Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/D6659698FC7311EB8E369E75C4F9AE02.roa
File:                     D6659698FC7311EB8E369E75C4F9AE02.roa (raw, json)
Hash identifier:          J8fAHk4ZJs56SsDUE3UaYKiiHHl22fO2yWnrYeiJWwM=
Subject key identifier:   9A:DE:66:76:CD:76:37:E2:DC:D0:91:D1:4A:4B:BB:37:7F:4B:39:D6
Certificate issuer:       /CN=A9111590/serialNumber=50229DE035B72572F4E0027472EB6826FDFE94AE
Certificate serial:       0521
Authority key identifier: 50:22:9D:E0:35:B7:25:72:F4:E0:02:74:72:EB:68:26:FD:FE:94:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCKd4DW3JXL04AJ0cutoJv3-lK4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/D6659698FC7311EB8E369E75C4F9AE02.roa
Signing time:             Fri 11 Nov 2022 14:50:21 +0000
ROA not before:           Fri 11 Nov 2022 14:50:21 +0000
ROA not after:            Sun 28 May 2023 00:00:00 +0000
asID:                     61138
IP address blocks:        27.0.234.0/24 maxlen: 24
                          27.0.235.0/24 maxlen: 24
                          103.208.85.0/24 maxlen: 24
                          103.208.86.0/24 maxlen: 24
                          103.214.71.0/24 maxlen: 24
                          103.230.140.0/24 maxlen: 24
                          144.48.80.0/24 maxlen: 24
                          144.48.83.0/24 maxlen: 24
                          2404:3d80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1313 (0x521)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111590/serialNumber=50229DE035B72572F4E0027472EB6826FDFE94AE
        Validity
            Not Before: Nov 11 14:50:21 2022 GMT
            Not After : May 28 00:00:00 2023 GMT
        Subject: CN=636e612d-09e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:10:dd:71:77:a3:e6:c7:6e:cc:fd:11:51:6e:
                    de:08:af:63:d3:1c:be:15:ea:5f:8c:98:d0:d3:4a:
                    52:0e:1c:12:0b:d1:61:44:3b:76:ad:a3:11:04:4d:
                    2f:ff:46:2a:b0:72:ed:14:d3:1a:f1:e1:06:cd:a8:
                    b6:86:78:d4:53:95:53:0a:41:a7:c8:79:24:22:d2:
                    b0:89:d8:9c:ce:0c:9e:d3:d4:bf:ef:10:d2:5f:65:
                    1c:14:9b:60:12:ce:e2:6f:42:8e:e4:51:8b:5b:ae:
                    18:1c:69:80:86:01:60:bb:b4:ec:7c:3b:86:c1:3e:
                    b8:c0:51:28:07:8b:63:cb:2d:7f:83:6d:46:96:b9:
                    62:78:d9:31:58:2b:d2:23:1d:02:1d:9d:42:27:07:
                    10:6c:c2:be:e1:8e:a8:0a:62:dd:54:fe:a6:ea:66:
                    fe:90:44:c4:d8:6a:ae:a9:43:85:91:04:04:5e:b8:
                    ca:c0:81:d1:ed:aa:dc:81:5a:60:fb:b6:af:24:c9:
                    7c:e8:35:13:7e:51:6c:37:e0:01:19:2c:09:5a:bc:
                    5c:d4:f2:99:fa:5a:a2:e5:21:0f:1b:40:37:f1:a8:
                    de:37:77:93:e9:02:1d:db:69:7d:53:59:4f:d8:71:
                    3d:1c:2c:12:11:ea:64:bd:8e:68:f8:8c:82:bd:f3:
                    93:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:DE:66:76:CD:76:37:E2:DC:D0:91:D1:4A:4B:BB:37:7F:4B:39:D6
            X509v3 Authority Key Identifier:
