Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF2B3/E7C2CB7E668B11EA90FC0422C4F9AE02/DF9BF84C757E11EAA923CA1EC4F9AE02.roa
File:                     DF9BF84C757E11EAA923CA1EC4F9AE02.roa (raw, json)
Hash identifier:          FVqzCvTr/GIYm+M58RJBjrO1UoxT3jiC5kTffvBwPO8=
Subject key identifier:   75:AD:63:5F:87:0E:E4:FC:6E:E9:29:D7:11:66:0A:C9:8F:E1:A8:15
Certificate issuer:       /CN=A91CF2B3/serialNumber=F7CEDDFB18EB390B421B58070BF210229F0E3A37
Certificate serial:       087C
Authority key identifier: F7:CE:DD:FB:18:EB:39:0B:42:1B:58:07:0B:F2:10:22:9F:0E:3A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/987d-xjrOQtCG1gHC_IQIp8OOjc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF2B3/E7C2CB7E668B11EA90FC0422C4F9AE02/DF9BF84C757E11EAA923CA1EC4F9AE02.roa
Signing time:             Wed 12 Oct 2022 14:27:56 +0000
ROA not before:           Wed 12 Oct 2022 14:27:55 +0000
ROA not after:            Fri 31 Mar 2023 00:00:00 +0000
asID:                     139870
IP address blocks:        103.244.140.0/24 maxlen: 24
                          103.244.141.0/24 maxlen: 24
                          103.244.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2172 (0x87c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF2B3/serialNumber=F7CEDDFB18EB390B421B58070BF210229F0E3A37
        Validity
            Not Before: Oct 12 14:27:55 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=6346ceeb-52ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7b:06:fb:59:5a:89:b6:ab:e0:d0:d7:3a:df:
                    a8:89:27:b2:8d:28:81:d7:d0:5c:d8:de:88:e7:d7:
                    bd:4a:6b:eb:a6:3e:5c:37:79:07:c2:2c:db:c5:ee:
                    55:1a:aa:c2:35:69:57:77:21:31:66:be:34:e9:40:
                    76:8c:37:d2:6a:97:bf:ba:fc:2e:17:b7:bd:7f:a6:
                    37:83:ba:3f:72:9b:ef:15:e7:c7:ed:e3:b1:c9:75:
                    e6:94:89:2b:4e:2f:60:d1:17:d9:ca:49:b2:c8:e7:
                    6f:b2:1c:ba:c9:4b:4e:2f:7b:d2:87:90:4f:6a:4b:
                    3f:07:6e:45:eb:09:b3:c8:bc:7a:d8:6d:bc:ef:6a:
                    53:8e:e3:c8:c6:0f:5f:a7:1c:86:f0:3a:af:c6:0d:
                    cc:ef:6e:d8:f3:d6:9f:d1:3d:19:a7:50:fe:81:a5:
                    b7:d6:cf:d1:f0:d0:08:90:c2:6e:1d:ea:5c:bc:d8:
                    a7:3d:da:e3:59:c5:c6:7c:e1:8e:df:f1:cd:30:85:
                    cf:e2:4d:cf:e3:66:2d:27:65:da:1d:49:22:72:cf:
                    fa:67:b9:af:29:d1:4f:fd:9e:42:07:4d:c1:9b:0f:
                    1c:e9:40:e4:2d:4b:c0:c4:16:72:82:21:3a:c3:ef:
                    f1:86:d1:4f:65:1e:f2:94:2a:a5:aa:cf:62:71:65:
                    10:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AD:63:5F:87:0E:E4:FC:6E:E9:29:D7:11:66:0A:C9:8F:E1:A8:15
            X509v3 Authority Key Identifier:
