Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BC03/AB66351EA7ED11EA91DCC566C4F9AE02/34336C38A80011EAB55F6323C4F9AE02.roa
File:                     34336C38A80011EAB55F6323C4F9AE02.roa (raw, json)
Hash identifier:          kvz2RpOBRbYRLqIoxkRyh6fDHBoY3it2eSKOlZotvXw=
Subject key identifier:   73:3B:87:F8:15:FD:EE:1B:1C:38:C7:6F:EA:72:E5:7C:8F:93:56:15
Certificate issuer:       /CN=A917BC03/serialNumber=167D9E47FD35B229D323EECBEC0A514EEB7C92DC
Certificate serial:       0290
Authority key identifier: 16:7D:9E:47:FD:35:B2:29:D3:23:EE:CB:EC:0A:51:4E:EB:7C:92:DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fn2eR_01sinTI-7L7ApRTut8ktw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BC03/AB66351EA7ED11EA91DCC566C4F9AE02/34336C38A80011EAB55F6323C4F9AE02.roa
Signing time:             Wed 03 Mar 2021 10:26:09 +0000
ROA not before:           Wed 03 Mar 2021 10:26:09 +0000
ROA not after:            Sun 01 May 2022 00:00:00 +0000
asID:                     135386
IP address blocks:        103.50.16.0/22 maxlen: 22
                          103.50.16.0/24 maxlen: 24
                          103.50.17.0/24 maxlen: 24
                          103.50.18.0/24 maxlen: 24
                          103.50.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 656 (0x290)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BC03/serialNumber=167D9E47FD35B229D323EECBEC0A514EEB7C92DC
        Validity
            Not Before: Mar  3 10:26:09 2021 GMT
            Not After : May  1 00:00:00 2022 GMT
        Subject: CN=603f6441-bf9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:83:c2:91:52:54:e3:b5:04:e3:aa:d9:5c:8e:
                    a8:a2:17:87:56:55:f4:52:b0:31:1c:49:06:27:92:
                    68:a2:ce:ac:42:0a:6a:a5:99:52:4c:1d:68:5d:d1:
                    62:3b:ff:49:79:be:85:19:41:ff:d9:69:c1:03:77:
                    11:57:b6:40:57:ce:29:07:8c:90:eb:4e:5f:ce:7e:
                    cb:9e:1d:ce:fc:9e:bc:4f:31:8e:95:81:db:31:17:
                    2d:5c:35:d0:53:e2:f9:ed:00:bf:1e:f8:7d:c3:52:
                    78:7f:28:cc:8e:03:d4:fb:68:83:6b:e5:8c:12:79:
                    62:ac:44:0a:0f:da:53:6b:d6:46:1a:07:44:fb:1e:
                    33:37:64:fb:5f:e2:d2:50:c5:b2:67:0f:37:c8:f6:
                    ff:11:0c:f0:69:34:d1:54:66:e9:51:03:b2:89:b7:
                    ec:d2:24:a5:51:69:31:1f:f9:0d:1d:4b:c7:43:96:
                    f7:09:3f:27:eb:03:92:e3:16:24:6f:67:04:4a:f3:
                    04:0a:f2:83:e6:4a:4d:fd:4b:34:3d:38:03:61:c8:
                    2c:88:5c:c9:6d:a9:6b:fe:bc:3c:72:c9:28:3c:80:
                    85:14:79:c9:a9:77:1e:ad:7a:3e:a0:33:89:ab:43:
                    93:45:cc:ee:48:b5:7d:22:31:b2:5a:b4:04:c0:de:
                    84:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3B:87:F8:15:FD:EE:1B:1C:38:C7:6F:EA:72:E5:7C:8F:93:56:15
            X509v3 Authority Key Identifier:
                keyid:16:7D:9E:47:FD:35:B2:29:D3:23:EE:CB:EC:0A:51:4E:EB:7C:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BC03/AB66351EA7ED11EA91DCC566C4F9AE02/Fn2eR_01sinTI-7L7ApRTut8ktw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fn2eR_01sinTI-7L7ApRTut8ktw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BC03/AB66351EA7ED11EA91DCC566C4F9AE02/34336C38A80011EAB55F6323C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.50.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:89:e8:da:26:8d:5e:93:30:0e:a3:75:74:af:31:0c:f3:09:
         13:a2:6a:9d:b2:95:01:52:58:6f:cf:f6:ce:2d:6a:8c:50:17:
         0b:6f:01:4d:29:75:e7:df:ce:03:c8:2f:f7:f2:27:e8:73:d1:
         14:54:1a:23:ba:d2:12:5a:04:ea:9e:a1:86:cb:28:31:06:de:
         64:3b:5a:9a:2a:e9:94:d0:ee:31:dc:ee:0c:bc:84:88:5f:2e:
         d7:db:e6:bf:a3:83:f0:82:c6:01:73:35:5c:4a:73:57:91:03:
         48:d5:de:76:3a:3d:e4:ed:1c:07:9e:9f:aa:3a:eb:6a:1c:6d:
         57:d4:2c:62:ff:6c:66:a6:9d:40:a2:43:61:1c:a2:d3:05:e4:
         c5:3a:12:ac:90:90:04:f6:89:53:1f:60:6f:37:82:c8:59:61:
         5d:2c:46:d0:4b:28:cb:d8:67:2c:34:20:60:69:d2:b9:2d:9b:
         a5:da:e8:d7:9e:58:ae:00:d0:f5:58:a4:81:8c:d9:6f:f4:65:
         25:28:a0:3d:53:ac:57:20:da:b6:6d:a8:46:ba:9a:c7:b5:23:
         a3:5a:2f:93:06:e6:1f:a3:30:dc:f3:b9:bb:0d:96:75:a8:b6:
         6e:fe:1a:6d:d8:29:b6:a0:c6:50:2f:f5:69:cb:ec:c3:0b:ab:
         be:5f:7a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----