Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/B91F8BF69EE211EF883C7D14C4F9AE02.roa
File:                     B91F8BF69EE211EF883C7D14C4F9AE02.roa (raw, json)
Hash identifier:          Y3nxj0fo17afWS9kISA2qz006sX13/ROncukXnBfO9g=
Subject key identifier:   CC:49:F9:74:9A:C0:CE:E5:DD:CF:95:55:27:79:47:C8:A7:2F:36:EE
Certificate issuer:       /CN=A9190818/serialNumber=548430EAB88E4E378FB5005AFAE5CAB9C0007A1A
Certificate serial:       67
Authority key identifier: 54:84:30:EA:B8:8E:4E:37:8F:B5:00:5A:FA:E5:CA:B9:C0:00:7A:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIQw6riOTjePtQBa-uXKucAAeho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/B91F8BF69EE211EF883C7D14C4F9AE02.roa
Signing time:             Thu 13 Mar 2025 19:57:17 +0000
ROA not before:           Thu 13 Mar 2025 19:57:17 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     153371
IP address blocks:        2401:ce20::/48 maxlen: 48
                          2401:ce20:1::/48 maxlen: 48
                          2401:ce20:2::/48 maxlen: 48
                          2401:ce20:3::/48 maxlen: 48
                          2401:ce20:4::/48 maxlen: 48
                          2401:ce20:5::/48 maxlen: 48
                          2401:ce20:10::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190818
        Validity
            Not Before: Mar 13 19:57:17 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=67d3389d-7e88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2d:74:fc:b3:b9:01:2b:54:65:70:a0:2a:76:
                    b4:62:9f:03:42:27:1e:d0:52:67:52:40:91:b8:c8:
                    f3:ce:f1:59:ce:4a:52:8e:8f:60:8b:26:e8:1d:ea:
                    5d:35:47:4b:47:35:df:6e:32:2a:8d:e3:61:1d:77:
                    a3:d0:e3:65:a8:9d:1c:14:49:e8:58:34:20:3e:1d:
                    8f:fd:d0:5b:2f:87:05:ed:3c:26:1c:55:50:5b:9a:
                    6c:f3:37:59:b3:66:00:1b:20:6e:c7:0d:04:e8:66:
                    a5:6f:6c:7c:ae:2a:a9:4d:cc:74:ad:a0:1a:1a:98:
                    2e:18:9e:ad:dc:d4:a8:f3:c7:f8:5a:55:17:1f:05:
                    47:f4:75:61:b9:96:d3:37:c7:71:03:9d:ff:d7:5e:
                    cb:81:4c:b5:91:94:e9:48:5b:3b:89:a3:a9:13:bf:
                    c2:c2:f8:a3:ca:1c:b3:e2:56:53:fa:ca:b9:03:55:
                    e8:bc:6b:17:1d:be:25:32:54:8c:44:a3:eb:5c:66:
                    26:c1:e8:27:0a:57:27:76:bd:0e:ca:c7:53:a2:e9:
                    10:d5:ac:10:86:8d:d1:93:3f:6a:47:2e:90:97:ee:
                    cf:91:f6:c2:5c:08:0b:d4:df:bf:f9:62:f0:4c:20:
                    4d:74:1d:e2:3e:67:d5:e2:e8:37:b8:55:76:c4:7a:
                    85:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:49:F9:74:9A:C0:CE:E5:DD:CF:95:55:27:79:47:C8:A7:2F:36:EE
            X509v3 Authority Key Identifier:
