Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/60CC4AA20C3511EEA5774672C4F9AE02.roa
File:                     60CC4AA20C3511EEA5774672C4F9AE02.roa (raw, json)
Hash identifier:          Nf5wr4KLo/Gk2WVMHcth/6R+Vt9JPW3O7gN5iZSqapI=
Subject key identifier:   52:00:58:2F:7A:6B:59:C7:B6:C0:C7:8E:74:9D:71:79:9C:A8:5F:0B
Certificate issuer:       /CN=A918B443/serialNumber=07AA73A7ED67411891BD8F727261951C41C716DE
Certificate serial:       0346
Authority key identifier: 07:AA:73:A7:ED:67:41:18:91:BD:8F:72:72:61:95:1C:41:C7:16:DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/60CC4AA20C3511EEA5774672C4F9AE02.roa
Signing time:             Fri 23 Jun 2023 22:29:27 +0000
ROA not before:           Fri 23 Jun 2023 22:29:27 +0000
ROA not after:            Wed 31 Jan 2024 00:00:00 +0000
asID:                     149280
IP address blocks:        103.174.194.0/24 maxlen: 24
                          103.174.195.0/24 maxlen: 24
                          2001:df7:d380::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 838 (0x346)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B443
        Validity
            Not Before: Jun 23 22:29:27 2023 GMT
            Not After : Jan 31 00:00:00 2024 GMT
        Subject: CN=64961cc6-9675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ca:62:38:92:16:3f:45:4f:1c:62:b5:ee:71:
                    09:e4:66:a2:fe:00:ea:e4:a1:e6:1c:19:b9:41:a5:
                    70:9a:a0:bc:fd:0c:18:5a:92:0c:f5:2f:2d:42:95:
                    eb:fb:5f:86:a6:94:05:c0:03:e7:22:6b:27:6d:c2:
                    78:a1:52:32:c6:c5:c9:e1:8c:3b:fc:06:f7:41:9a:
                    98:fe:db:01:32:2b:d0:74:71:93:92:d6:3f:2c:f0:
                    7a:a5:05:47:6c:be:37:da:f7:95:f3:58:17:e5:cd:
                    5b:88:fc:ee:07:5d:e8:6a:6d:b5:c6:42:39:cc:7d:
                    b0:89:79:f6:03:31:61:ab:67:66:db:e5:19:32:83:
                    87:db:b2:67:0a:17:67:30:85:14:20:55:37:38:45:
                    9d:5f:49:55:cf:1b:83:5a:8e:db:de:91:de:be:72:
                    0f:19:2d:1c:7d:f4:d6:29:f5:b9:dd:7f:cf:38:11:
                    a8:03:a2:16:e6:55:01:1a:f0:0e:23:69:04:b3:89:
                    86:98:cc:e5:9e:0c:a2:ff:a3:cb:6d:6b:66:a7:2a:
                    fc:36:18:10:08:ab:a8:f1:2c:f1:93:96:78:9f:06:
                    ad:33:bd:cf:5d:b1:75:55:4c:cb:5b:21:83:f7:37:
                    45:47:62:73:24:45:05:30:0c:16:0e:4b:7d:85:de:
                    02:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:00:58:2F:7A:6B:59:C7:B6:C0:C7:8E:74:9D:71:79:9C:A8:5F:0B
            X509v3 Authority Key Identifier:
                keyid:07:AA:73:A7:ED:67:41:18:91:BD:8F:72:72:61:95:1C:41:C7:16:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/60CC4AA20C3511EEA5774672C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.194.0/23
