Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E428E/C3192FE8EA5A11E781483A3EC4F9AE02/87DB686C798611E9B510D434C4F9AE02.roa
File:                     87DB686C798611E9B510D434C4F9AE02.roa (raw, json)
Hash identifier:          mKLM9jLEdC1iaKWr+ouLRY5b8VmkUKOaGO5Og297ipo=
Subject key identifier:   5D:DC:35:80:B5:91:7E:B4:3E:F8:73:52:05:0D:CD:78:D4:B3:54:6A
Certificate issuer:       /CN=A91E428E/serialNumber=9A4F0F7B9EFBCD02D7666D641BB6196E31E73725
Certificate serial:       139D
Authority key identifier: 9A:4F:0F:7B:9E:FB:CD:02:D7:66:6D:64:1B:B6:19:6E:31:E7:37:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk8Pe577zQLXZm1kG7YZbjHnNyU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E428E/C3192FE8EA5A11E781483A3EC4F9AE02/87DB686C798611E9B510D434C4F9AE02.roa
Signing time:             Thu 31 Mar 2022 18:04:30 +0000
ROA not before:           Thu 31 Mar 2022 18:04:30 +0000
ROA not after:            Sun 28 May 2023 00:00:00 +0000
asID:                     138195
IP address blocks:        103.86.44.0/24 maxlen: 24
                          103.86.45.0/24 maxlen: 24
                          103.86.46.0/24 maxlen: 24
                          103.86.47.0/24 maxlen: 24
                          116.204.168.0/24 maxlen: 24
                          116.204.169.0/24 maxlen: 24
                          116.204.170.0/24 maxlen: 24
                          116.204.171.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5021 (0x139d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E428E/serialNumber=9A4F0F7B9EFBCD02D7666D641BB6196E31E73725
        Validity
            Not Before: Mar 31 18:04:30 2022 GMT
            Not After : May 28 00:00:00 2023 GMT
        Subject: CN=6245ed2e-e141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4a:4e:52:89:49:e2:75:c4:21:ea:d4:9b:2c:
                    96:e0:e0:a8:b5:10:96:45:ca:59:49:79:79:1a:54:
                    6e:1d:bb:6e:59:f3:63:c5:26:b7:0a:fa:55:4e:e9:
                    b3:8f:d9:05:1a:6f:ea:e7:09:44:db:96:fb:ab:0f:
                    8a:3e:96:13:cf:88:6b:4a:83:0c:a1:e3:71:ee:dd:
                    b5:fd:c1:82:3c:0d:ef:61:f6:89:c1:0e:47:5a:f0:
                    66:fb:ad:fe:5d:09:34:8b:f2:d8:3b:27:0d:d4:6f:
                    01:7c:ab:2b:fe:26:67:7f:28:70:f6:e8:3e:1d:b3:
                    99:03:6c:23:80:40:ba:ac:8f:8c:97:1e:3a:c3:7e:
                    b4:e5:f2:e3:7c:21:e6:43:a4:62:5b:54:02:ff:03:
                    13:c9:5a:74:d5:ee:f2:eb:9c:c0:16:5e:5d:00:cc:
                    b8:0c:58:de:2d:03:cf:5e:b0:94:ba:b2:d3:7b:da:
                    d9:e2:81:be:bf:6b:33:d5:36:f9:70:28:92:b6:9c:
                    a3:6f:78:1c:a4:00:1e:7f:0b:b3:c9:be:e6:13:75:
                    57:f2:ee:67:5d:86:39:c6:32:a5:c6:06:a4:1f:ed:
                    6b:9a:5d:88:c8:56:85:db:f3:9b:c0:08:eb:03:56:
                    22:3a:4c:92:03:56:a8:62:14:68:9f:41:cb:7f:a1:
                    90:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:DC:35:80:B5:91:7E:B4:3E:F8:73:52:05:0D:CD:78:D4:B3:54:6A
            X509v3 Authority Key Identifier:
                keyid:9A:4F:0F:7B:9E:FB:CD:02:D7:66:6D:64:1B:B6:19:6E:31:E7:37:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E428E/C3192FE8EA5A11E781483A3EC4F9AE02/mk8Pe577zQLXZm1kG7YZbjHnNyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk8Pe577zQLXZm1kG7YZbjHnNyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E428E/C3192FE8EA5A11E781483A3EC4F9AE02/87DB686C798611E9B510D434C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.86.44.0/22
                  116.204.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:e1:71:02:ad:97:7d:6f:02:9f:2c:29:55:c1:e2:83:92:e5:
         ff:66:7d:91:a9:e5:be:91:1f:df:23:53:28:d3:9e:4f:c4:c0:
         18:c7:5c:29:a1:86:29:19:82:48:d0:d8:da:02:60:87:1b:36:
         b3:0f:e4:36:0e:58:4f:5b:76:a9:ab:84:e2:a5:30:91:a1:39:
         99:67:47:b3:6e:85:ba:38:6e:70:fd:5f:5d:e0:ee:a1:e6:ae:
         93:34:a6:89:24:7f:d4:c3:2e:71:01:62:5b:15:59:a9:4b:b5:
         b1:9f:ae:5d:ca:c9:e4:d0:95:ba:e2:fa:ce:be:e7:7e:3b:7e:
         1c:19:f2:fb:0b:a2:9f:90:b3:06:9b:90:a4:e6:57:60:db:07:
         58:31:66:e4:32:69:13:2e:73:b8:d5:33:4b:bf:c9:fe:13:e5:
         f4:bf:bd:ca:85:90:c7:00:2d:d0:4d:9c:89:e9:ab:f9:29:ca:
         21:cf:92:2d:b9:c4:6b:f8:68:90:ed:07:52:6c:81:02:3e:2b:
         16:3d:0f:30:60:9d:24:2c:bd:c7:5e:87:56:e8:8c:89:ea:1a:
         da:cc:fe:04:92:cb:ba:3d:00:0c:06:7d:5f:d9:b4:d9:0a:c8:
         3d:f3:c7:7f:64:de:fb:5a:a0:4a:21:1c:77:77:be:b8:dc:6a:
         14:da:e8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----