Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170E90/0F1D2FBC8F7111EAB411537EC4F9AE02/7ABA123EF02911EB9ECAFF63C4F9AE02.roa
File:                     7ABA123EF02911EB9ECAFF63C4F9AE02.roa (raw, json)
Hash identifier:          4u/u0tPqC6qgjGieirLLsFstgY7FBWt5ME2tbt1trf4=
Subject key identifier:   77:F1:EE:D6:23:2B:6A:46:73:A0:DA:2D:F6:D0:C5:F3:5C:81:4B:4F
Certificate issuer:       /CN=A9170E90/serialNumber=97D65528BAB1B5814EB1064296CF48A85E5E2A4F
Certificate serial:       02
Authority key identifier: 97:D6:55:28:BA:B1:B5:81:4E:B1:06:42:96:CF:48:A8:5E:5E:2A:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9ZVKLqxtYFOsQZCls9IqF5eKk8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170E90/0F1D2FBC8F7111EAB411537EC4F9AE02/7ABA123EF02911EB9ECAFF63C4F9AE02.roa
Signing time:             Thu 29 Jul 2021 04:57:31 +0000
ROA not before:           Thu 29 Jul 2021 04:57:31 +0000
ROA not after:            Sun 01 May 2022 00:00:00 +0000
asID:                     136907
IP address blocks:        103.148.106.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170E90/serialNumber=97D65528BAB1B5814EB1064296CF48A85E5E2A4F
        Validity
            Not Before: Jul 29 04:57:31 2021 GMT
            Not After : May  1 00:00:00 2022 GMT
        Subject: CN=6102353b-65b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:67:80:74:cb:ef:a7:2b:13:74:1b:ac:e8:0f:
                    8e:59:19:ac:d8:44:af:30:85:bd:13:76:b2:fe:3c:
                    7c:0a:ca:8e:d1:e8:75:0a:60:bd:ec:c9:5e:31:fc:
                    d0:58:a3:52:eb:b2:90:f7:ec:73:5b:2d:24:4e:18:
                    34:47:40:02:02:c4:19:d3:67:05:e7:30:92:0b:c3:
                    06:cd:4c:ea:08:15:21:60:7b:f0:95:4b:c4:ae:f2:
                    18:ef:b3:6e:21:f2:5e:cd:37:f0:7d:0c:d4:b6:38:
                    dd:a0:53:f4:30:d7:1f:1d:9d:2e:0b:fd:0a:9e:f6:
                    fa:34:84:24:f5:c9:d7:a5:7c:cc:ce:92:96:6a:34:
                    c0:a5:93:b8:3c:7f:7b:e5:de:43:14:c2:6c:a3:28:
                    a1:9f:37:a2:ef:a6:1f:e9:08:6d:2d:70:b9:72:f2:
                    4c:27:af:a7:48:dc:ca:0d:52:13:32:7f:2b:00:d4:
                    38:f5:48:f5:af:96:58:a4:4e:4f:56:6c:d1:9b:8e:
                    8b:ab:46:2a:6f:8c:5c:e1:15:8f:1f:b6:60:09:9e:
                    10:7f:ce:59:9f:86:0d:32:37:3f:81:86:62:cf:ca:
                    9a:22:46:65:34:87:35:b5:43:fa:e7:81:4f:68:13:
                    0b:39:df:5d:ac:47:59:6e:08:8e:d6:ea:87:45:55:
                    56:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F1:EE:D6:23:2B:6A:46:73:A0:DA:2D:F6:D0:C5:F3:5C:81:4B:4F
            X509v3 Authority Key Identifier:
                keyid:97:D6:55:28:BA:B1:B5:81:4E:B1:06:42:96:CF:48:A8:5E:5E:2A:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170E90/0F1D2FBC8F7111EAB411537EC4F9AE02/l9ZVKLqxtYFOsQZCls9IqF5eKk8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9ZVKLqxtYFOsQZCls9IqF5eKk8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170E90/0F1D2FBC8F7111EAB411537EC4F9AE02/7ABA123EF02911EB9ECAFF63C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:cc:39:e0:ca:15:2d:55:55:08:79:45:1b:a4:b0:ec:d4:ee:
         f0:80:59:c1:53:10:9f:f4:90:a0:82:f1:fc:03:b8:70:66:0d:
         a5:49:1e:af:bf:83:bd:2e:cb:4f:f4:85:f3:c6:58:35:39:dc:
         7e:de:ca:e6:8a:d4:f4:99:ca:e2:6d:76:19:00:29:99:37:1e:
         17:4c:52:7d:7c:70:a0:68:75:42:ae:87:b0:05:aa:9f:c1:14:
         d3:df:5d:73:11:97:1b:f1:89:20:ef:7b:ed:2b:2b:cf:d3:db:
         98:16:6a:bb:8f:15:79:f4:23:e3:ee:3c:48:23:20:80:05:35:
         85:37:e9:01:ea:45:7b:d2:8e:1c:1a:a7:3a:06:c5:a7:d9:9e:
         f7:d9:7e:bb:ff:61:db:50:c9:84:cb:8f:99:2a:f1:2a:62:84:
         4f:0c:45:f0:49:72:79:57:0a:bf:a8:8b:15:9b:ef:71:54:8e:
         c9:5b:82:2d:b3:00:59:d5:d2:de:ac:ed:09:53:c0:44:19:9a:
         d0:f6:74:03:d0:0b:e2:a8:3e:63:ce:55:68:27:c7:c3:32:b3:
         c3:16:af:71:6f:9e:c3:8e:5d:27:18:ad:77:5a:ea:68:1d:d0:
         07:89:3d:8f:fc:fb:13:fa:65:a9:db:8b:c7:8e:34:61:0e:fa:
         e8:43:b4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----