Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F635F/B87B64FC6F4811E8B1585164C4F9AE02/39D596AC6F4A11E8BFAC7968C4F9AE02.roa
File:                     39D596AC6F4A11E8BFAC7968C4F9AE02.roa (raw, json)
Hash identifier:          lEr+sOGeNBXBGvt9ME0ZdeYMtNG10rkTTlz53gN/638=
Subject key identifier:   51:1A:EE:CF:8B:B1:04:93:4C:E9:C1:24:91:E2:02:1D:56:69:0F:1B
Certificate issuer:       /CN=A91F635F/serialNumber=936A0FAEF7A6FD83C26CEE1E5CFB3A42FF48E180
Certificate serial:       1120
Authority key identifier: 93:6A:0F:AE:F7:A6:FD:83:C2:6C:EE:1E:5C:FB:3A:42:FF:48:E1:80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2oPrvem_YPCbO4eXPs6Qv9I4YA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F635F/B87B64FC6F4811E8B1585164C4F9AE02/39D596AC6F4A11E8BFAC7968C4F9AE02.roa
Signing time:             Wed 09 Feb 2022 06:04:30 +0000
ROA not before:           Wed 09 Feb 2022 06:04:30 +0000
ROA not after:            Mon 01 May 2023 00:00:00 +0000
asID:                     12654
IP address blocks:        27.0.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4384 (0x1120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F/serialNumber=936A0FAEF7A6FD83C26CEE1E5CFB3A42FF48E180
        Validity
            Not Before: Feb  9 06:04:30 2022 GMT
            Not After : May  1 00:00:00 2023 GMT
        Subject: CN=6203596e-1d03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:91:d9:8b:62:36:17:6d:17:01:86:13:79:db:
                    61:9f:60:5e:2b:04:9b:fe:ca:25:d5:62:b7:66:c2:
                    0a:fb:cb:d5:dd:6c:12:e8:8f:6a:53:4d:c2:6c:76:
                    3a:c8:85:37:a5:b5:13:5a:43:38:7d:a1:ec:c9:9a:
                    cb:f3:73:fd:d8:c5:f9:9c:87:b2:2d:3c:6e:99:68:
                    70:3e:b1:ef:c0:5e:98:70:b4:09:aa:35:e0:07:22:
                    6a:7f:c1:bc:30:21:85:ea:9e:4b:3b:77:04:a5:99:
                    4d:71:21:7e:5f:b0:e6:91:41:cd:8c:05:6e:15:48:
                    3b:7e:f1:9f:bf:91:bf:ff:65:fb:ea:6d:67:33:d2:
                    40:de:9d:2e:a9:af:36:68:4e:92:39:86:69:74:c6:
                    14:d2:0e:9e:a9:c4:91:ca:2c:5d:71:3a:b5:59:3b:
                    f4:54:41:6e:60:ed:03:1f:5b:e5:af:b0:0a:84:7c:
                    35:25:de:c4:b0:75:10:f8:da:a0:b0:da:40:d1:d8:
                    4e:5c:16:f0:a5:d1:e8:39:45:b4:d5:d1:0d:08:b8:
                    1b:68:4d:df:d7:7a:55:3b:d8:a4:4d:bb:5f:a7:4c:
                    07:b0:5a:8c:e7:6c:2e:44:e8:7e:1a:14:fa:5e:bf:
                    c9:9a:94:0b:d4:f9:a6:f1:9c:72:c0:44:7d:6e:26:
                    3c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1A:EE:CF:8B:B1:04:93:4C:E9:C1:24:91:E2:02:1D:56:69:0F:1B
            X509v3 Authority Key Identifier:
                keyid:93:6A:0F:AE:F7:A6:FD:83:C2:6C:EE:1E:5C:FB:3A:42:FF:48:E1:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F635F/B87B64FC6F4811E8B1585164C4F9AE02/k2oPrvem_YPCbO4eXPs6Qv9I4YA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2oPrvem_YPCbO4eXPs6Qv9I4YA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F635F/B87B64FC6F4811E8B1585164C4F9AE02/39D596AC6F4A11E8BFAC7968C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.0.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:b4:ec:c2:92:52:82:3f:1d:e8:5a:a6:59:b4:d8:4b:d6:2f:
         25:f5:6b:3b:49:27:c5:81:5b:61:6d:dc:9a:b4:0f:bc:18:94:
         3d:d7:75:c5:17:45:0d:62:0e:d3:b4:d7:ca:b3:c4:52:1c:a2:
         1c:46:62:c5:eb:6d:67:ea:3a:12:75:6e:12:ea:1d:d0:6a:5b:
         c8:72:35:29:62:62:65:02:ec:54:f1:d4:34:33:4c:0f:25:34:
         ee:a8:fd:5e:19:82:27:6e:c4:eb:87:66:57:75:58:5e:b1:61:
         ea:e0:e5:11:c5:07:d1:bb:91:a3:d6:b9:9b:25:87:c3:34:19:
         da:77:00:09:d5:48:e9:44:aa:bb:b1:41:3c:a6:39:f7:df:94:
         cf:6a:4d:32:87:24:bd:0f:eb:2d:ba:2f:ec:a1:4d:5a:d2:37:
         a5:b8:5f:57:19:09:49:8c:64:29:11:0a:8a:6c:41:37:03:f3:
         26:02:6a:d7:fc:6b:6d:32:9a:7c:67:65:21:40:1c:af:7a:e0:
         6f:e4:e6:78:22:75:a5:a2:65:68:e6:5f:7a:f5:84:af:c9:8f:
         7e:ec:59:fb:55:2e:74:6f:5b:70:58:d5:3f:fb:b2:a4:87:1c:
         bd:5d:cf:ff:60:51:44:50:9f:de:12:d5:4a:6a:50:c1:d6:8e:
         46:b7:ae:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----