Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150E4D/49715B7A337E11EEA310AF83C4F9AE02/0AE87DA0391111EEB9887D70C4F9AE02.roa
File:                     0AE87DA0391111EEB9887D70C4F9AE02.roa (raw, json)
Hash identifier:          1WzmgeidE0QIDju6RJn7KYucgk+kUfQgotmVjXVTrhw=
Subject key identifier:   39:92:11:43:35:01:39:3F:F3:0A:94:2D:20:D7:11:18:E7:6B:99:D9
Certificate issuer:       /CN=A9150E4D/serialNumber=C08C543BC8CA91962166AF12730CEE4BE5B2B6FD
Certificate serial:       06
Authority key identifier: C0:8C:54:3B:C8:CA:91:96:21:66:AF:12:73:0C:EE:4B:E5:B2:B6:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wIxUO8jKkZYhZq8ScwzuS-Wytv0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150E4D/49715B7A337E11EEA310AF83C4F9AE02/0AE87DA0391111EEB9887D70C4F9AE02.roa
Signing time:             Sat 12 Aug 2023 13:06:26 +0000
ROA not before:           Sat 12 Aug 2023 13:06:26 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     147020
IP address blocks:        103.248.50.0/23 maxlen: 24
                          2401:2060::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150E4D/serialNumber=C08C543BC8CA91962166AF12730CEE4BE5B2B6FD
        Validity
            Not Before: Aug 12 13:06:26 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=64d783d1-94e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:eb:bc:cc:49:8c:2d:eb:8f:b6:11:c3:93:27:
                    f8:d0:5d:04:ab:0e:25:ae:7b:57:ab:d7:13:87:7a:
                    f9:7b:64:d3:13:c5:8e:0e:5a:22:54:68:e4:ab:87:
                    6c:07:59:8b:32:40:55:f5:b5:de:54:63:ff:4f:a4:
                    4d:be:3f:39:5e:ea:4d:e3:e8:bb:3a:d1:60:d4:6c:
                    ef:4d:39:95:86:dc:c3:69:a7:ee:a5:de:7b:46:53:
                    8e:39:72:e0:a0:06:0b:2c:2e:5e:8c:2a:6a:5b:9e:
                    33:0a:d8:cb:4d:b3:e2:e8:fa:6b:45:cb:a6:a8:e4:
                    8d:af:01:5f:e9:f3:f1:d5:97:9a:dc:29:2c:59:ba:
                    8d:d0:22:ee:9d:cf:ef:d4:dd:a3:fd:11:4f:65:3d:
                    0e:dd:c1:7f:4d:72:10:da:30:15:17:da:be:18:a2:
                    bf:f9:88:a5:87:ef:22:28:bd:cc:8f:63:43:81:ab:
                    4c:b5:d4:17:33:10:3c:ca:ef:bc:10:00:f6:50:ad:
                    3d:07:e6:93:cc:44:1f:7b:cd:2e:b4:52:10:1a:0a:
                    0c:76:21:77:23:77:7d:c7:eb:c7:fd:73:24:be:5f:
                    20:c2:fe:d3:2c:28:7b:84:50:14:3c:3c:a0:b1:82:
                    24:0b:0b:a5:f3:a0:3b:02:99:23:98:4c:07:26:5d:
                    c6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:92:11:43:35:01:39:3F:F3:0A:94:2D:20:D7:11:18:E7:6B:99:D9
            X509v3 Authority Key Identifier:
                keyid:C0:8C:54:3B:C8:CA:91:96:21:66:AF:12:73:0C:EE:4B:E5:B2:B6:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150E4D/49715B7A337E11EEA310AF83C4F9AE02/wIxUO8jKkZYhZq8ScwzuS-Wytv0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wIxUO8jKkZYhZq8ScwzuS-Wytv0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150E4D/49715B7A337E11EEA310AF83C4F9AE02/0AE87DA0391111EEB9887D70C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.50.0/23
                IPv6:
                  2401:2060::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:18:9a:a9:6d:b8:14:7c:a1:04:ca:e7:45:c0:eb:da:a0:a0:
         83:6a:47:71:1e:e6:9e:88:e9:25:d7:59:c7:40:c7:2a:e7:02:
         11:eb:13:33:69:f6:ed:e2:76:fb:74:7e:ba:06:62:d4:5e:4c:
         49:4d:cc:4b:fc:b3:25:d7:2a:9e:43:76:fb:b1:6e:4c:f5:58:
         9a:34:42:c2:c4:85:87:3a:35:49:ed:77:cb:4d:df:d0:5e:14:
         21:3b:a4:73:de:e9:18:af:23:ca:d0:99:b2:00:bd:0f:d3:b5:
         23:47:c1:cb:8b:77:b8:90:b5:85:82:e3:cd:b6:3d:52:34:81:
         d6:62:9e:df:d1:a8:d1:7d:5d:3d:97:d5:f2:fe:63:9b:0e:b9:
         ea:f1:23:e9:cb:d7:53:4a:68:67:85:a6:c9:10:99:75:56:d5:
         e7:52:46:50:d6:66:bc:8b:6e:1e:09:cd:d0:27:e3:ca:a6:95:
         c6:b3:0b:67:d4:88:3b:ae:58:1e:0c:60:13:01:9c:18:14:87:
         41:c8:0f:a2:12:72:99:52:5d:4c:f7:c0:53:2b:d0:3f:2d:a7:
         18:22:aa:3d:c8:72:a9:ef:d7:31:8f:a7:58:2d:df:ca:31:c4:
         06:fb:a4:8f:05:8d:da:fd:59:a4:d6:69:9b:de:2f:d8:0d:7c:
         14:d2:e7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----