                keyid:54:84:30:EA:B8:8E:4E:37:8F:B5:00:5A:FA:E5:CA:B9:C0:00:7A:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIQw6riOTjePtQBa-uXKucAAeho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/B91F8BF69EE211EF883C7D14C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:ce20::-2401:ce20:5:ffff:ffff:ffff:ffff:ffff
                  2401:ce20:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         28:30:2e:40:41:2a:ba:3e:66:c3:07:30:cf:a4:f9:f1:41:5b:
         3b:dd:99:65:47:75:26:d8:b2:9a:df:4d:a7:b7:40:c9:14:ea:
         55:1e:8d:02:9e:09:29:36:37:99:a5:f5:49:19:74:35:5a:af:
         14:c4:a6:89:1b:4e:e3:7f:e9:09:cf:e9:8c:07:f2:e6:68:29:
         17:f3:a0:be:6d:86:b8:9d:80:91:61:da:1f:ad:88:7b:bb:e4:
         ae:5c:9f:7f:a3:94:9b:09:92:fa:5d:a0:05:6b:84:d9:78:43:
         45:f4:3f:6f:22:ea:8a:08:9a:31:da:a0:35:21:4f:f1:cd:d8:
         e7:75:9a:6a:83:a3:af:06:04:8a:e3:f8:c8:ed:7c:5e:50:11:
         f8:b2:47:e4:71:5d:a1:1f:c9:22:d2:a9:41:1c:c4:8d:bb:0a:
         ac:a4:b3:1c:3b:64:9e:c8:46:39:ae:73:f3:83:bc:70:f4:0a:
         2c:18:ef:34:ee:e6:b2:a0:ee:4d:28:90:10:dd:28:5a:63:5e:
         0e:42:a9:9c:36:eb:8d:49:85:62:75:f6:ac:c2:7f:5c:c4:06:
         da:be:18:95:95:fd:db:d5:b3:f8:fa:dd:1a:71:82:24:a8:5c:
         00:c1:bc:ac:1b:e9:bf:0e:88:7a:99:ba:e2:df:83:ba:07:a4:
         a8:36:bb:4b
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MDgxODExMC8GA1UEBRMoNTQ4NDMwRUFCODhFNEUzNzhGQjUwMDVBRkFFNUNBQjlD
MDAwN0ExQTAeFw0yNTAzMTMxOTU3MTdaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3ZDMzODlkLTdlODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC3LXT8s7kBK1RlcKAqdrRinwNCJx7QUmdSQJG4yPPO8VnOSlKOj2CLJugd6l01
R0tHNd9uMiqN42Edd6PQ42WonRwUSehYNCA+HY/90FsvhwXtPCYcVVBbmmzzN1mz
ZgAbIG7HDQToZqVvbHyuKqlNzHStoBoamC4Ynq3c1Kjzx/haVRcfBUf0dWG5ltM3
x3EDnf/XXsuBTLWRlOlIWzuJo6kTv8LC+KPKHLPiVlP6yrkDVei8axcdviUyVIxE
o+tcZibB6CcKVyd2vQ7Kx1Oi6RDVrBCGjdGTP2pHLpCX7s+R9sJcCAvU37/5YvBM
IE10HeI+Z9Xi6De4VXbEeoWNAgMBAAGjggKqMIICpjAdBgNVHQ4EFgQUzEn5dJrA
zuXdz5VVJ3lHyKcvNu4wHwYDVR0jBBgwFoAUVIQw6riOTjePtQBa+uXKucAAehow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwODE4LzdFMUY2QUUyOTA5
RDExRUY5NzE3RjY1MEM0RjlBRTAyL1ZJUXc2cmlPVGplUHRRQmEtdVhLdWNBQWVo
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVklRdzZyaU9UamVQdFFCYS11WEt1Y0FBZWhvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MDgxOC83RTFGNkFFMjkwOUQxMUVGOTcxN0Y2NTBDNEY5QUUwMi9COTFGOEJGNjlF
RTIxMUVGODgzQzdEMTRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA0BggrBgEFBQcBBwEB/wQl
MCMwIQQCAAIwGzAQAwUFJAHOIAMHASQBziAABAMHBCQBziAAEDANBgkqhkiG9w0B
AQsFAAOCAQEAKDAuQEEquj5mwwcwz6T58UFbO92ZZUd1Jtiymt9Np7dAyRTqVR6N
Ap4JKTY3maX1SRl0NVqvFMSmiRtO43/pCc/pjAfy5mgpF/Ogvm2GuJ2AkWHaH62I
e7vkrlyff6OUmwmS+l2gBWuE2XhDRfQ/byLqigiaMdqgNSFP8c3Y53WaaoOjrwYE
iuP4yO18XlAR+LJH5HFdoR/JItKpQRzEjbsKrKSzHDtknshGOa5z84O8cPQKLBjv
NO7msqDuTSiQEN0oWmNeDkKpnDbrjUmFYnX2rMJ/XMQG2r4YlZX929Wz+PrdGnGC
JKhcAMG8rBvpvw6Iepm64t+DugekqDa7Sw==
-----END CERTIFICATE-----