Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914993E/3F216D4C6C1111E9A55A8D5FC4F9AE02/9A3A9F4ED12E11EB879C5D76C4F9AE02.roa
File:                     9A3A9F4ED12E11EB879C5D76C4F9AE02.roa (raw, json)
Hash identifier:          sSTlDl/mnwB0NWwdqU3VFoV3rzQ+GFLWfZ4B9Cp00yc=
Subject key identifier:   EE:BF:93:9C:AD:D0:C4:4A:1D:67:B9:3C:35:97:51:B7:51:AE:55:87
Certificate issuer:       /CN=A914993E/serialNumber=3CF4A743B862F475E9221F48D23B9E8153D58F62
Certificate serial:       09E9
Authority key identifier: 3C:F4:A7:43:B8:62:F4:75:E9:22:1F:48:D2:3B:9E:81:53:D5:8F:62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPSnQ7hi9HXpIh9I0juegVPVj2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914993E/3F216D4C6C1111E9A55A8D5FC4F9AE02/9A3A9F4ED12E11EB879C5D76C4F9AE02.roa
Signing time:             Sat 19 Jun 2021 18:46:05 +0000
ROA not before:           Sat 19 Jun 2021 18:46:05 +0000
ROA not after:            Fri 01 Jul 2022 00:00:00 +0000
asID:                     136433
IP address blocks:        103.87.232.0/23 maxlen: 23
                          103.87.232.0/24 maxlen: 24
                          103.87.233.0/24 maxlen: 24
                          2400:da40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2537 (0x9e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914993E/serialNumber=3CF4A743B862F475E9221F48D23B9E8153D58F62
        Validity
            Not Before: Jun 19 18:46:05 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=60ce3b6d-4524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:de:f4:c4:a8:4f:62:32:ca:79:a2:c7:04:2e:
                    68:c6:45:6e:c7:93:1f:90:94:0b:5a:6f:75:3f:b7:
                    2a:51:6e:f5:3a:f2:6f:5d:2a:77:d5:c6:f0:bc:bf:
                    39:2b:3f:86:f9:d1:fc:94:5b:17:7f:f5:43:74:c4:
                    dc:9c:4f:1a:72:3d:ad:67:b4:ae:3e:37:e8:ee:d7:
                    c5:8c:6b:c2:7b:14:ab:f2:b9:1e:d6:d1:e7:cf:c9:
                    1e:0f:85:60:16:53:b7:25:9b:0a:b9:ea:eb:6b:84:
                    91:29:dc:a5:18:75:e8:61:66:0b:75:37:cc:76:bd:
                    d8:71:9f:c5:75:db:67:17:fe:6c:20:a9:60:2b:72:
                    de:c4:81:1e:a7:2a:77:41:ca:cc:f3:1f:1e:ec:fd:
                    a6:0f:6f:21:24:7f:68:82:82:76:25:0a:2b:07:d4:
                    76:e1:54:87:72:c1:8a:b8:e4:74:34:15:fa:e0:dc:
                    c6:6d:7d:c6:04:df:c8:40:71:46:ee:dd:c7:23:94:
                    dd:d9:b2:e6:e0:8d:ae:c6:8f:c5:92:9a:3c:28:6e:
                    c6:e1:f1:49:68:29:b1:bd:ca:21:e2:37:b6:2c:61:
                    0e:18:ca:eb:39:b1:ac:48:98:98:d9:f7:7c:39:3e:
                    cf:a6:cd:6e:f7:ee:0d:1a:29:d3:3e:68:45:bf:5c:
                    4d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BF:93:9C:AD:D0:C4:4A:1D:67:B9:3C:35:97:51:B7:51:AE:55:87
            X509v3 Authority Key Identifier:
                keyid:3C:F4:A7:43:B8:62:F4:75:E9:22:1F:48:D2:3B:9E:81:53:D5:8F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914993E/3F216D4C6C1111E9A55A8D5FC4F9AE02/PPSnQ7hi9HXpIh9I0juegVPVj2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPSnQ7hi9HXpIh9I0juegVPVj2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914993E/3F216D4C6C1111E9A55A8D5FC4F9AE02/9A3A9F4ED12E11EB879C5D76C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.232.0/23
                IPv6:
                  2400:da40::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:01:83:43:d1:fc:b5:27:6e:7a:1f:f5:62:cc:c3:88:55:5e:
         7e:d3:eb:02:9b:52:ad:ee:10:ad:6b:1c:e9:80:92:96:8a:00:
         43:af:cc:60:a9:2e:38:30:6e:2c:03:9e:20:17:58:c1:8f:84:
         9f:e6:4b:91:d6:34:ac:16:b1:32:e8:8c:44:9b:80:10:83:e1:
         43:0b:70:03:f6:5f:e5:42:9b:ab:eb:33:ff:37:5c:44:91:f8:
         b1:e5:26:00:aa:d2:61:94:e6:3b:10:f4:62:88:57:2b:6e:9d:
         71:b9:20:12:7c:88:34:1e:ea:e5:e6:5d:b1:2d:a4:5d:19:e9:
         d7:90:47:3c:85:bc:05:94:32:07:a9:a2:94:89:31:ff:20:8c:
         c8:7e:0a:88:41:e5:ce:08:e3:bf:ba:4a:30:cc:69:fa:44:e0:
         91:5c:69:29:17:cb:25:77:f6:41:32:e1:81:0e:1e:28:63:d8:
         ef:eb:31:92:67:16:a7:19:72:9e:77:dc:21:92:63:0e:1e:6d:
         3a:83:64:2c:b9:19:11:64:33:cc:ac:09:af:93:52:c3:07:86:
         dc:5a:21:0e:e5:75:f2:f4:55:a3:2f:32:d4:56:f2:f9:8b:4c:
         ea:57:ed:9b:8f:f6:14:9d:ea:8d:af:e4:88:d9:a2:78:ab:36:
         c4:92:21:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----