:8e:dc:8e:9b:37:c3:78:1b:ca:e1:92:
                    21:92:de:65:47:70:69:16:f7:07:f6:07:d0:ae:9a:
                    87:3d:30:c9:10:eb:38:eb:45:cc:fa:60:3d:17:31:
                    d4:9b:d8:8b:9c:12:e1:b0:a7:66:7e:93:ee:9d:79:
                    36:1a:00:e9:05:40:a1:1d:96:27:34:71:7c:7a:01:
                    40:89:72:23:b5:d7:42:13:0d:e0:5e:de:1d:3f:2c:
                    8a:b6:0e:e6:53:2f:76:0b:ae:1a:52:a2:3f:bc:37:
                    db:fd:eb:d1:48:98:2e:ef:c9:a7:71:6d:8f:2d:2a:
                    e7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:FD:1D:42:AA:7A:C4:97:57:04:D1:A1:BC:61:98:43:17:03:2E:74
            X509v3 Authority Key Identifier:
                keyid:B0:01:4A:83:06:C5:2E:40:4F:67:CA:2F:8E:58:6F:9B:86:8E:8C:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/A20F60064E3511EFBFA22132C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:8dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:d5:4b:cb:4f:a8:f5:16:d5:28:39:07:f4:da:6a:42:64:ea:
         37:ab:28:89:e2:d7:a1:c3:08:e1:e6:88:1e:75:a8:47:77:94:
         b0:a4:fb:48:71:44:37:58:19:e8:ad:fb:c8:7b:e9:b4:05:c6:
         4f:71:4f:54:7d:83:60:8b:2b:43:d7:86:58:73:1b:10:9e:51:
         41:d9:ef:aa:e5:d0:e9:33:77:c8:0c:df:06:0e:41:b8:b5:b4:
         ff:0a:4a:b0:7d:4e:29:6a:50:d2:6b:aa:e1:39:ea:f1:d2:ff:
         b1:93:7c:f1:50:bc:86:51:3d:6c:b1:dc:ae:54:1c:0d:18:dc:
         8f:27:3e:75:77:53:59:4f:36:c3:99:1e:bc:87:69:2b:74:90:
         d6:fa:1e:9e:9a:ab:70:b0:b8:bf:72:78:02:2c:b4:91:50:c8:
         11:42:f3:31:fd:bc:0f:5c:ca:9d:41:bd:6c:7b:8d:4e:b6:1e:
         4d:eb:78:d4:9b:35:ab:21:d9:55:e0:04:87:58:ff:ca:94:86:
         9f:81:26:ac:18:ed:5b:a4:6b:99:c5:90:0f:4f:3a:71:4c:18:
         53:68:7c:10:4a:42:db:36:ae:e6:55:3d:b1:d9:0d:ee:ce:c4:
         9d:b9:0f:5d:b2:e4:98:84:88:f3:66:40:7b:6f:17:d9:98:61:
         62:b4:da:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----