Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/60A09A1C4A5011ED92D3D957C4F9AE02.roa
File:                     60A09A1C4A5011ED92D3D957C4F9AE02.roa (raw, json)
Hash identifier:          iZ0cXt8bSo58hDTfxZb8+hUAMKae31/JOmPCZEqthwk=
Subject key identifier:   50:2C:86:BF:40:13:8B:DB:79:2F:1B:79:C4:BD:39:D8:2F:56:8E:35
Certificate issuer:       /CN=A914FA25/serialNumber=9E0EEEF7FC8804E0437E899DED31988B3C602D02
Certificate serial:       0A5B
Authority key identifier: 9E:0E:EE:F7:FC:88:04:E0:43:7E:89:9D:ED:31:98:8B:3C:60:2D:02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ng7u9_yIBOBDfomd7TGYizxgLQI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/60A09A1C4A5011ED92D3D957C4F9AE02.roa
Signing time:             Fri 28 Apr 2023 21:17:40 +0000
ROA not before:           Fri 28 Apr 2023 21:17:40 +0000
ROA not after:            Mon 28 Aug 2023 00:00:00 +0000
asID:                     147303
IP address blocks:        103.110.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2651 (0xa5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914FA25/serialNumber=9E0EEEF7FC8804E0437E899DED31988B3C602D02
        Validity
            Not Before: Apr 28 21:17:40 2023 GMT
            Not After : Aug 28 00:00:00 2023 GMT
        Subject: CN=644c37f4-6b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bc:1c:3f:59:a5:7e:b8:a4:f3:9a:77:2b:9d:
                    f0:d2:fd:47:21:eb:ee:9d:01:20:3d:64:65:cc:ea:
                    d6:99:4b:e1:a7:a8:5e:1c:64:30:65:a7:f7:ce:2f:
                    43:48:da:cd:c3:f2:f9:92:db:fa:96:3b:81:41:58:
                    e3:29:38:00:5c:fe:0d:fb:e6:c1:6a:24:e9:88:f6:
                    7a:d5:6c:c1:bd:b8:db:c1:8e:34:0e:64:ba:7d:a7:
                    98:c8:bd:3f:20:e4:28:b8:e0:8c:10:ac:66:28:ea:
                    21:74:71:6c:01:d8:cd:94:9d:f2:69:87:32:eb:04:
                    a5:39:0e:62:5b:c0:29:61:d8:d7:3e:08:ed:ef:71:
                    d1:77:67:95:ae:a1:ad:6d:6c:72:bc:7c:4b:b0:f5:
                    54:e9:0f:5b:a7:d3:c2:84:9c:34:0b:dc:26:18:d2:
                    ff:8e:87:5a:13:76:09:69:3f:60:b5:6a:df:82:a3:
                    a9:5b:b5:48:0e:e5:b4:31:ad:06:3b:23:26:a3:7a:
                    06:1d:e2:d5:9e:a5:a6:c0:91:18:e8:89:81:cd:97:
                    bb:de:0d:05:67:70:13:81:11:a6:71:43:b7:ad:41:
                    7e:91:bf:e0:db:cb:54:15:c5:e8:9d:fe:d9:11:5d:
                    0b:04:eb:16:d8:16:cc:a8:5f:13:e3:34:01:45:61:
                    a7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:2C:86:BF:40:13:8B:DB:79:2F:1B:79:C4:BD:39:D8:2F:56:8E:35
            X509v3 Authority Key Identifier:
                keyid:9E:0E:EE:F7:FC:88:04:E0:43:7E:89:9D:ED:31:98:8B:3C:60:2D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ng7u9_yIBOBDfomd7TGYizxgLQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/60A09A1C4A5011ED92D3D957C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:7f:5e:56:05:2e:c1:13:6a:23:c5:78:7b:37:67:ba:c7:61:
         d8:fc:3d:7c:3a:bd:20:bd:4d:fe:e9:1f:4e:96:ab:81:3e:b8:
         07:72:9b:09:dc:9a:d8:a6:49:c0:f0:00:18:0b:44:6e:d7:2a:
         73:49:9f:ac:1b:79:4e:80:43:7d:90:7a:b0:b0:95:96:29:c4:
         7d:be:f5:b4:fd:ee:c8:aa:67:d5:4f:fb:5e:3e:d9:1e:00:75:
         21:30:e8:49:a1:9b:89:8c:ff:ac:ff:c1:3b:ab:56:4a:7b:99:
         2c:29:ec:af:0c:0d:ec:c4:44:fc:34:4e:8f:a6:d1:ae:be:1e:
         2b:68:2c:1c:a1:08:05:14:3d:ef:4d:f8:ba:18:3e:27:49:81:
         f7:44:6c:da:f6:c0:c2:b4:bd:43:8e:fd:39:54:94:93:d0:61:
         23:4c:f3:e7:51:45:08:8e:51:24:95:c4:e6:c6:1f:c8:6d:5a:
         0f:54:56:62:0c:6c:51:30:54:1a:dc:67:f6:26:bd:8d:38:47:
         fd:e2:58:1f:fa:f2:0c:90:5a:17:7b:d9:09:c6:5e:00:a5:a3:
         97:21:f1:5e:af:23:27:b8:3f:d0:33:50:32:97:63:82:a9:0d:
         5a:96:67:85:a3:fc:3c:98:31:8f:8e:58:5a:a8:4c:23:90:a4:
         e4:be:43:fe
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICClswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEZBMjUxMTAvBgNVBAUTKDlFMEVFRUY3RkM4ODA0RTA0MzdFODk5REVEMzE5ODhC
M0M2MDJEMDIwHhcNMjMwNDI4MjExNzQwWhcNMjMwODI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NDRjMzdmNC02YjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvbwcP1mlfrik85p3K53w0v1HIevunQEgPWRlzOrWmUvhp6heHGQwZaf3zi9D
SNrNw/L5ktv6ljuBQVjjKTgAXP4N++bBaiTpiPZ61WzBvbjbwY40DmS6faeYyL0/
IOQouOCMEKxmKOohdHFsAdjNlJ3yaYcy6wSlOQ5iW8ApYdjXPgjt73HRd2eVrqGt
bWxyvHxLsPVU6Q9bp9PChJw0C9wmGNL/jodaE3YJaT9gtWrfgqOpW7VIDuW0Ma0G
OyMmo3oGHeLVnqWmwJEY6ImBzZe73g0FZ3ATgRGmcUO3rUF+kb/g28tUFcXonf7Z
EV0LBOsW2BbMqF8T4zQBRWGnXQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFAshr9A
E4vbeS8becS9OdgvVo41MB8GA1UdIwQYMBaAFJ4O7vf8iATgQ36Jne0xmIs8YC0C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkEyNS8yQkJDQkNBQTFE
QUMxMUVBQUY0QTM3NjNDNEY5QUUwMi9uZzd1OV95SUJPQkRmb21kN1RHWWl6eGdM
UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25nN3U5X3lJQk9CRGZvbWQ3VEdZaXp4Z0xRSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEZBMjUvMkJCQ0JDQUExREFDMTFFQUFGNEEzNzYzQzRGOUFFMDIvNjBBMDlBMUM0
QTUwMTFFRDkyRDNEOTU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnbqMwDQYJKoZIhvcNAQELBQADggEBAE5/XlYFLsETaiPF
eHs3Z7rHYdj8PXw6vSC9Tf7pH06Wq4E+uAdymwncmtimScDwABgLRG7XKnNJn6wb
eU6AQ32QerCwlZYpxH2+9bT97siqZ9VP+14+2R4AdSEw6Emhm4mM/6z/wTurVkp7
mSwp7K8MDezERPw0To+m0a6+HitoLByhCAUUPe9N+LoYPidJgfdEbNr2wMK0vUOO
/TlUlJPQYSNM8+dRRQiOUSSVxObGH8htWg9UVmIMbFEwVBrcZ/YmvY04R/3iWB/6
8gyQWhd72QnGXgClo5ch8V6vIye4P9AzUDKXY4KpDVqWZ4Wj/DyYMY+OWFqoTCOQ
pOS+Q/4=
-----END CERTIFICATE-----