Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B804/B6CFD986C09611E89FA2C627C4F9AE02/9EE30156C16611E8870CC576C4F9AE02.roa
File:                     9EE30156C16611E8870CC576C4F9AE02.roa (raw, json)
Hash identifier:          5j0Pqpg9c/p8uNpQ1kbe+jXiS2sRkhZ2v1FCmgP+i3E=
Subject key identifier:   78:9E:36:49:9B:8F:C6:65:46:2F:0B:5A:02:46:98:06:2B:83:3E:6F
Certificate issuer:       /CN=A914B804/serialNumber=7270FC026E4E49C8043A48194E98669B22EBF1AD
Certificate serial:       1010
Authority key identifier: 72:70:FC:02:6E:4E:49:C8:04:3A:48:19:4E:98:66:9B:22:EB:F1:AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnD8Am5OScgEOkgZTphmmyLr8a0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B804/B6CFD986C09611E89FA2C627C4F9AE02/9EE30156C16611E8870CC576C4F9AE02.roa
Signing time:             Tue 05 Jul 2022 06:06:15 +0000
ROA not before:           Tue 05 Jul 2022 06:06:15 +0000
ROA not after:            Thu 31 Aug 2023 00:00:00 +0000
asID:                     34768
IP address blocks:        103.116.111.0/24 maxlen: 24
                          2001:df5:5100::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4112 (0x1010)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B804/serialNumber=7270FC026E4E49C8043A48194E98669B22EBF1AD
        Validity
            Not Before: Jul  5 06:06:15 2022 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=62c3d4d7-32d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a7:6e:74:23:1f:dc:63:f5:2d:0c:a0:e9:55:
                    31:e1:da:51:0b:10:04:f8:8b:11:c7:b6:1d:48:8b:
                    4e:7c:92:5c:85:38:a9:ef:4c:c0:37:dc:aa:8e:1d:
                    29:36:a9:2e:7f:66:ce:a3:95:0a:42:55:23:e0:30:
                    95:33:ee:7d:58:30:62:e9:bb:99:c7:e9:50:39:42:
                    38:39:51:7c:27:6b:d1:94:74:42:0d:cb:8f:49:ae:
                    ae:45:86:9c:66:a9:8e:1b:29:9f:3c:5b:61:ac:0e:
                    76:0e:f6:99:04:bb:41:e5:2d:cc:c8:de:89:1d:58:
                    fe:14:09:f9:60:95:08:af:55:b7:37:49:b3:6a:18:
                    72:ab:5f:5a:bc:55:b9:fa:d4:f4:d9:c0:f2:52:6e:
                    82:b5:85:e9:ab:ea:08:9c:53:d1:79:0c:39:b1:ac:
                    08:9d:ab:89:82:25:dc:a1:b8:8f:38:8c:42:9f:a6:
                    aa:8d:12:8e:09:16:8e:2b:1f:cf:ba:39:0c:1a:e2:
                    51:e0:8b:2a:77:3c:9b:8f:ab:d5:3d:12:05:7f:59:
                    e2:59:b2:90:fa:0f:0b:bd:70:5e:50:ff:69:39:39:
                    6f:30:97:7c:74:b4:4a:53:26:f4:11:88:1d:5b:aa:
                    0c:3c:f4:24:bd:94:77:34:8d:d8:f9:bf:9a:f3:ff:
                    0a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9E:36:49:9B:8F:C6:65:46:2F:0B:5A:02:46:98:06:2B:83:3E:6F
            X509v3 Authority Key Identifier:
                keyid:72:70:FC:02:6E:4E:49:C8:04:3A:48:19:4E:98:66:9B:22:EB:F1:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B804/B6CFD986C09611E89FA2C627C4F9AE02/cnD8Am5OScgEOkgZTphmmyLr8a0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnD8Am5OScgEOkgZTphmmyLr8a0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B804/B6CFD986C09611E89FA2C627C4F9AE02/9EE30156C16611E8870CC576C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.111.0/24
                IPv6:
                  2001:df5:5100::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:3f:c2:7e:7f:d8:ad:7a:65:71:dc:73:8f:4b:cb:ea:5d:62:
         26:19:0b:8f:4f:c5:44:62:3d:7a:7d:7e:b8:27:b4:79:6f:57:
         42:ae:b1:da:81:9c:86:e6:77:1e:4d:e2:75:3c:25:24:2f:6d:
         ce:65:20:2b:46:b6:5e:67:a6:41:67:31:5a:e8:d4:dc:99:95:
         c7:6d:92:1a:19:da:6c:57:8a:84:d8:37:0f:0e:02:c2:ae:24:
         21:ce:97:1a:8c:70:bf:a8:b2:8e:52:37:fc:31:02:e9:49:6a:
         dd:cc:e7:9a:fc:a9:60:cd:f9:f7:91:2e:76:9c:9d:e4:3b:13:
         48:b6:ce:d2:06:61:e4:7c:7c:02:48:dc:5d:21:a8:3a:95:d5:
         b6:f6:d1:a5:ed:a7:72:cb:88:ff:1d:7d:e7:43:5d:e2:80:74:
         39:58:e5:73:29:7f:80:d0:57:fc:df:a5:45:28:cd:82:11:79:
         51:d6:13:5a:b7:48:a7:6c:cb:45:d7:aa:c2:7e:59:dc:1e:81:
         39:92:97:29:4d:2e:bb:a3:ae:1b:17:d2:e7:f2:a0:18:4e:e2:
         6d:1d:5e:ab:4b:d5:3f:8a:51:06:62:e5:62:30:e5:81:39:7b:
         dd:60:c0:b3:e8:f8:a7:e0:36:18:ae:2b:3f:8e:35:93:60:3c:
         6f:d2:26:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----