Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DBFD/FB0821EAFB7E11EC99A2D44EC4F9AE02/E574F97816D811ED90B1C053C4F9AE02.roa
File:                     E574F97816D811ED90B1C053C4F9AE02.roa (raw, json)
Hash identifier:          nyImL4RDMYbUQKVDfjIhL8L7ymTbysaF01K5Md4kme4=
Subject key identifier:   98:09:14:7F:84:69:47:01:CD:F0:1A:F7:94:D1:7E:82:D3:71:F8:5A
Certificate issuer:       /CN=A915DBFD/serialNumber=8CAF823AFC813D00AE88496F8E6C796623692FC1
Certificate serial:       46
Authority key identifier: 8C:AF:82:3A:FC:81:3D:00:AE:88:49:6F:8E:6C:79:66:23:69:2F:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jK-COvyBPQCuiElvjmx5ZiNpL8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DBFD/FB0821EAFB7E11EC99A2D44EC4F9AE02/E574F97816D811ED90B1C053C4F9AE02.roa
Signing time:             Mon 08 Aug 2022 05:13:54 +0000
ROA not before:           Mon 08 Aug 2022 05:13:54 +0000
ROA not after:            Sun 28 May 2023 00:00:00 +0000
asID:                     59349
IP address blocks:        103.234.168.0/22 maxlen: 24
                          2001:df6:b800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DBFD/serialNumber=8CAF823AFC813D00AE88496F8E6C796623692FC1
        Validity
            Not Before: Aug  8 05:13:54 2022 GMT
            Not After : May 28 00:00:00 2023 GMT
        Subject: CN=62f09b91-3b67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:52:53:d6:ed:05:de:9b:33:bb:7f:16:08:03:
                    84:b6:3b:b9:73:a2:7c:77:c8:9f:45:5b:9f:e1:32:
                    87:40:55:ca:62:e9:f6:5d:14:25:a5:50:b5:3e:18:
                    05:64:a5:8a:de:a4:80:31:27:7a:b2:96:49:be:28:
                    2f:f2:e6:0f:84:b8:8a:17:60:96:5a:fb:ff:0e:9e:
                    28:d8:13:09:ea:70:03:cc:98:66:7a:dd:fb:67:8c:
                    44:32:99:e4:6f:09:52:5c:ca:22:eb:02:32:c7:83:
                    c6:a7:ee:0c:f5:64:99:a7:71:49:b3:a7:5e:0b:19:
                    59:81:b1:f0:91:bf:b8:8e:7e:e4:84:b0:20:1f:3d:
                    03:07:41:1a:b3:2b:13:37:40:56:39:3b:4e:99:eb:
                    77:f0:e2:3d:3c:8e:2a:fb:2d:b0:50:45:05:b8:bf:
                    1b:b0:29:46:95:79:a0:1e:31:30:e7:ec:d3:9a:08:
                    3b:b6:c9:60:0d:e3:2c:c1:b1:44:d2:90:c1:af:f3:
                    85:30:bb:dc:01:8e:aa:a2:e5:14:30:c1:a2:32:55:
                    9c:99:2f:15:c5:bc:8b:60:a8:05:2b:06:42:80:69:
                    a2:55:75:4c:21:89:10:16:19:e8:bf:d6:a4:36:76:
                    19:3c:90:21:d4:0a:79:c0:f0:17:79:23:8e:ee:9f:
                    bb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:09:14:7F:84:69:47:01:CD:F0:1A:F7:94:D1:7E:82:D3:71:F8:5A
            X509v3 Authority Key Identifier:
                keyid:8C:AF:82:3A:FC:81:3D:00:AE:88:49:6F:8E:6C:79:66:23:69:2F:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DBFD/FB0821EAFB7E11EC99A2D44EC4F9AE02/jK-COvyBPQCuiElvjmx5ZiNpL8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jK-COvyBPQCuiElvjmx5ZiNpL8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DBFD/FB0821EAFB7E11EC99A2D44EC4F9AE02/E574F97816D811ED90B1C053C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.168.0/22
                IPv6:
                  2001:df6:b800::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:d1:64:45:c5:16:f7:23:c0:5a:28:de:da:d0:05:81:cf:4c:
         32:7e:ea:7b:92:9b:cd:a5:c6:66:02:a9:60:2f:02:c9:d7:5a:
         b5:f7:54:37:f7:e1:02:a9:a0:fc:c2:e0:ee:0b:0e:f8:43:95:
         0b:8d:10:80:09:4d:3c:cc:35:43:08:52:75:9a:0f:b4:2d:c2:
         aa:b9:8b:a4:a4:96:22:95:33:bf:9d:19:1a:da:f9:5f:61:4c:
         37:0c:b8:6d:c3:f8:b6:f9:53:8d:80:2a:71:f0:ea:f4:61:32:
         1c:85:69:f5:f1:53:d4:0f:84:ca:ea:12:5b:a7:ba:5a:3a:c7:
         66:be:4c:b2:ca:a2:98:b5:6e:46:9a:36:2f:88:65:30:e0:54:
         bc:ae:9c:39:ff:ee:fd:10:7d:0c:7d:39:79:aa:22:ff:7a:9b:
         3e:36:0f:e2:ae:2f:93:35:eb:4f:f2:1d:ce:1c:af:c8:5c:25:
         50:14:d1:70:f6:b6:b4:ae:2f:16:5c:e1:05:34:69:85:8b:fb:
         90:9f:e9:8c:8e:e5:e8:15:10:46:07:3c:e0:90:85:7e:6b:2e:
         d4:6e:e5:b8:c1:15:2a:e7:81:61:39:c9:7e:cb:45:b5:f9:aa:
         1e:43:1b:47:4a:66:9c:7e:7f:b5:25:11:60:07:3d:11:a0:0e:
         fa:c5:1f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----