Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915AEFC/BF7C80E41AE611EDA1AE8340C4F9AE02/FDF7A30E1AEA11EDBA62BA4AC4F9AE02.roa
File:                     FDF7A30E1AEA11EDBA62BA4AC4F9AE02.roa (raw, json)
Hash identifier:          PPxp6nKvOdjV8qdDcCycvz47YLuu9YDXhcRA3150LRU=
Subject key identifier:   8B:E4:12:B5:90:03:68:85:B8:B6:A2:1E:A0:7C:3E:7E:FD:7E:5C:73
Certificate issuer:       /CN=A915AEFC/serialNumber=DCCE24A474C8F9ECF2A834F1569DD023287A133F
Certificate serial:       02
Authority key identifier: DC:CE:24:A4:74:C8:F9:EC:F2:A8:34:F1:56:9D:D0:23:28:7A:13:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M4kpHTI-ezyqDTxVp3QIyh6Ez8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915AEFC/BF7C80E41AE611EDA1AE8340C4F9AE02/FDF7A30E1AEA11EDBA62BA4AC4F9AE02.roa
Signing time:             Sat 13 Aug 2022 09:33:30 +0000
ROA not before:           Sat 13 Aug 2022 09:33:30 +0000
ROA not after:            Tue 31 Oct 2023 00:00:00 +0000
asID:                     150127
IP address blocks:        103.191.96.0/23 maxlen: 23
                          2400:95a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915AEFC/serialNumber=DCCE24A474C8F9ECF2A834F1569DD023287A133F
        Validity
            Not Before: Aug 13 09:33:30 2022 GMT
            Not After : Oct 31 00:00:00 2023 GMT
        Subject: CN=62f76fea-0b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1f:34:b6:45:34:f9:eb:0b:62:7d:8b:c6:de:
                    2f:30:8d:68:62:44:a2:f7:8e:40:8e:11:47:cc:58:
                    83:28:00:51:68:d0:78:41:e9:43:67:e1:b6:b1:06:
                    37:13:dc:e8:ff:3e:a1:f4:5a:26:aa:67:63:d5:f9:
                    b2:b2:0c:c9:36:f1:60:2e:2a:51:ad:07:4a:7c:0b:
                    4b:5a:42:db:7d:9f:23:0c:88:e8:49:b2:8b:0c:36:
                    d4:40:43:ad:ee:93:81:85:72:79:e8:86:1c:ca:2f:
                    2f:de:40:c7:1f:c0:73:bc:4d:fc:3e:8f:b7:ee:eb:
                    46:c1:c3:51:a1:3f:52:75:f6:8e:f8:67:21:5b:95:
                    22:78:9a:c1:13:43:24:7d:58:78:02:a3:1a:e3:b0:
                    0d:a1:9f:d1:45:fc:6a:42:a6:61:44:a7:18:e5:03:
                    68:ac:5a:4c:17:64:7f:bc:80:d5:47:d4:0f:d6:ae:
                    16:48:e5:9c:84:78:de:27:c3:8f:f8:1f:6a:e4:7b:
                    b1:24:b4:04:f7:b5:df:27:38:80:40:a8:4e:93:1a:
                    b0:be:f4:bd:5d:0b:0a:cc:e3:b7:c7:97:eb:cf:dd:
                    6a:c3:ce:9f:1e:5e:7a:b1:75:ff:8f:ef:15:12:ee:
                    b5:23:d9:41:d7:88:2f:76:dd:a8:a8:80:14:1c:2f:
                    35:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E4:12:B5:90:03:68:85:B8:B6:A2:1E:A0:7C:3E:7E:FD:7E:5C:73
            X509v3 Authority Key Identifier:
                keyid:DC:CE:24:A4:74:C8:F9:EC:F2:A8:34:F1:56:9D:D0:23:28:7A:13:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915AEFC/BF7C80E41AE611EDA1AE8340C4F9AE02/3M4kpHTI-ezyqDTxVp3QIyh6Ez8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M4kpHTI-ezyqDTxVp3QIyh6Ez8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AEFC/BF7C80E41AE611EDA1AE8340C4F9AE02/FDF7A30E1AEA11EDBA62BA4AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.96.0/23
                IPv6:
                  2400:95a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c2:86:ed:bb:28:df:60:1c:50:08:bf:94:54:f2:68:f3:0a:ed:
         48:be:d6:d5:2e:16:12:1a:50:e9:6d:0e:d3:ae:66:16:ec:39:
         0b:f9:78:a0:e6:b4:12:7b:cd:ec:96:bd:b9:69:6f:cd:33:e4:
         21:c0:cb:57:51:94:32:ee:6a:c0:33:8f:e5:19:30:63:37:0c:
         c7:1d:f6:2c:be:f5:4d:3d:b6:ff:c1:c5:cc:1c:b4:15:52:26:
         b4:00:94:8f:20:63:81:79:03:22:e6:c6:df:60:56:aa:ee:d5:
         ef:1d:27:89:27:51:83:42:2f:45:6b:6b:ab:fc:39:57:c9:b7:
         6b:8c:91:ba:30:a4:9f:68:87:e7:ce:31:51:b5:9e:5c:c1:89:
         5d:d2:66:21:cb:6f:4a:cb:d2:f8:d4:23:c6:bb:dd:0d:fd:62:
         53:c0:46:70:97:c9:60:60:15:5f:42:fe:32:a3:5a:be:b9:9b:
         87:b7:ff:f9:92:d2:80:f0:49:ca:17:bf:bc:3f:28:ef:b0:65:
         4f:f3:12:c4:36:c4:5f:6e:21:d1:de:7d:14:15:31:21:6b:bf:
         a4:1b:3a:22:ca:4b:f0:8b:36:5f:95:98:f8:77:9a:0e:45:b2:
         4f:08:b5:23:7e:32:09:9e:42:70:83:b3:8a:89:62:32:13:cc:
         3f:65:f5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----