Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160744/8916DDAED1F511EC822F0E70C4F9AE02/16FD955ED50211EC916B8369C4F9AE02.roa
File:                     16FD955ED50211EC916B8369C4F9AE02.roa (raw, json)
Hash identifier:          cxcsVJmaVNgMWEN65VLFbyEtPVAwQPhwKepBh+UQCgo=
Subject key identifier:   1F:8B:0F:7C:BC:91:A1:F5:4B:26:72:4C:AB:20:49:D0:CE:90:9A:B8
Certificate issuer:       /CN=A9160744/serialNumber=8905B2119A20B38CA1266821D3ACC94B4B284F12
Certificate serial:       10
Authority key identifier: 89:05:B2:11:9A:20:B3:8C:A1:26:68:21:D3:AC:C9:4B:4B:28:4F:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQWyEZogs4yhJmgh06zJS0soTxI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160744/8916DDAED1F511EC822F0E70C4F9AE02/16FD955ED50211EC916B8369C4F9AE02.roa
Signing time:             Mon 16 May 2022 10:22:30 +0000
ROA not before:           Mon 16 May 2022 10:22:30 +0000
ROA not after:            Thu 31 Aug 2023 00:00:00 +0000
asID:                     16509
IP address blocks:        103.187.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160744/serialNumber=8905B2119A20B38CA1266821D3ACC94B4B284F12
        Validity
            Not Before: May 16 10:22:30 2022 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=628225e5-f95d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ee:1b:72:48:36:c8:6a:f2:64:cc:ad:c9:a6:
                    f9:60:b4:95:5d:fd:7e:88:b2:24:e7:2d:8c:7d:5c:
                    a7:71:95:a9:9b:64:c7:18:c7:ef:b7:05:17:78:ec:
                    43:41:26:4b:0d:f9:c4:b1:83:53:b8:5b:ef:16:1d:
                    77:ec:f4:5a:17:47:69:ad:ac:01:1c:4c:81:ea:11:
                    c3:a4:a6:a2:ed:67:03:ea:23:33:49:6e:9d:99:e8:
                    dc:e8:88:f7:38:8f:88:83:84:9e:85:fd:c4:ea:cc:
                    2c:c1:b4:16:e4:d3:e6:6e:4d:b1:ee:01:1c:d3:b0:
                    83:64:89:c2:4b:96:cf:bc:8e:c5:28:e8:1f:5d:b9:
                    21:0f:b9:ec:84:42:d3:d1:61:9b:c4:0b:ad:92:41:
                    2d:51:25:60:e9:07:6c:f1:64:36:47:26:7b:53:02:
                    16:1e:84:f4:43:66:54:e3:14:5b:a4:5a:93:33:dd:
                    d9:bb:38:89:54:3b:88:9c:44:e2:63:df:12:46:9a:
                    16:99:16:3b:1b:f7:15:96:ab:2b:0b:65:0d:d1:16:
                    8d:e3:ec:ec:6a:0c:9a:bd:10:6d:e2:93:5f:10:b0:
                    79:0e:b9:61:d4:e4:05:91:20:f3:09:bb:88:38:35:
                    16:93:e6:9d:e1:35:9e:57:26:84:49:47:7d:0a:59:
                    b4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8B:0F:7C:BC:91:A1:F5:4B:26:72:4C:AB:20:49:D0:CE:90:9A:B8
            X509v3 Authority Key Identifier:
                keyid:89:05:B2:11:9A:20:B3:8C:A1:26:68:21:D3:AC:C9:4B:4B:28:4F:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160744/8916DDAED1F511EC822F0E70C4F9AE02/iQWyEZogs4yhJmgh06zJS0soTxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQWyEZogs4yhJmgh06zJS0soTxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160744/8916DDAED1F511EC822F0E70C4F9AE02/16FD955ED50211EC916B8369C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:b0:01:6e:83:0c:d2:c1:05:e2:28:4f:22:1f:c9:21:89:2b:
         34:4f:9a:d2:e9:91:d6:83:c2:77:0b:bf:0d:42:a2:d6:19:bc:
         5f:cb:7c:e9:ae:96:f5:3b:9a:42:2f:7d:5f:ad:f7:fa:46:18:
         0c:ab:5f:a7:60:ec:a6:ec:9c:62:f3:1c:39:e7:29:a9:80:c8:
         93:89:43:c6:0a:b1:a8:0f:88:76:64:77:93:07:e7:48:fd:8d:
         a6:42:0b:a1:51:bf:c7:a7:a6:94:a2:b3:b2:df:ce:03:23:21:
         aa:cf:f8:c3:6c:31:41:73:66:1a:da:53:22:65:e8:51:8b:a8:
         cc:b7:4a:0f:2e:97:df:c5:a2:d0:86:08:f9:cd:89:ba:3c:27:
         f5:4f:f9:e4:0e:c7:c1:92:60:bd:52:2e:2b:50:af:90:8e:8e:
         23:e2:4e:32:78:57:c2:15:5f:f9:1f:7d:2b:25:0b:92:30:ea:
         a8:3c:55:ee:3c:21:e1:d6:bb:8b:36:1f:72:68:98:cf:8b:47:
         9f:a2:4d:fe:d9:fc:a4:7e:a0:2d:37:d2:2b:88:77:48:89:56:
         c3:94:17:72:b7:80:ec:8d:9a:b3:5f:f5:d3:58:bc:11:ef:a9:
         5e:67:a1:f7:cd:1c:3e:33:f8:d7:56:af:2f:34:60:46:ff:da:
         8d:10:ae:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----