Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134358/6972A42A175611EBA846E00CC4F9AE02/CB82926CB94711ECA04E326DC4F9AE02.roa
File:                     CB82926CB94711ECA04E326DC4F9AE02.roa (raw, json)
Hash identifier:          b+SGDgUnsNHFRhyws8YULxfgLq2so4TrJFWJ1MEraOg=
Subject key identifier:   F3:D3:3E:04:14:1A:DD:BD:61:3A:76:A0:ED:BC:DD:3D:42:9E:97:42
Certificate issuer:       /CN=A9134358/serialNumber=AEA2980090C7B9805A035555553D1392A6AA5221
Certificate serial:       042E
Authority key identifier: AE:A2:98:00:90:C7:B9:80:5A:03:55:55:55:3D:13:92:A6:AA:52:21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqKYAJDHuYBaA1VVVT0TkqaqUiE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134358/6972A42A175611EBA846E00CC4F9AE02/CB82926CB94711ECA04E326DC4F9AE02.roa
Signing time:             Mon 11 Apr 2022 03:30:55 +0000
ROA not before:           Mon 11 Apr 2022 03:30:55 +0000
ROA not after:            Fri 30 Dec 2022 00:00:00 +0000
asID:                     138527
IP address blocks:        103.84.95.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1070 (0x42e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134358/serialNumber=AEA2980090C7B9805A035555553D1392A6AA5221
        Validity
            Not Before: Apr 11 03:30:55 2022 GMT
            Not After : Dec 30 00:00:00 2022 GMT
        Subject: CN=6253a0ef-6b0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7b:a8:08:27:3e:4d:d5:c9:d3:ad:ae:9f:6e:
                    d5:a3:f6:12:a2:9f:bb:0b:6f:60:0c:1e:4a:ea:0c:
                    48:bc:7d:59:dc:45:89:0c:80:3e:59:ad:92:73:b6:
                    1b:91:05:47:b3:90:31:35:05:95:07:c9:d3:f8:b7:
                    8c:97:8b:8f:af:9b:d0:0f:01:5d:8b:f8:10:5a:66:
                    fe:6b:55:aa:e2:39:95:43:dc:82:22:38:35:b8:93:
                    74:df:62:51:14:e6:0b:39:05:46:69:7c:91:19:98:
                    c0:24:34:3a:0f:85:8e:59:3c:13:28:0b:8d:ca:70:
                    33:02:ab:0b:70:00:0a:f7:c1:a4:2a:de:71:77:2a:
                    d9:37:6c:bb:13:32:51:ac:84:25:7e:9a:95:6c:47:
                    39:67:b9:0b:17:b6:d5:20:de:30:01:9e:1e:e3:cc:
                    11:74:15:26:ce:55:0d:a8:c6:ec:06:c9:5c:93:4a:
                    bc:82:14:29:70:8b:2a:77:c5:c6:31:d8:4c:f6:a8:
                    51:f8:0b:98:b7:a9:10:83:c0:bb:ae:3a:69:e8:ad:
                    70:91:d3:3a:b3:f4:bd:e0:c2:46:84:84:6c:20:e9:
                    08:65:af:8d:90:b7:d8:8c:0e:e7:d9:e3:62:f7:ef:
                    84:89:70:9f:0a:de:fe:2a:ab:92:2b:86:c0:cf:d7:
                    84:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D3:3E:04:14:1A:DD:BD:61:3A:76:A0:ED:BC:DD:3D:42:9E:97:42
            X509v3 Authority Key Identifier:
                keyid:AE:A2:98:00:90:C7:B9:80:5A:03:55:55:55:3D:13:92:A6:AA:52:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134358/6972A42A175611EBA846E00CC4F9AE02/rqKYAJDHuYBaA1VVVT0TkqaqUiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqKYAJDHuYBaA1VVVT0TkqaqUiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134358/6972A42A175611EBA846E00CC4F9AE02/CB82926CB94711ECA04E326DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:c7:ba:98:35:8b:10:97:e4:6e:74:fa:a9:36:82:a9:df:a1:
         35:94:5e:53:97:e4:41:b3:46:ea:7c:1c:06:be:2d:64:2e:b6:
         f2:de:26:b0:0f:ff:00:89:d2:c1:b8:15:98:46:ed:7d:a9:15:
         5a:5a:a2:48:01:3d:74:82:b0:dd:62:e5:a6:35:a1:1a:86:8b:
         cb:c2:93:8a:05:73:31:86:3f:2d:e6:bc:b3:8e:e1:e8:19:56:
         78:ba:23:26:24:a9:d7:c8:a2:d8:74:95:c2:02:6d:ce:2b:fc:
         3c:bd:d9:8f:bc:3c:7d:15:1b:20:36:f0:1a:47:d7:8f:df:c5:
         2b:b6:6d:ca:75:30:83:95:2b:93:e7:bf:e5:d9:9f:07:b7:fa:
         ab:c7:ed:6f:c8:6f:51:6f:8c:69:b7:9e:9d:83:05:4e:7a:0e:
         58:0a:3f:97:05:b9:77:f4:66:22:1e:61:1e:50:66:3b:4e:59:
         f3:28:26:2d:a0:c7:6a:00:46:e7:fd:53:b3:5b:fe:7c:01:38:
         72:1a:83:9a:81:0f:33:ea:c4:45:30:cc:38:56:cb:98:9c:06:
         d5:a2:36:4a:0d:ae:e9:85:b6:fc:07:97:69:b0:04:25:74:0b:
         a7:81:9c:e3:d6:8e:bf:d7:4a:7d:63:a2:f2:1c:7e:e9:c3:50:
         f3:e5:a0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----