Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BC84/903C80A649B711EB8372D95BC4F9AE02/199F14EC9AB311ECAB14320DC4F9AE02.roa
File:                     199F14EC9AB311ECAB14320DC4F9AE02.roa (raw, json)
Hash identifier:          DdhGbkhZEJGuTqBw13gRou8u7lTDosct9r9kmkA0ouk=
Subject key identifier:   4D:58:9A:8C:67:51:D2:81:0F:24:26:E9:C6:B6:21:79:57:1B:A2:02
Certificate issuer:       /CN=A917BC84/serialNumber=81B6DD1FB8AEBAD864D02ADC40FF270C78B4A59F
Certificate serial:       0355
Authority key identifier: 81:B6:DD:1F:B8:AE:BA:D8:64:D0:2A:DC:40:FF:27:0C:78:B4:A5:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gbbdH7iuuthk0CrcQP8nDHi0pZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BC84/903C80A649B711EB8372D95BC4F9AE02/199F14EC9AB311ECAB14320DC4F9AE02.roa
Signing time:             Thu 03 Mar 2022 05:51:56 +0000
ROA not before:           Thu 03 Mar 2022 05:51:56 +0000
ROA not after:            Thu 02 Mar 2023 00:00:00 +0000
asID:                     54994
IP address blocks:        103.146.6.0/23 maxlen: 23
                          2405:8f40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 853 (0x355)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BC84/serialNumber=81B6DD1FB8AEBAD864D02ADC40FF270C78B4A59F
        Validity
            Not Before: Mar  3 05:51:56 2022 GMT
            Not After : Mar  2 00:00:00 2023 GMT
        Subject: CN=6220577c-9281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e9:39:a3:f9:41:09:dd:d4:b8:c9:b2:8a:55:
                    3f:86:de:74:47:dd:92:0e:91:4f:e2:c3:f5:90:42:
                    b6:bb:c9:15:1f:d6:1d:24:43:d9:ac:ed:13:2c:37:
                    91:42:b9:16:81:5a:4d:9d:25:a7:6a:e4:6f:ee:d8:
                    fd:52:bd:5e:a1:cc:b5:1d:8b:3b:82:9e:31:46:1c:
                    6c:c9:c2:7a:6d:b8:45:42:ab:17:51:ef:41:6c:97:
                    3a:56:0c:6a:9c:84:ea:69:dc:9c:97:ed:b3:f5:2f:
                    7a:d8:8b:2f:16:09:7a:67:fb:fb:6e:23:fb:a3:67:
                    b9:a1:a2:04:98:cf:e2:68:d1:3b:28:94:ee:6e:08:
                    d6:48:70:cb:58:f4:f0:13:73:fc:c4:fa:3a:bf:92:
                    3a:f9:63:cd:c3:e8:ef:54:4f:ee:70:a4:fd:a1:34:
                    03:9e:00:34:1b:98:c4:97:7a:90:54:87:8e:81:be:
                    47:59:68:d6:c4:2a:b3:c6:74:c5:8c:cb:ad:a1:e0:
                    ca:6e:6f:9f:53:d4:10:72:98:60:52:15:81:e1:d1:
                    3a:2d:9b:77:01:0e:ba:13:5a:dd:53:70:46:23:47:
                    97:e5:7e:eb:ea:d0:c9:96:1e:55:ce:70:8a:44:68:
                    71:c5:a1:32:a6:0b:db:98:e2:80:cc:2b:84:f2:ca:
                    e4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:58:9A:8C:67:51:D2:81:0F:24:26:E9:C6:B6:21:79:57:1B:A2:02
            X509v3 Authority Key Identifier:
                keyid:81:B6:DD:1F:B8:AE:BA:D8:64:D0:2A:DC:40:FF:27:0C:78:B4:A5:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BC84/903C80A649B711EB8372D95BC4F9AE02/gbbdH7iuuthk0CrcQP8nDHi0pZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gbbdH7iuuthk0CrcQP8nDHi0pZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BC84/903C80A649B711EB8372D95BC4F9AE02/199F14EC9AB311ECAB14320DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.6.0/23
                IPv6:
                  2405:8f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:ae:86:c9:0f:6d:72:d8:da:34:71:f7:5b:7f:b2:a9:8b:9c:
         9e:be:e1:de:cf:2e:3d:bf:6e:f7:c7:86:85:7b:d1:bb:99:9b:
         f6:f4:34:28:d4:d4:7f:7a:7d:cc:ed:d3:f9:02:4c:a9:48:33:
         c7:bd:ac:be:8d:3e:04:82:5b:4f:49:e5:54:54:65:34:44:57:
         d2:db:36:8b:aa:f3:7a:f3:1b:31:22:1d:ca:9f:51:3f:27:2c:
         cd:ba:c0:bd:3d:ac:d9:dd:cd:64:37:dc:1b:61:0f:c3:22:b4:
         a2:0e:ea:eb:ee:7c:c4:e0:9e:98:be:16:cd:82:d6:c4:00:ba:
         02:20:34:32:1f:4a:66:9a:d0:94:bb:00:44:ca:08:e5:3f:a8:
         9b:26:1b:d1:e8:1a:27:a4:e3:48:e1:f4:ae:e7:af:67:ba:a6:
         4d:fb:7c:16:dc:3b:9a:9a:6b:c7:9a:38:6c:97:8d:71:45:61:
         b0:85:74:82:4e:e3:6c:6f:c0:c0:5c:8b:84:4a:7c:51:b6:2a:
         10:73:79:cf:9f:5e:8c:8d:d8:fd:b7:35:e0:97:28:56:18:85:
         83:31:44:65:b9:48:14:55:3f:b4:04:29:82:2c:5a:1b:e0:02:
         03:6e:6f:44:e7:ac:a7:8b:ab:24:74:eb:e9:1e:04:ba:2b:64:
         71:76:05:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----