Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E1C/433BA6F29D7811E99620087CC4F9AE02/23CB262CCD0B11E9B7BC4D10C4F9AE02.roa
File:                     23CB262CCD0B11E9B7BC4D10C4F9AE02.roa (raw, json)
Hash identifier:          W/dw7dBSLQoVD/QxH+vlgG0d3PJTe5z8jixgDIftMHk=
Subject key identifier:   FF:2E:A2:CA:C9:9E:69:2E:BE:CA:DA:4E:40:DB:47:5C:F3:CB:52:E0
Certificate issuer:       /CN=A91E3E1C/serialNumber=081282BDF7A0919BC6A42809766215F6D4BD7D8F
Certificate serial:       094C
Authority key identifier: 08:12:82:BD:F7:A0:91:9B:C6:A4:28:09:76:62:15:F6:D4:BD:7D:8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBKCvfegkZvGpCgJdmIV9tS9fY8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3E1C/433BA6F29D7811E99620087CC4F9AE02/23CB262CCD0B11E9B7BC4D10C4F9AE02.roa
Signing time:             Fri 27 Aug 2021 07:35:42 +0000
ROA not before:           Fri 27 Aug 2021 07:35:42 +0000
ROA not after:            Mon 31 Oct 2022 00:00:00 +0000
asID:                     139298
IP address blocks:        103.140.169.0/24 maxlen: 24
                          103.141.76.0/24 maxlen: 24
                          2001:df0:ee80::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2380 (0x94c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3E1C/serialNumber=081282BDF7A0919BC6A42809766215F6D4BD7D8F
        Validity
            Not Before: Aug 27 07:35:42 2021 GMT
            Not After : Oct 31 00:00:00 2022 GMT
        Subject: CN=612895ce-d324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:36:53:29:26:11:a6:3a:f0:3e:41:28:4a:b2:
                    bb:55:19:ce:a5:11:db:59:d7:eb:c0:ee:3d:f0:ae:
                    8f:5b:87:9f:12:ee:3e:84:02:ab:1d:71:65:cd:2e:
                    d1:af:ba:7d:8a:f0:41:17:40:f5:47:68:ee:39:f4:
                    30:55:8e:1e:4c:e2:96:69:cb:8b:27:6f:22:a5:27:
                    16:e9:ec:79:03:8f:75:22:ad:eb:e2:af:98:ae:d4:
                    c4:30:4c:43:fd:28:b0:6c:27:53:76:44:43:b0:f8:
                    d9:40:04:71:d6:35:c2:2f:71:4e:ec:c5:6a:60:fa:
                    59:9b:e6:59:2b:37:06:e9:f0:9f:8a:9c:88:f9:4c:
                    95:6d:9e:c7:df:01:71:20:7b:c3:20:65:eb:54:1b:
                    17:94:da:b0:28:30:76:2b:ba:6a:a4:c8:0e:d5:b2:
                    87:09:bc:be:6d:2f:81:4e:e9:04:00:0b:d1:df:8a:
                    da:3c:a5:1f:aa:8f:8f:83:d3:db:0a:29:d8:2d:c4:
                    df:04:7c:0b:ac:1c:ac:ad:e7:fb:56:ff:4e:f7:c5:
                    f9:42:47:ea:32:75:61:cd:67:c6:5a:fd:ad:6b:47:
                    b9:84:d6:2f:17:cb:89:9a:6c:f2:ca:64:7a:76:9b:
                    2d:8b:39:27:1e:0b:48:71:23:24:bc:d0:57:1a:73:
                    a3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:2E:A2:CA:C9:9E:69:2E:BE:CA:DA:4E:40:DB:47:5C:F3:CB:52:E0
            X509v3 Authority Key Identifier:
                keyid:08:12:82:BD:F7:A0:91:9B:C6:A4:28:09:76:62:15:F6:D4:BD:7D:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3E1C/433BA6F29D7811E99620087CC4F9AE02/CBKCvfegkZvGpCgJdmIV9tS9fY8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBKCvfegkZvGpCgJdmIV9tS9fY8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E1C/433BA6F29D7811E99620087CC4F9AE02/23CB262CCD0B11E9B7BC4D10C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.169.0/24
                  103.141.76.0/24
                IPv6:
                  2001:df0:ee80::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:89:47:60:cf:d4:6d:94:c8:da:f2:d8:b3:83:82:ba:f4:1c:
         e0:d7:c1:5f:48:a0:97:ce:9e:0c:06:fb:8d:84:d3:33:43:8c:
         3b:39:58:06:7d:a4:7e:e8:bb:7c:00:d3:25:d0:05:e5:db:b0:
         b1:fe:c6:15:9b:97:d1:3a:36:6a:0e:99:38:c9:58:39:79:af:
         9b:28:0a:0f:4f:bd:9f:ee:33:08:1c:60:b3:f8:51:47:d4:6d:
         83:42:be:36:57:db:8c:9c:ed:7c:d4:de:c0:5b:9c:88:31:cf:
         07:59:e4:1a:0e:92:95:b1:33:7a:94:b4:2b:bb:b0:ef:83:d5:
         2a:75:7e:96:45:56:7b:d1:17:6f:6b:55:f3:11:98:38:59:f0:
         ab:6c:b5:e2:1b:22:4c:d2:05:81:79:9e:5f:d3:5e:71:13:b3:
         45:af:94:31:0c:07:af:02:05:69:ea:ca:d7:03:69:66:ac:e0:
         69:ac:e4:06:77:14:6e:75:f0:d5:c6:a3:c3:a1:6d:cc:43:a3:
         73:38:95:45:ec:80:78:e8:ee:d2:7b:b9:ad:fd:4d:35:bb:d2:
         8b:63:82:e5:ba:41:84:96:a7:01:0d:3c:39:ea:58:61:82:21:
         cb:ed:7f:79:60:6e:b1:c7:66:80:05:d0:65:b9:d7:3e:0b:42:
         29:ee:94:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----