Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/19612C2661EC11EDB740B02AC4F9AE02.roa
File:                     19612C2661EC11EDB740B02AC4F9AE02.roa (raw, json)
Hash identifier:          2Tt6SZj93husAldVknG/Vn3fFsRlPmSzl05NzgIEyG8=
Subject key identifier:   AC:CA:E3:72:69:05:B7:AC:08:EF:40:3B:D2:21:80:22:01:4D:C3:D4
Certificate issuer:       /CN=A9111590/serialNumber=50229DE035B72572F4E0027472EB6826FDFE94AE
Certificate serial:       0525
Authority key identifier: 50:22:9D:E0:35:B7:25:72:F4:E0:02:74:72:EB:68:26:FD:FE:94:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCKd4DW3JXL04AJ0cutoJv3-lK4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/19612C2661EC11EDB740B02AC4F9AE02.roa
Signing time:             Fri 11 Nov 2022 18:10:18 +0000
ROA not before:           Fri 11 Nov 2022 18:10:18 +0000
ROA not after:            Sun 28 May 2023 00:00:00 +0000
asID:                     16509
IP address blocks:        103.230.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1317 (0x525)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111590/serialNumber=50229DE035B72572F4E0027472EB6826FDFE94AE
        Validity
            Not Before: Nov 11 18:10:18 2022 GMT
            Not After : May 28 00:00:00 2023 GMT
        Subject: CN=636e900a-dedd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d6:be:7d:7e:1d:e5:87:e1:01:d4:0a:af:3c:
                    f4:fb:0a:e8:c6:0c:b4:74:0f:8a:74:40:d4:87:ef:
                    fc:fe:e4:a6:b8:5e:cb:b3:4f:69:64:e1:cd:28:a2:
                    38:53:16:cd:d7:f3:b4:0b:cf:75:c6:bc:13:51:66:
                    f4:ef:8a:ec:d4:4d:11:01:15:12:5a:70:b1:6c:49:
                    64:b7:76:32:61:53:38:5a:9b:98:94:00:44:38:ce:
                    3a:bc:8d:ea:f5:ef:44:76:da:81:10:d7:07:03:36:
                    f6:63:fe:e5:3a:1c:7e:04:3a:95:ed:1a:68:86:fd:
                    16:41:b9:40:bf:df:3d:37:6c:94:bd:89:45:6f:e0:
                    e8:50:c0:96:6f:6e:af:64:5b:d6:a1:64:b4:5e:53:
                    9e:76:51:d1:3c:20:ac:75:66:a0:6a:30:6d:f8:f8:
                    aa:f8:e8:6e:d4:c2:16:4c:e6:d8:93:60:a0:6a:0a:
                    0a:75:74:e0:bb:79:c8:42:23:ab:42:57:a7:69:a4:
                    a4:92:6c:45:62:54:90:2d:4d:f3:d3:bc:52:a2:fa:
                    a3:27:af:1f:6e:03:5d:08:de:b5:51:aa:5d:01:49:
                    1a:ef:57:1b:ad:08:b2:81:6b:0b:d4:4e:42:be:84:
                    2e:0d:0a:33:7a:a9:1b:0c:36:c3:89:71:75:06:61:
                    20:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:CA:E3:72:69:05:B7:AC:08:EF:40:3B:D2:21:80:22:01:4D:C3:D4
            X509v3 Authority Key Identifier:
                keyid:50:22:9D:E0:35:B7:25:72:F4:E0:02:74:72:EB:68:26:FD:FE:94:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/UCKd4DW3JXL04AJ0cutoJv3-lK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCKd4DW3JXL04AJ0cutoJv3-lK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/19612C2661EC11EDB740B02AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:11:92:6f:d8:62:25:a3:1b:b0:70:52:e5:89:76:0d:0b:3c:
         2e:01:38:2b:42:f7:70:49:20:f4:46:b4:97:b5:25:5a:b3:5a:
         22:81:04:93:96:e6:50:c2:2c:ab:fb:8b:4d:92:9b:ed:44:f7:
         87:54:e1:54:e6:18:9b:60:2b:39:fd:f7:83:c6:4a:e6:e5:2a:
         7b:aa:25:7d:51:ad:fa:59:2c:32:2d:6c:fc:b1:bf:f1:ee:f5:
         d1:b9:f5:9c:39:0f:fc:e0:89:49:fc:68:93:74:dc:80:05:bb:
         b0:de:ac:7a:30:2f:99:6e:86:85:25:a3:e7:29:b7:95:25:57:
         1b:c2:6a:7d:c5:69:64:48:db:bc:be:e8:5f:dd:5a:1f:bc:f9:
         ac:72:e5:e5:62:7d:40:26:2d:ea:0c:94:b9:40:bc:18:ee:f3:
         2e:78:2c:a2:e0:2f:8f:18:2b:84:b3:1e:47:4e:ff:5c:a6:65:
         80:77:91:f5:a5:16:45:60:3c:e4:5b:82:40:10:a7:da:d9:e4:
         a0:b0:e4:76:b4:89:21:4d:c7:14:15:4a:7e:d0:97:26:27:ff:
         c4:1d:e0:89:bd:45:e8:c4:1c:39:f9:b0:ed:9a:ce:ef:b2:77:
         e6:30:be:45:ea:74:1d:41:26:ef:93:4e:99:e1:44:ed:41:5e:
         4b:60:99:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----