Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F635F/B87B64FC6F4811E8B1585164C4F9AE02/19305B087BF711ED9C66FF3BC4F9AE02.roa
File:                     19305B087BF711ED9C66FF3BC4F9AE02.roa (raw, json)
Hash identifier:          RMuZ1cRIEXe9G9D/KQKvp4vRgD8AHpdRDjEKzJDbzdU=
Subject key identifier:   E7:18:62:A2:36:AC:E5:50:B5:10:F2:30:DF:19:1B:6D:FE:A3:67:B0
Certificate issuer:       /CN=A91F635F/serialNumber=936A0FAEF7A6FD83C26CEE1E5CFB3A42FF48E180
Certificate serial:       1335
Authority key identifier: 93:6A:0F:AE:F7:A6:FD:83:C2:6C:EE:1E:5C:FB:3A:42:FF:48:E1:80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2oPrvem_YPCbO4eXPs6Qv9I4YA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F635F/B87B64FC6F4811E8B1585164C4F9AE02/19305B087BF711ED9C66FF3BC4F9AE02.roa
Signing time:             Wed 14 Dec 2022 21:34:33 +0000
ROA not before:           Wed 14 Dec 2022 21:34:33 +0000
ROA not after:            Mon 01 May 2023 00:00:00 +0000
asID:                     38895
IP address blocks:        2406:daa0:4040::/46 maxlen: 48
                          2406:daa0:4044::/46 maxlen: 48
                          2406:daa0:4048::/46 maxlen: 48
                          2406:daa0:404c::/46 maxlen: 48
                          2406:daa0:4060::/46 maxlen: 48
                          2406:daa0:4064::/46 maxlen: 48
                          2406:daa0:4068::/46 maxlen: 48
                          2406:daa0:406c::/46 maxlen: 48
                          2406:daa0:4080::/46 maxlen: 48
                          2406:daa0:4084::/46 maxlen: 48
                          2406:daa0:4088::/46 maxlen: 48
                          2406:daa0:8020::/46 maxlen: 48
                          2406:daa0:8024::/46 maxlen: 48
                          2406:daa0:8028::/46 maxlen: 48
                          2406:daa0:802c::/46 maxlen: 48
                          2406:daa0:8080::/46 maxlen: 48
                          2406:daa0:8084::/46 maxlen: 48
                          2406:daa0:8088::/46 maxlen: 48
                          2406:daa0:808c::/46 maxlen: 48
                          2406:daa0:80c0::/46 maxlen: 48
                          2406:daa0:80c4::/46 maxlen: 48
                          2406:daa0:80c8::/46 maxlen: 48
                          2406:daa0:80cc::/46 maxlen: 48
                          2406:daa0:a040::/46 maxlen: 48
                          2406:daa0:a044::/46 maxlen: 48
                          2406:daa0:a048::/46 maxlen: 48
                          2406:daa0:a04c::/46 maxlen: 48
                          2406:daa0:a080::/46 maxlen: 48
                          2406:daa0:a084::/46 maxlen: 48
                          2406:daa0:a088::/46 maxlen: 48
                          2406:daa0:a08c::/46 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4917 (0x1335)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F/serialNumber=936A0FAEF7A6FD83C26CEE1E5CFB3A42FF48E180
        Validity
            Not Before: Dec 14 21:34:33 2022 GMT
            Not After : May  1 00:00:00 2023 GMT
