Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BA94/8A9C7C76FFF811EBB6C4795EC4F9AE02/925D6D88FFFA11EB9CF87D5FC4F9AE02.roa
File:                     925D6D88FFFA11EB9CF87D5FC4F9AE02.roa (raw, json)
Hash identifier:          M+xYhujawrcbe7Vkc7YPDcj33Xb4oHrYX/g064QSH4w=
Subject key identifier:   D8:A7:BF:BF:D3:FA:8D:7E:9C:A5:9E:0F:D0:9D:C4:12:8C:07:19:90
Certificate issuer:       /CN=A918BA94/serialNumber=2EC934FB809D130BDC854C34989D149E5842C722
Certificate serial:       76
Authority key identifier: 2E:C9:34:FB:80:9D:13:0B:DC:85:4C:34:98:9D:14:9E:58:42:C7:22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lsk0-4CdEwvchUw0mJ0UnlhCxyI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BA94/8A9C7C76FFF811EBB6C4795EC4F9AE02/925D6D88FFFA11EB9CF87D5FC4F9AE02.roa
Signing time:             Fri 15 Oct 2021 03:50:51 +0000
ROA not before:           Fri 15 Oct 2021 03:50:51 +0000
ROA not after:            Fri 30 Dec 2022 00:00:00 +0000
asID:                     135026
IP address blocks:        103.100.140.0/24 maxlen: 24
                          103.100.141.0/24 maxlen: 24
                          103.100.142.0/24 maxlen: 24
                          103.100.143.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BA94/serialNumber=2EC934FB809D130BDC854C34989D149E5842C722
        Validity
            Not Before: Oct 15 03:50:51 2021 GMT
            Not After : Dec 30 00:00:00 2022 GMT
        Subject: CN=6168fa9b-dd1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a7:7f:7f:0e:f7:55:1b:24:34:42:94:99:fe:
                    bf:7a:94:81:d9:c8:cf:b5:f4:23:c1:36:ae:2a:3f:
                    70:99:57:65:b3:7a:d8:28:32:8f:ed:7f:3c:2c:98:
                    4b:c4:b2:7b:6d:76:61:7b:76:0d:b1:67:d2:73:d9:
                    a1:fd:48:3d:82:83:76:5c:40:1f:d4:a2:40:f4:91:
                    d7:47:21:26:63:fa:c8:7d:35:08:40:cf:a9:f2:40:
                    f9:80:74:ac:fa:33:1d:e2:88:bd:42:5a:c6:a3:3d:
                    16:bc:02:30:e3:d1:20:e4:86:cf:46:ac:c7:c8:f8:
                    b5:e3:9f:0e:97:fa:d3:6e:f7:05:b8:5d:81:ef:69:
                    ae:0c:3a:47:4e:d1:74:2c:a3:6c:1e:d0:5d:2c:d2:
                    39:df:09:d1:70:25:d9:2a:13:49:65:16:b1:13:2a:
                    38:d8:cf:51:ca:87:c5:a6:48:e0:a6:86:da:35:2b:
                    d5:d7:33:dc:25:58:8d:c1:2e:d3:05:a0:c4:ba:ad:
                    fe:4d:8a:a3:ea:91:f5:3e:50:51:7a:d7:ec:f6:45:
                    3d:7b:d2:e4:eb:b6:e4:cb:ce:a9:c9:ed:cd:c1:e3:
                    30:13:13:fc:4e:1c:c1:5b:fa:d6:0e:67:40:05:b3:
                    c7:2d:98:77:a8:9a:bf:da:9e:4c:4b:46:6d:71:0a:
                    6c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:A7:BF:BF:D3:FA:8D:7E:9C:A5:9E:0F:D0:9D:C4:12:8C:07:19:90
            X509v3 Authority Key Identifier:
                keyid:2E:C9:34:FB:80:9D:13:0B:DC:85:4C:34:98:9D:14:9E:58:42:C7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BA94/8A9C7C76FFF811EBB6C4795EC4F9AE02/Lsk0-4CdEwvchUw0mJ0UnlhCxyI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lsk0-4CdEwvchUw0mJ0UnlhCxyI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BA94/8A9C7C76FFF811EBB6C4795EC4F9AE02/925D6D88FFFA11EB9CF87D5FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:d2:42:bf:df:27:37:d9:22:97:3d:f0:37:35:8c:0e:41:74:
         35:5b:11:ff:60:35:50:e1:62:c8:d2:7e:cb:07:1f:70:0b:04:
         05:84:6e:c5:fe:be:d4:cc:0c:0e:6b:94:05:69:07:55:92:80:
         1f:c6:45:00:42:b6:48:fb:f0:25:d3:97:fd:c0:09:23:53:ee:
         18:64:88:5d:2d:b7:d1:ad:17:0e:93:6d:9e:23:68:e3:59:b1:
         0c:57:1a:32:45:fc:c3:23:c4:1a:9e:12:cb:97:5a:3c:5b:3e:
         92:28:68:ac:0b:23:7b:c8:d7:61:cb:9b:8b:3e:bd:a8:ca:a9:
         26:20:68:c8:83:9d:f5:36:c9:cd:d5:98:ff:bf:ae:c4:b0:89:
         48:41:bc:a9:aa:8a:d1:1e:81:90:ea:0b:16:bb:66:69:1a:c5:
         99:98:7e:cf:32:c3:41:4d:66:a6:32:67:b6:e8:ee:17:e6:a5:
         8d:84:4a:fd:3f:55:11:90:c0:e6:12:d3:1e:fa:59:21:f6:62:
         1b:0c:83:d7:8a:a4:71:0d:7a:b5:df:21:c5:c7:fa:9a:ba:41:
         70:c2:bb:ed:a5:a2:56:7d:1e:49:fe:c8:11:db:80:cc:73:15:
         07:f1:3e:ac:2f:49:c8:f2:e0:7a:48:0b:aa:2c:93:e5:3c:33:
         4c:95:c0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----