Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/C9763EB431D811EE89285A41C4F9AE02.roa
File:                     C9763EB431D811EE89285A41C4F9AE02.roa (raw, json)
Hash identifier:          +03LMs4GrIEKMr4AUS8THT/+aKHBZJZQJL5qDyXGi38=
Subject key identifier:   B4:74:C3:F4:82:C8:8C:A1:2F:DC:8A:3E:CA:35:A1:AF:92:24:98:90
Certificate issuer:       /CN=A91FCB3B/serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C
Certificate serial:       CA
Authority key identifier: FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/C9763EB431D811EE89285A41C4F9AE02.roa
Signing time:             Fri 23 Aug 2024 05:27:17 +0000
ROA not before:           Fri 23 Aug 2024 05:27:17 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     135404
IP address blocks:        103.154.22.0/23 maxlen: 23
                          2406:5140::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCB3B
        Validity
            Not Before: Aug 23 05:27:17 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66c81db5-f61d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3e:4d:fb:5e:fd:ee:f6:b0:de:28:96:d7:93:
                    33:dc:fb:a1:25:78:d5:2e:ee:73:62:22:12:37:5f:
                    bc:30:6f:c8:89:56:5b:42:e4:a4:f9:9d:eb:e9:c7:
                    f7:33:53:12:35:ac:e3:f7:aa:81:ed:68:41:e6:6b:
                    7a:15:18:c8:68:26:e4:93:5f:d5:d3:f5:67:54:93:
                    eb:ef:b6:89:08:03:24:0d:47:4b:fa:01:31:3d:a8:
                    24:d6:25:41:2c:b3:92:be:7f:92:84:a7:13:50:b7:
                    8b:ce:cb:fe:6c:a4:6a:1f:58:ad:38:82:e1:aa:a4:
                    3a:32:66:69:38:1a:e6:91:43:97:b1:97:ab:91:e9:
                    a8:8c:a2:b7:49:1a:ec:77:85:6d:f6:1e:34:a5:6a:
                    ad:6f:0b:23:50:50:ed:78:fb:fc:8e:70:6a:54:78:
                    0d:22:57:8c:84:8f:09:d5:4b:5c:a5:fb:03:de:af:
                    69:5c:0b:f5:f2:dd:01:21:b0:04:1f:3f:1c:8b:0c:
                    82:5e:0c:cf:49:18:28:4c:ba:ab:e8:62:1f:57:39:
                    69:72:9c:20:00:92:d4:e0:49:d4:02:e4:b1:91:84:
                    54:cb:81:69:38:ff:e4:d9:86:6e:06:d9:59:26:60:
                    ab:c3:5c:52:96:55:7c:2a:b8:7b:35:7d:f4:ab:a8:
                    48:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:74:C3:F4:82:C8:8C:A1:2F:DC:8A:3E:CA:35:A1:AF:92:24:98:90
            X509v3 Authority Key Identifier:
                keyid:FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/C9763EB431D811EE89285A41C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.22.0/23
                IPv6:
                  2406:5140::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:85:ba:c6:cc:7a:1b:73:87:2a:de:ad:7f:75:e5:77:40:12:
         15:69:5d:41:3b:57:12:dd:d9:05:56:63:78:07:5b:ad:dc:4e:
         48:f1:bd:31:5c:74:27:f2:d8:d3:cd:4b:8b:c0:42:d2:57:64:
         fa:1f:96:7b:4f:74:24:f8:61:1a:2c:7d:ca:de:68:34:e1:9e:
         66:dc:8b:ec:4b:32:7a:82:e7:bb:41:43:ff:65:6d:66:e0:13:
         e6:29:30:5a:e6:73:26:67:f4:6b:66:94:de:97:ac:b3:c4:03:
         7b:84:5f:f2:ca:ca:fb:15:c9:9a:b8:61:ba:6e:97:5e:32:2b:
         26:02:c8:16:15:29:63:34:50:c8:1e:2f:9b:c4:62:68:88:7f:
         0e:0f:6d:42:3c:88:b6:e6:df:6b:21:a6:69:83:b8:c5:81:b9:
         47:33:b1:b8:27:7b:35:1f:8d:b7:89:1b:b6:3f:a6:f8:b4:99:
         12:70:88:3a:7c:87:f8:33:08:1e:14:72:30:b9:58:1d:52:56:
         6c:14:07:1e:7f:81:e1:d6:58:28:55:8c:e5:72:66:1f:22:ce:
         d9:80:91:0b:31:58:9b:c5:b0:01:08:d5:4b:13:66:a4:10:71:
         ba:fc:bb:68:93:13:58:24:22:1e:ed:fb:84:79:92:47:ee:00:
         74:fc:ed:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----