        Subject: CN=639a4169-7b55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b4:5f:90:4a:d7:ec:54:8f:72:01:87:3f:ec:
                    ac:0f:4b:b2:9f:14:58:2b:d8:e0:88:e7:13:8b:94:
                    3b:5b:f0:65:17:dd:05:2c:14:57:88:6c:1a:32:25:
                    ae:b1:cd:39:53:0e:9e:8c:2f:86:cb:1b:9b:95:4a:
                    e6:4a:8e:98:e6:7a:dc:16:5e:52:bf:fa:11:d7:bf:
                    7e:21:20:ed:a4:93:1e:d6:4a:32:a8:ca:9d:f7:3e:
                    9f:4c:26:dd:8c:b8:e4:cd:6b:15:8f:60:00:90:12:
                    67:c3:5d:43:9b:39:20:21:d9:c9:b8:11:5b:e4:25:
                    8b:62:5b:4a:15:2a:f9:1b:d0:4f:6f:72:71:56:30:
                    6c:17:ff:dd:4f:7d:45:a9:a5:32:7e:f9:de:ef:50:
                    48:b3:38:de:98:c6:91:05:c9:0c:18:34:55:80:89:
                    70:43:17:9b:f5:24:81:6e:b0:ff:8e:d8:fd:9a:e1:
                    ef:4e:c6:48:cb:0d:85:90:1a:fa:08:b6:53:b3:7f:
                    39:3d:67:65:86:a5:38:0f:c3:0e:10:0c:b3:50:86:
                    d7:53:f1:0d:99:18:4a:31:c4:c2:45:d8:ef:7b:65:
                    17:07:2b:11:78:53:03:bd:31:fb:37:7b:b9:e5:34:
                    6f:b0:78:d1:01:3b:38:1c:2a:23:5d:89:af:e1:f9:
                    ef:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:18:62:A2:36:AC:E5:50:B5:10:F2:30:DF:19:1B:6D:FE:A3:67:B0
            X509v3 Authority Key Identifier:
                keyid:93:6A:0F:AE:F7:A6:FD:83:C2:6C:EE:1E:5C:FB:3A:42:FF:48:E1:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F635F/B87B64FC6F4811E8B1585164C4F9AE02/k2oPrvem_YPCbO4eXPs6Qv9I4YA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2oPrvem_YPCbO4eXPs6Qv9I4YA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F635F/B87B64FC6F4811E8B1585164C4F9AE02/19305B087BF711ED9C66FF3BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daa0:4040::/44
                  2406:daa0:4060::/44
                  2406:daa0:4080::-2406:daa0:408b:ffff:ffff:ffff:ffff:ffff
                  2406:daa0:8020::/44
                  2406:daa0:8080::/44
                  2406:daa0:80c0::/44
                  2406:daa0:a040::/44
                  2406:daa0:a080::/44

    Signature Algorithm: sha256WithRSAEncryption
         69:28:46:f3:30:a3:27:11:48:20:2b:13:a8:3e:45:0f:c2:fe:
         6e:81:4b:19:3b:55:78:cd:04:c6:9a:17:cc:ad:02:51:e5:be:
         48:9e:cb:5f:a6:86:b9:7b:56:38:67:5e:d9:44:4a:10:f2:b5:
         26:cf:cf:1d:af:85:7a:1d:e4:b7:36:95:c6:4b:f1:02:6f:a4:
         0e:f3:41:45:c8:06:23:dd:53:b6:cc:af:67:31:67:b4:8c:4d:
         75:1a:e5:84:e6:5f:d3:ea:17:76:96:8b:c8:99:bc:29:b5:b4:
         f4:0d:c1:72:0c:6e:94:9a:f5:7f:18:c5:fe:e6:29:c2:c2:0e:
         3a:2c:90:ee:34:b0:5d:33:ea:75:01:b9:1b:6f:7b:92:a5:dd:
         32:e4:c8:43:b2:ec:61:11:62:9f:5d:d2:1b:b8:bf:e9:4f:17:
         90:e5:0b:a1:4c:4e:76:92:ed:8e:1f:1f:89:fa:2b:05:ac:1e:
         62:99:00:dd:5f:a6:97:77:29:8a:08:a7:79:f1:5c:df:f0:72:
         70:b3:a0:89:db:cd:e6:ee:f3:b0:27:10:64:11:47:44:22:29:
         10:74:be:52:bc:c8:14:a2:d2:9a:18:dc:7f:42:19:08:82:d9:
         72:16:62:d5:4e:c6:a9:19:50:6d:ee:53:d4:0e:ec:28:97:05:
         3d:3a:61:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----