Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/1DD85DA2386311EFB10A6A1CC4F9AE02.roa
File:                     1DD85DA2386311EFB10A6A1CC4F9AE02.roa (raw, json)
Hash identifier:          wZz+OlqUMy/mBTlpV+JPL6/+u7+0FBG8gjwEC4u2wAU=
Subject key identifier:   69:BD:34:E7:7E:2C:B9:6D:29:34:FD:2A:31:8F:D2:2E:A3:79:EF:70
Certificate issuer:       /CN=A9178EA7/serialNumber=22A62C14D2BD32E3E596D8A3E62BBC3274468F99
Certificate serial:       7A
Authority key identifier: 22:A6:2C:14:D2:BD:32:E3:E5:96:D8:A3:E6:2B:BC:32:74:46:8F:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/1DD85DA2386311EFB10A6A1CC4F9AE02.roa
Signing time:             Tue 11 Feb 2025 05:58:48 +0000
ROA not before:           Tue 11 Feb 2025 05:58:48 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     9466
IP address blocks:        202.1.128.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178EA7
        Validity
            Not Before: Feb 11 05:58:48 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=67aae718-745b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:42:d2:86:9b:5f:72:c8:05:0c:83:b4:48:41:
                    5a:28:80:b6:e6:8f:3d:56:d5:d5:35:bb:59:cb:e9:
                    98:ca:a5:11:53:45:41:34:22:e3:4c:b9:ec:e9:31:
                    49:c6:aa:22:32:fb:49:15:69:ff:00:bb:8b:ca:ec:
                    33:a4:57:db:f2:15:ab:56:74:7e:2a:84:f9:2b:70:
                    77:56:be:dd:ef:15:dd:15:cd:20:c2:45:16:12:ff:
                    10:b0:7b:d5:35:1c:48:63:00:e9:0c:b9:4d:bc:7d:
                    99:be:a3:8f:ba:61:82:d6:3f:74:fb:ae:ae:ad:99:
                    b7:40:84:30:bd:a3:32:15:ab:1b:9e:58:e0:c6:f6:
                    75:ee:f4:88:41:b9:1d:6e:2e:be:e7:6f:f3:66:17:
                    40:37:af:82:47:4c:16:7c:44:93:55:1a:50:63:02:
                    f1:7d:68:2f:d3:08:c6:8b:04:00:ef:06:9e:d4:84:
                    26:4e:bb:fd:68:41:3b:cf:34:88:9d:03:66:e2:3e:
                    ad:e8:1b:0c:23:11:ef:fe:c5:d1:7b:5d:5c:76:0e:
                    f1:51:34:e7:da:90:f5:d1:24:40:b1:42:b9:6c:e8:
                    59:5b:a9:79:7d:08:52:ea:32:f6:30:c6:19:16:8b:
                    93:df:91:46:66:f7:0a:1a:02:ab:4b:d1:26:2f:ce:
                    91:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BD:34:E7:7E:2C:B9:6D:29:34:FD:2A:31:8F:D2:2E:A3:79:EF:70
            X509v3 Authority Key Identifier:
                keyid:22:A6:2C:14:D2:BD:32:E3:E5:96:D8:A3:E6:2B:BC:32:74:46:8F:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/1DD85DA2386311EFB10A6A1CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.1.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4f:83:e6:30:af:54:72:21:9c:a4:ce:0a:83:43:27:bd:2b:68:
         e6:74:90:17:a9:9c:3b:ac:b9:fa:bb:f0:97:c3:bf:9b:55:6d:
         bc:7a:59:cf:9c:49:fa:6b:e7:08:aa:03:bd:e9:f6:c3:71:24:
         2c:15:a6:94:de:0c:f1:3f:70:93:fd:69:11:e7:02:a3:0b:63:
         b8:e0:e2:2f:3b:18:79:83:e5:e9:a2:74:e4:bc:7f:08:9b:12:
         91:02:c6:3b:77:00:5d:09:f0:94:fb:7a:5f:d6:7d:aa:47:e6:
         68:94:24:02:74:9c:66:0d:94:ac:0a:dc:c6:07:b5:50:c9:e8:
         44:5a:98:6c:99:2f:87:00:ce:29:6e:11:22:78:fe:f4:96:f8:
         96:a6:d3:b7:a0:79:71:46:e8:7c:c1:69:aa:11:7d:ad:a2:f0:
         94:23:ec:c8:1e:52:ba:c1:83:dc:3d:c8:60:14:7b:60:4f:f0:
         18:8e:55:87:b2:bc:a9:5c:b8:d6:e6:35:6c:ae:0a:25:e0:b1:
         43:4f:b5:3e:19:31:86:e3:bf:e8:e4:b3:f5:d7:1c:b0:a8:fd:
         82:69:be:fe:a3:32:36:3a:08:ca:7a:12:74:59:5f:c3:be:76:
         09:dc:4f:ba:40:60:92:d2:9f:8f:f1:d3:0b:3e:c0:5c:c7:2c:
         41:98:34:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----