                IPv6:
                  2001:df7:d380::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:6b:fc:c6:57:fa:9b:62:06:67:cc:3c:06:4a:78:1d:d7:f7:
         75:cb:a7:58:ec:5d:2d:60:cf:49:6f:33:15:a3:f9:76:7b:fa:
         94:21:8c:1d:e3:f9:3a:ee:2e:a7:49:77:36:de:fe:b4:b9:43:
         89:bb:78:8a:37:46:44:37:db:74:04:0b:ed:60:bb:c0:af:30:
         aa:8c:c0:db:d9:8f:90:38:e5:e9:a9:da:b9:36:ce:89:bf:a7:
         e9:59:db:57:78:96:56:6c:70:41:90:f3:70:21:08:b9:92:df:
         99:11:ed:ac:8f:73:7c:c3:1a:98:ae:75:41:1b:29:46:41:6f:
         4b:ca:ea:6e:d1:a7:4b:61:85:7c:16:9b:50:92:6b:31:0e:48:
         bf:2c:36:6c:74:8c:de:9f:f2:fc:ab:f3:0d:00:22:75:19:30:
         1d:2c:72:57:88:df:74:97:68:fe:53:d1:22:26:e1:8b:af:61:
         a2:7f:f5:90:56:62:ce:22:f9:cf:e5:cb:be:2f:28:ef:13:19:
         36:43:b1:54:17:c4:c2:3c:86:5e:8a:ea:ee:60:97:bc:24:e8:
         11:4a:bc:00:f4:2d:44:e8:09:a6:ff:67:3e:5c:ea:be:2b:1d:
         f5:b4:98:f6:e7:53:87:94:b9:11:63:13:ad:8c:55:7e:e9:0e:
         8a:5c:84:56
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICA0YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEI0NDMxMTAvBgNVBAUTKDA3QUE3M0E3RUQ2NzQxMTg5MUJEOEY3MjcyNjE5NTFD
NDFDNzE2REUwHhcNMjMwNjIzMjIyOTI3WhcNMjQwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDk2MWNjNi05Njc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0cpiOJIWP0VPHGK17nEJ5Gai/gDq5KHmHBm5QaVwmqC8/QwYWpIM9S8tQpXr
+1+GppQFwAPnImsnbcJ4oVIyxsXJ4Yw7/Ab3QZqY/tsBMivQdHGTktY/LPB6pQVH
bL432veV81gX5c1biPzuB13oam21xkI5zH2wiXn2AzFhq2dm2+UZMoOH27JnChdn
MIUUIFU3OEWdX0lVzxuDWo7b3pHevnIPGS0cffTWKfW53X/POBGoA6IW5lUBGvAO
I2kEs4mGmMzlngyi/6PLbWtmpyr8NhgQCKuo8Szxk5Z4nwatM73PXbF1VUzLWyGD
9zdFR2JzJEUFMAwWDkt9hd4CtwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFFIAWC96
a1nHtsDHjnSdcXmcqF8LMB8GA1UdIwQYMBaAFAeqc6ftZ0EYkb2PcnJhlRxBxxbe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjQ0My85MjQyNkY4NjQy
MEExMUVDOTRDNEYxNUFDNEY5QUUwMi9CNnB6cC0xblFSaVJ2WTl5Y21HVkhFSEhG
dDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0I2cHpwLTFuUVJpUnZZOXljbUdWSEVISEZ0NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEI0NDMvOTI0MjZGODY0MjBBMTFFQzk0QzRGMTVBQzRGOUFFMDIvNjBDQzRBQTIw
QzM1MTFFRUE1Nzc0NjcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFnrsIwDwQCAAIwCQMHACABDffTgDANBgkqhkiG9w0BAQsF
AAOCAQEAPGv8xlf6m2IGZ8w8Bkp4Hdf3dcunWOxdLWDPSW8zFaP5dnv6lCGMHeP5
Ou4up0l3Nt7+tLlDibt4ijdGRDfbdAQL7WC7wK8wqozA29mPkDjl6anauTbOib+n
6VnbV3iWVmxwQZDzcCEIuZLfmRHtrI9zfMMamK51QRspRkFvS8rqbtGnS2GFfBab
UJJrMQ5Ivyw2bHSM3p/y/KvzDQAidRkwHSxyV4jfdJdo/lPRIibhi69hon/1kFZi
ziL5z+XLvi8o7xMZNkOxVBfEwjyGXorq7mCXvCToEUq8APQtROgJpv9nPlzqvisd
9bSY9udTh5S5EWMTrYxVfukOilyEVg==
-----END CERTIFICATE-----