Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/586BBA70BCE711EDB775B94AC4F9AE02.roa
File:                     586BBA70BCE711EDB775B94AC4F9AE02.roa (raw, json)
Hash identifier:          gtn2x/U5Q0cmOFyyQcLenwoAfh/qoBsMi2TaRaJl87o=
Subject key identifier:   F2:FD:D9:0B:99:0E:76:E6:CB:6D:8A:91:57:CC:E7:BC:33:F7:BE:8C
Certificate issuer:       /CN=A919EC2D/serialNumber=B1EE8871063A0108335BDFAA3E3A13F9C9C790DE
Certificate serial:       34
Authority key identifier: B1:EE:88:71:06:3A:01:08:33:5B:DF:AA:3E:3A:13:F9:C9:C7:90:DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se6IcQY6AQgzW9-qPjoT-cnHkN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/586BBA70BCE711EDB775B94AC4F9AE02.roa
Signing time:             Sat 03 Jun 2023 08:16:46 +0000
ROA not before:           Sat 03 Jun 2023 08:16:46 +0000
ROA not after:            Sun 01 Oct 2023 00:00:00 +0000
asID:                     142300
IP address blocks:        103.188.92.0/24 maxlen: 24
                          103.188.93.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EC2D/serialNumber=B1EE8871063A0108335BDFAA3E3A13F9C9C790DE
        Validity
            Not Before: Jun  3 08:16:46 2023 GMT
            Not After : Oct  1 00:00:00 2023 GMT
        Subject: CN=647af6ed-7766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e0:9e:a6:4d:92:aa:14:8d:b8:d2:4e:a7:8c:
                    aa:b4:e7:f3:3c:9b:24:95:97:28:71:dc:fb:37:cf:
                    d9:fc:4a:c8:2e:27:89:bf:26:5b:97:01:8e:50:91:
                    f4:c2:0c:72:0e:a3:ec:6a:ae:41:1d:46:0f:8f:62:
                    ad:fd:b8:4e:4c:4e:12:06:34:62:f7:f9:d7:17:3c:
                    e8:b3:4f:c3:b2:c1:41:9e:78:b3:b1:f4:62:e0:c7:
                    98:e0:9c:63:12:5a:30:66:68:d3:3f:a9:91:ad:0e:
                    00:a3:27:f9:94:02:f0:40:bd:15:0e:80:ec:68:45:
                    2c:fd:4e:83:b6:30:64:60:13:63:9a:0d:f5:54:2e:
                    03:81:a9:eb:73:69:40:ee:28:13:43:f3:ba:b0:ce:
                    70:bb:26:c3:a1:14:2b:4a:81:bb:93:c7:d3:8b:82:
                    5e:ce:fc:19:d6:31:18:ca:69:f7:68:65:16:27:5d:
                    bf:2b:28:6e:8f:bf:8f:63:15:c0:73:b4:33:37:49:
                    bb:08:41:03:6a:00:0f:86:e0:4b:09:6d:aa:06:4d:
                    b5:a6:84:62:d8:7b:37:e3:49:85:21:83:68:af:7e:
                    44:a6:c4:74:1d:1d:7b:94:36:25:81:55:b0:a4:85:
                    97:b9:1b:bc:2f:1d:10:dd:e1:11:ab:59:32:11:73:
                    12:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:FD:D9:0B:99:0E:76:E6:CB:6D:8A:91:57:CC:E7:BC:33:F7:BE:8C
            X509v3 Authority Key Identifier:
                keyid:B1:EE:88:71:06:3A:01:08:33:5B:DF:AA:3E:3A:13:F9:C9:C7:90:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/se6IcQY6AQgzW9-qPjoT-cnHkN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se6IcQY6AQgzW9-qPjoT-cnHkN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/586BBA70BCE711EDB775B94AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:b5:82:df:e0:ef:ae:df:37:b7:c0:c9:e6:01:4b:58:10:0b:
         d9:96:39:d4:87:4a:ae:91:52:14:3a:7e:73:f4:98:84:01:bd:
         79:d8:59:4c:c4:7c:19:01:7c:13:3d:b0:cc:74:4f:20:b2:36:
         0d:10:42:77:7a:f3:58:03:d6:39:8d:74:d9:b2:b1:a5:bb:12:
         16:c6:97:9d:3b:6d:10:8a:93:d1:bb:0f:7e:b6:c5:bf:c6:63:
         08:90:1a:e2:84:95:2c:ae:af:bd:33:cf:2d:4e:39:52:f4:df:
         fd:b6:e2:48:55:fd:99:88:34:ef:40:40:6c:6e:b5:de:87:9b:
         73:87:d4:e0:0b:66:ee:db:a1:90:88:ed:92:f4:0d:79:16:a0:
         8b:96:14:ca:65:f7:1f:30:9e:9d:df:cc:17:f6:3c:f1:8f:76:
         a6:2a:0f:81:46:b9:35:08:07:e4:59:4f:b8:c2:9c:77:3d:65:
         5b:f2:bc:d4:63:8c:c2:66:7c:16:f9:31:52:f1:e1:d2:74:e2:
         d0:94:42:79:dc:a6:07:55:35:be:f1:6c:fa:7b:1d:a2:3f:ab:
         5c:53:1b:bf:ea:d4:ed:a7:d5:2f:e3:14:75:72:b6:2b:c3:b5:
         d7:d2:39:e5:91:d2:c4:fd:77:e7:06:b4:b2:dd:c4:fe:de:4e:
         1f:84:a4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----