                keyid:F7:CE:DD:FB:18:EB:39:0B:42:1B:58:07:0B:F2:10:22:9F:0E:3A:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF2B3/E7C2CB7E668B11EA90FC0422C4F9AE02/987d-xjrOQtCG1gHC_IQIp8OOjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/987d-xjrOQtCG1gHC_IQIp8OOjc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF2B3/E7C2CB7E668B11EA90FC0422C4F9AE02/DF9BF84C757E11EAA923CA1EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.140.0-103.244.142.255

    Signature Algorithm: sha256WithRSAEncryption
         0a:0b:16:d1:ea:5b:37:ea:71:77:de:f4:95:06:5e:38:b1:52:
         7a:47:4b:7e:70:c0:4a:41:c3:7c:62:48:56:8a:71:50:3a:73:
         8d:d3:d9:a0:78:20:48:f7:28:00:f4:46:bd:02:9e:a3:cd:a8:
         94:91:a3:c2:a9:52:5e:04:5a:a5:79:b2:2d:5d:2d:f7:eb:f3:
         55:01:3b:93:f5:43:e4:3e:a5:bb:eb:dd:6b:f3:fb:e7:fd:42:
         ef:9a:56:0d:57:f7:1f:6b:bc:ee:d4:85:09:3a:10:91:a3:db:
         6d:a7:e0:60:7c:98:72:0e:ce:55:f7:be:be:ca:79:df:b8:86:
         c5:53:d6:f5:26:c5:3f:40:4e:9e:33:31:7f:6e:de:55:fb:ca:
         fd:b0:e1:38:f6:98:12:0b:39:15:08:19:78:0b:1e:6d:8f:40:
         56:52:71:90:2e:fa:71:41:ca:fa:ef:03:4a:78:7b:5f:b5:ea:
         61:7d:75:ce:4f:25:f7:bf:3a:79:0b:65:0a:30:80:7b:40:c9:
         8f:df:3f:d0:49:1a:cd:bd:3e:73:eb:8d:8f:c3:85:67:a1:05:
         1e:2f:fb:5b:15:d4:8e:50:f5:9d:ef:ed:22:ad:a0:79:38:44:
         9e:a6:74:1e:68:6f:33:90:4f:d9:da:7f:a7:a3:c7:3c:6b:bc:
         5a:48:12:41
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICCHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0YyQjMxMTAvBgNVBAUTKEY3Q0VEREZCMThFQjM5MEI0MjFCNTgwNzBCRjIxMDIy
OUYwRTNBMzcwHhcNMjIxMDEyMTQyNzU1WhcNMjMwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzQ2Y2VlYi01MmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtnsG+1laibar4NDXOt+oiSeyjSiB19Bc2N6I59e9Smvrpj5cN3kHwizbxe5V
GqrCNWlXdyExZr406UB2jDfSape/uvwuF7e9f6Y3g7o/cpvvFefH7eOxyXXmlIkr
Ti9g0RfZykmyyOdvshy6yUtOL3vSh5BPaks/B25F6wmzyLx62G2872pTjuPIxg9f
pxyG8Dqvxg3M727Y89af0T0Zp1D+gaW31s/R8NAIkMJuHepcvNinPdrjWcXGfOGO
3/HNMIXP4k3P42YtJ2XaHUkics/6Z7mvKdFP/Z5CB03Bmw8c6UDkLUvAxBZygiE6
w+/xhtFPZR7ylCqlqs9icWUQVQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFHWtY1+H
DuT8bukp1xFmCsmP4agVMB8GA1UdIwQYMBaAFPfO3fsY6zkLQhtYBwvyECKfDjo3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjJCMy9FN0MyQ0I3RTY2
OEIxMUVBOTBGQzA0MjJDNEY5QUUwMi85ODdkLXhqck9RdENHMWdIQ19JUUlwOE9P
amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzk4N2QteGpyT1F0Q0cxZ0hDX0lRSXA4T09qYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0YyQjMvRTdDMkNCN0U2NjhCMTFFQTkwRkMwNDIyQzRGOUFFMDIvREY5QkY4NEM3
NTdFMTFFQUE5MjNDQTFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E
GDAWMBQEAgABMA4wDAMEAmf0jAMEAGf0jjANBgkqhkiG9w0BAQsFAAOCAQEACgsW
0epbN+pxd970lQZeOLFSekdLfnDASkHDfGJIVopxUDpzjdPZoHggSPcoAPRGvQKe
o82olJGjwqlSXgRapXmyLV0t9+vzVQE7k/VD5D6lu+vda/P75/1C75pWDVf3H2u8
7tSFCToQkaPbbafgYHyYcg7OVfe+vsp537iGxVPW9SbFP0BOnjMxf27eVfvK/bDh
OPaYEgs5FQgZeAsebY9AVlJxkC76cUHK+u8DSnh7X7XqYX11zk8l9786eQtlCjCA
e0DJj98/0Ekazb0+c+uNj8OFZ6EFHi/7WxXUjlD1ne/tIq2geThEnqZ0HmhvM5BP
2dp/p6PHPGu8WkgSQQ==
-----END CERTIFICATE-----