Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113435/6F0494C42FDE11ECAB5B1268C4F9AE02/5C7E38002FE311EC9A82B173C4F9AE02.roa
File:                     5C7E38002FE311EC9A82B173C4F9AE02.roa (raw, json)
Hash identifier:          S7sLQUgTki2R2f7B+2CgiZqLkf5lfO2MEiKF1ntNKEw=
Subject key identifier:   99:2A:BC:AC:FF:C1:E6:78:5E:6C:32:5E:11:8A:93:1B:A7:DC:B7:89
Certificate issuer:       /CN=A9113435/serialNumber=FD3ADF7672F82779582E7F14AA929F44704ABE0D
Certificate serial:       0372
Authority key identifier: FD:3A:DF:76:72:F8:27:79:58:2E:7F:14:AA:92:9F:44:70:4A:BE:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TrfdnL4J3lYLn8UqpKfRHBKvg0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113435/6F0494C42FDE11ECAB5B1268C4F9AE02/5C7E38002FE311EC9A82B173C4F9AE02.roa
Signing time:             Thu 21 Sep 2023 01:22:51 +0000
ROA not before:           Thu 21 Sep 2023 01:22:51 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     9336
IP address blocks:        27.113.240.0/21 maxlen: 24
                          45.113.244.0/22 maxlen: 24
                          103.53.200.0/22 maxlen: 24
                          121.200.208.0/21 maxlen: 24
                          202.90.48.0/21 maxlen: 24
                          2403:3600::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 882 (0x372)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113435/serialNumber=FD3ADF7672F82779582E7F14AA929F44704ABE0D
        Validity
            Not Before: Sep 21 01:22:51 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=650b9aea-a71c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:eb:f8:a0:dc:aa:42:af:e5:35:67:59:62:12:
                    9b:0a:80:82:36:d1:1a:a8:16:9f:df:f7:cd:56:f6:
                    51:df:4d:a8:bf:36:85:f9:b7:27:09:11:c1:91:98:
                    d7:35:7b:99:3a:7f:93:f3:21:12:1e:fc:f1:f9:1b:
                    ec:2a:bc:56:d7:b4:4d:70:2d:e5:ce:a5:63:af:4d:
                    6e:3e:ba:ca:b1:ef:7f:69:51:9b:63:d3:9c:43:78:
                    ae:f6:6c:d1:1e:4e:aa:d8:96:92:3a:9c:21:a2:0f:
                    b3:3f:df:1c:81:84:66:c1:ea:3a:0b:b0:a1:21:d7:
                    4e:bc:fa:50:1e:1d:1a:9a:72:2c:a0:0a:56:0e:b7:
                    60:f2:96:12:53:8a:9b:6a:e4:34:bc:be:03:4f:c6:
                    c1:2e:d3:fb:98:71:fd:c8:62:49:50:e1:2a:61:ba:
                    dc:2d:29:14:b8:5b:dc:63:07:1b:ad:05:22:dd:2d:
                    36:52:97:84:f8:18:e1:7f:e9:00:50:0a:40:0a:1d:
                    5f:1e:57:a4:ec:a2:7d:0b:a7:f6:98:13:12:84:2d:
                    60:8d:96:a8:df:0a:ce:95:83:7c:e0:ec:44:46:2a:
                    47:5d:e1:6d:8f:db:01:f7:e7:71:94:d9:26:dc:ce:
                    06:63:3a:70:49:9f:2d:bf:c9:e4:9d:f4:00:0b:cf:
                    55:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:2A:BC:AC:FF:C1:E6:78:5E:6C:32:5E:11:8A:93:1B:A7:DC:B7:89
            X509v3 Authority Key Identifier:
                keyid:FD:3A:DF:76:72:F8:27:79:58:2E:7F:14:AA:92:9F:44:70:4A:BE:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113435/6F0494C42FDE11ECAB5B1268C4F9AE02/_TrfdnL4J3lYLn8UqpKfRHBKvg0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TrfdnL4J3lYLn8UqpKfRHBKvg0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113435/6F0494C42FDE11ECAB5B1268C4F9AE02/5C7E38002FE311EC9A82B173C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.113.240.0/21
                  45.113.244.0/22
                  103.53.200.0/22
                  121.200.208.0/21
                  202.90.48.0/21
                IPv6:
                  2403:3600::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:8c:17:5e:6f:43:3f:81:68:b0:3f:0b:cb:dd:0b:15:57:e1:
         14:96:25:5f:38:47:3b:9a:ef:84:b7:d5:be:e4:8d:b1:9b:12:
         0d:a4:0d:19:d8:e9:11:61:a8:b1:b1:98:e2:da:72:b8:29:e5:
         2b:ec:3b:88:26:26:fb:f9:23:34:07:95:40:1c:48:76:f1:0b:
         16:ad:7a:3f:36:0c:48:35:75:9a:28:f0:48:1b:51:e2:2b:7d:
         f2:68:65:e1:d3:66:9e:7c:51:32:92:63:cf:b3:b2:0e:d6:d0:
         4e:a8:a8:04:d2:a2:07:27:da:4d:26:53:e1:5a:36:5c:02:8e:
         ec:cc:8d:b9:f4:b6:47:f6:f1:e5:97:c5:e1:a0:19:25:06:81:
         4b:cd:94:bd:43:13:e6:09:c5:1e:a5:52:12:6c:ce:65:a3:b9:
         4a:d0:63:48:ee:ae:87:ee:e2:84:80:30:92:f0:f4:8b:ae:5d:
         6f:6a:0e:da:c6:2b:f6:30:3f:6f:64:9e:a3:a8:5c:24:87:77:
         43:58:f1:2d:fc:d8:66:dd:00:b5:e4:f7:27:af:b1:3c:40:0a:
         dc:2b:1f:f3:60:94:0b:c4:f4:80:25:9f:9e:75:8d:48:93:84:
         4b:3a:24:d3:c0:5f:bd:62:48:2b:ce:48:4b:05:64:81:2d:86:
         3e:b4:95:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----