                keyid:50:22:9D:E0:35:B7:25:72:F4:E0:02:74:72:EB:68:26:FD:FE:94:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/UCKd4DW3JXL04AJ0cutoJv3-lK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCKd4DW3JXL04AJ0cutoJv3-lK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/D6659698FC7311EB8E369E75C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.0.234.0/23
                  103.208.85.0-103.208.86.255
                  103.214.71.0/24
                  103.230.140.0/24
                  144.48.80.0/24
                  144.48.83.0/24
                IPv6:
                  2404:3d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:25:66:27:bb:c9:29:fc:54:83:1a:d2:b8:d6:19:3a:8a:04:
         af:24:84:90:90:34:81:0d:31:6b:e4:be:39:1d:2e:a6:b6:68:
         12:fb:b8:65:3f:36:41:07:09:93:7d:a5:15:88:50:e7:c2:6c:
         86:98:f2:4d:c9:1c:82:27:66:69:61:c1:74:64:dc:61:ff:db:
         84:a8:8c:17:8e:f8:1f:79:e6:2c:60:ea:48:be:d8:7b:9c:18:
         93:71:44:7d:bc:39:41:ce:4e:d6:83:03:39:19:19:91:62:ff:
         8f:44:56:a5:b4:ef:27:7e:8c:3d:17:bb:6c:3f:3e:c5:82:cc:
         a8:fd:ae:58:fe:ff:be:b3:1b:8d:59:1c:c8:a6:1e:fd:59:c0:
         ba:82:4e:c8:5d:f3:d1:00:6a:c2:8a:94:4d:ba:45:e2:c5:1f:
         b2:09:24:7c:d7:3a:43:a8:40:cf:ce:3d:62:3c:ad:e7:5c:92:
         ce:3a:3d:ba:f7:49:54:f6:5f:0e:38:ae:58:df:6f:c8:ae:39:
         3b:0b:aa:ed:9a:f8:10:8c:2d:61:e0:19:2e:f8:41:7a:9b:af:
         fb:68:2f:13:eb:3d:05:77:b6:1c:3e:9d:ec:7f:97:16:c2:fe:
         ff:72:4b:0b:2e:ba:66:d3:b9:3d:ad:a0:7f:ad:6a:25:6d:92:
         9e:7c:19:fd
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgICBSEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTE1OTAxMTAvBgNVBAUTKDUwMjI5REUwMzVCNzI1NzJGNEUwMDI3NDcyRUI2ODI2
RkRGRTk0QUUwHhcNMjIxMTExMTQ1MDIxWhcNMjMwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02MzZlNjEyZC0wOWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApBDdcXej5sduzP0RUW7eCK9j0xy+FepfjJjQ00pSDhwSC9FhRDt2raMRBE0v
/0YqsHLtFNMa8eEGzai2hnjUU5VTCkGnyHkkItKwidiczgye09S/7xDSX2UcFJtg
Es7ib0KO5FGLW64YHGmAhgFgu7TsfDuGwT64wFEoB4tjyy1/g21GlrlieNkxWCvS
Ix0CHZ1CJwcQbMK+4Y6oCmLdVP6m6mb+kETE2GquqUOFkQQEXrjKwIHR7arcgVpg
+7avJMl86DUTflFsN+ABGSwJWrxc1PKZ+lqi5SEPG0A38ajeN3eT6QId22l9U1lP
2HE9HCwSEepkvY5o+IyCvfOTAQIDAQABo4ICyjCCAsYwHQYDVR0OBBYEFJreZnbN
djfi3NCR0UpLuzd/SznWMB8GA1UdIwQYMBaAFFAineA1tyVy9OACdHLraCb9/pSu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTU5MC8wMjVDRDI2MjdB
NkUxMUVCODFBRjJFM0ZDNEY5QUUwMi9VQ0tkNERXM0pYTDA0QUowY3V0b0p2My1s
SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VDS2Q0RFczSlhMMDRBSjBjdXRvSnYzLWxLNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTE1OTAvMDI1Q0QyNjI3QTZFMTFFQjgxQUYyRTNGQzRGOUFFMDIvRDY2NTk2OThG
QzczMTFFQjhFMzY5RTc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVAYIKwYBBQUHAQcBAf8E
RTBDMDIEAgABMCwDBAEbAOowDAMEAGfQVQMEAGfQVgMEAGfWRwMEAGfmjAMEAJAw
UAMEAJAwUzANBAIAAjAHAwUAJAQ9gDANBgkqhkiG9w0BAQsFAAOCAQEAGSVmJ7vJ
KfxUgxrSuNYZOooErySEkJA0gQ0xa+S+OR0uprZoEvu4ZT82QQcJk32lFYhQ58Js
hpjyTckcgidmaWHBdGTcYf/bhKiMF474H3nmLGDqSL7Ye5wYk3FEfbw5Qc5O1oMD
ORkZkWL/j0RWpbTvJ36MPRe7bD8+xYLMqP2uWP7/vrMbjVkcyKYe/VnAuoJOyF3z
0QBqwoqUTbpF4sUfsgkkfNc6Q6hAz849Yjyt51ySzjo9uvdJVPZfDjiuWN9vyK45
Owuq7Zr4EIwtYeAZLvhBepuv+2gvE+s9BXe2HD6d7H+XFsL+/3JLCy66ZtO5Pa2g
f61qJW2SnnwZ/Q==
-----END CERTIFICATE-----