Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BC84/903C80A649B711EB8372D95BC4F9AE02/9E9298109EA311ECAA177074C4F9AE02.roa
File:                     9E9298109EA311ECAA177074C4F9AE02.roa (raw, json)
Hash identifier:          GdNJ22m55YHbpPjjH1yU8Yo18LkMhOF3ACwq8hpY95Q=
Subject key identifier:   A3:5E:7A:37:1B:AA:C3:58:25:30:DE:A7:7C:4D:AC:62:B6:97:36:32
Certificate issuer:       /CN=A917BC84/serialNumber=81B6DD1FB8AEBAD864D02ADC40FF270C78B4A59F
Certificate serial:       0362
Authority key identifier: 81:B6:DD:1F:B8:AE:BA:D8:64:D0:2A:DC:40:FF:27:0C:78:B4:A5:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gbbdH7iuuthk0CrcQP8nDHi0pZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BC84/903C80A649B711EB8372D95BC4F9AE02/9E9298109EA311ECAA177074C4F9AE02.roa
Signing time:             Tue 08 Mar 2022 05:50:12 +0000
ROA not before:           Tue 08 Mar 2022 05:50:12 +0000
ROA not after:            Thu 02 Mar 2023 00:00:00 +0000
asID:                     54994
IP address blocks:        103.146.6.0/24 maxlen: 24
                          103.146.7.0/24 maxlen: 24
                          2405:8f40::/32 maxlen: 32
                          2405:8f40::/48 maxlen: 48
                          2405:8f40:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 866 (0x362)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BC84/serialNumber=81B6DD1FB8AEBAD864D02ADC40FF270C78B4A59F
        Validity
            Not Before: Mar  8 05:50:12 2022 GMT
            Not After : Mar  2 00:00:00 2023 GMT
        Subject: CN=6226ee94-95e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:29:e9:c5:28:86:88:1b:05:85:c8:01:ab:12:
                    8f:f9:01:41:51:78:92:ed:43:eb:1a:0a:9c:49:08:
                    5c:ca:5c:af:c2:27:48:79:ad:84:45:83:d9:fb:da:
                    7b:25:f9:85:ea:31:d1:32:c6:1b:37:01:0c:74:a8:
                    f4:a7:70:40:23:9f:78:40:04:5a:ef:28:67:1d:f4:
                    62:70:42:2f:42:6c:de:bc:6f:aa:07:df:49:da:e9:
                    e9:0b:ed:c6:e0:da:f1:88:1c:f4:99:8f:94:04:02:
                    ee:06:8b:b9:fe:5c:fd:04:f6:dc:da:87:1a:52:b2:
                    f4:4b:e4:a0:60:44:78:99:8a:9e:0d:a3:ea:61:b2:
                    eb:e8:da:dd:db:64:1a:db:7b:74:d9:72:d6:57:bc:
                    7d:58:f2:3a:d1:de:2c:01:4d:7b:90:98:77:95:04:
                    ee:5f:f0:ca:b6:7a:a9:c8:a6:6b:1c:2a:9a:b2:cb:
                    f6:d7:38:07:aa:a8:86:24:62:49:30:21:71:98:77:
                    25:c8:3b:53:23:b5:53:11:1a:a5:5a:b3:c7:d3:70:
                    44:fe:63:4e:66:a9:46:82:e2:dd:26:3b:8a:41:00:
                    c7:2a:27:c8:b0:12:cb:a6:a7:f2:cb:a2:87:c9:09:
                    c4:e2:a3:cd:d5:c0:6c:9e:3b:41:7f:f8:20:16:30:
                    c5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:5E:7A:37:1B:AA:C3:58:25:30:DE:A7:7C:4D:AC:62:B6:97:36:32
            X509v3 Authority Key Identifier:
                keyid:81:B6:DD:1F:B8:AE:BA:D8:64:D0:2A:DC:40:FF:27:0C:78:B4:A5:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BC84/903C80A649B711EB8372D95BC4F9AE02/gbbdH7iuuthk0CrcQP8nDHi0pZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gbbdH7iuuthk0CrcQP8nDHi0pZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BC84/903C80A649B711EB8372D95BC4F9AE02/9E9298109EA311ECAA177074C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.6.0/23
                IPv6:
                  2405:8f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:7f:9b:92:62:71:a9:68:6d:67:38:cf:c8:6f:d7:8b:dd:d8:
         5e:65:c1:14:91:58:cf:17:54:71:2a:b2:8d:1b:76:ea:a5:af:
         79:aa:18:9c:6d:cd:6c:da:68:72:14:43:7b:80:d0:44:e7:91:
         44:6f:cb:18:6d:07:b2:42:c5:ff:cf:0b:4a:5c:21:fc:ea:68:
         ca:59:89:4f:54:13:c7:61:ed:a2:02:d5:15:00:f8:39:f1:62:
         83:ef:ff:f6:b5:90:63:f2:fe:d3:b7:c4:54:32:77:86:48:76:
         7e:be:ea:2c:0c:33:0f:8b:85:81:7a:2a:bd:d4:7d:49:78:69:
         7a:1f:7b:67:c0:52:5f:dc:24:f8:f8:f4:fa:b9:60:de:25:e2:
         09:81:80:97:f7:94:31:ca:03:8d:10:4f:d2:e0:e0:71:7e:63:
         23:49:eb:36:bb:55:bd:25:25:86:c6:f3:cd:84:f2:f5:32:f4:
         a8:53:14:2d:1e:94:93:ce:7d:08:1e:53:da:86:27:b8:e5:9a:
         cd:0e:cc:48:2b:f0:5f:7f:54:0f:ad:41:9f:0e:f7:72:e2:be:
         f9:b0:9f:f9:c4:9a:b5:16:b2:b0:26:6d:68:81:e3:b0:aa:8f:
         4f:80:22:39:90:fa:34:d1:db:4c:16:4a:43:a8:4d:e6:cc:d9:
         7b:20:98:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----