Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/D17A396E323C11ECAAFDE06BC4F9AE02.roa
File:                     D17A396E323C11ECAAFDE06BC4F9AE02.roa (raw, json)
Hash identifier:          pkG+PTTN425teyo6d6WCgN5Y1yJ07vDL+wh+7V9ZA/M=
Subject key identifier:   93:FB:66:77:7C:99:3F:02:8A:FE:73:9E:EE:95:BA:5B:11:E2:E1:AB
Certificate issuer:       /CN=A919E833/serialNumber=48AAE00D13DFB3CCDFB3A7D25FDC356FADC5BEC8
Certificate serial:       22D9
Authority key identifier: 48:AA:E0:0D:13:DF:B3:CC:DF:B3:A7:D2:5F:DC:35:6F:AD:C5:BE:C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKrgDRPfs8zfs6fSX9w1b63Fvsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/D17A396E323C11ECAAFDE06BC4F9AE02.roa
Signing time:             Thu 21 Oct 2021 07:02:14 +0000
ROA not before:           Thu 21 Oct 2021 07:02:14 +0000
ROA not after:            Fri 01 Jul 2022 00:00:00 +0000
asID:                     45629
IP address blocks:        110.164.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8921 (0x22d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E833/serialNumber=48AAE00D13DFB3CCDFB3A7D25FDC356FADC5BEC8
        Validity
            Not Before: Oct 21 07:02:14 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=61711075-cd52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c3:18:1c:f0:8f:29:b6:bc:0c:77:30:c9:46:
                    ef:ad:f1:88:ba:81:f7:38:3e:3d:ff:2e:05:66:05:
                    b8:69:73:28:37:af:36:53:f6:7a:2f:fc:56:31:f6:
                    2a:88:28:78:20:4f:28:89:5b:d5:61:98:ec:34:76:
                    42:33:a2:9c:f7:da:07:9e:eb:45:fd:37:ff:6d:e3:
                    24:6e:7f:d4:23:3e:5c:6d:a3:14:de:f9:18:80:7a:
                    8a:51:91:c4:7e:b2:b5:1d:e8:80:81:dc:71:dc:65:
                    b1:00:76:90:5f:f0:0d:ce:c8:e1:73:ce:82:39:5d:
                    a4:0e:49:6c:13:71:8d:44:d1:28:b3:73:02:e8:b5:
                    4e:cd:80:57:58:9f:8a:5c:52:d0:74:13:6c:78:5c:
                    cd:d1:83:42:96:02:b2:f5:e2:89:eb:d8:96:63:e1:
                    da:1f:ff:87:d4:a2:36:c0:4f:0f:e2:29:10:fe:ee:
                    98:2b:61:a2:ec:54:67:0b:f7:e0:ea:ed:61:31:8d:
                    6b:e1:41:00:0f:63:21:4a:88:bd:91:4c:9b:63:79:
                    53:c1:ac:16:ca:6c:64:23:20:2b:fd:14:30:7b:97:
                    41:a8:4c:88:61:9c:c7:2e:63:17:94:5f:03:8c:fb:
                    0a:ce:b4:68:b0:d9:6f:99:88:41:9e:11:88:87:7c:
                    8d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:FB:66:77:7C:99:3F:02:8A:FE:73:9E:EE:95:BA:5B:11:E2:E1:AB
            X509v3 Authority Key Identifier:
                keyid:48:AA:E0:0D:13:DF:B3:CC:DF:B3:A7:D2:5F:DC:35:6F:AD:C5:BE:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/SKrgDRPfs8zfs6fSX9w1b63Fvsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKrgDRPfs8zfs6fSX9w1b63Fvsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/D17A396E323C11ECAAFDE06BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.164.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         85:ac:f1:68:27:23:d9:91:c1:79:fe:89:9f:d1:f6:90:06:3c:
         ef:df:09:f2:58:0e:8b:55:ea:2c:d7:da:72:62:35:8c:20:35:
         f4:3d:76:17:a0:17:18:e0:77:2a:b2:a7:e2:ce:df:63:a1:4c:
         44:cf:96:c2:fe:73:9e:9c:a4:c1:f0:c5:0d:82:f9:61:e9:72:
         0f:f2:dd:15:ea:a1:41:e2:82:0c:5b:40:25:0a:9a:88:0b:aa:
         76:8a:f7:c3:ee:19:e9:4d:d9:42:b5:89:64:1e:46:f4:9e:07:
         fd:e6:8d:c2:da:7f:84:60:c6:17:f2:42:ca:06:51:5f:81:17:
         f0:36:0b:c3:c0:ec:f8:96:fe:99:28:e2:7d:a9:5e:b0:cb:f6:
         1b:06:2c:82:df:38:02:72:f8:4e:ba:d4:ef:4e:8d:59:59:84:
         ec:a8:0b:00:76:2e:1f:c2:0f:1b:7f:e3:a0:e9:f0:a5:c5:6d:
         bd:df:e0:50:13:03:82:a9:db:6d:ce:b1:74:b6:d3:b8:79:30:
         22:64:9c:14:c1:f7:af:42:23:e7:7c:39:59:38:40:fa:28:e5:
         f7:b6:f1:a5:40:4d:42:00:b1:c9:37:33:f9:fc:0f:35:c9:31:
         ab:e7:74:4e:74:02:3e:22:f9:36:1c:e5:b3:e1:67:c0:ed:47:
         e8:4f:cc:23
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICItkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUU4MzMxMTAvBgNVBAUTKDQ4QUFFMDBEMTNERkIzQ0NERkIzQTdEMjVGREMzNTZG
QURDNUJFQzgwHhcNMjExMDIxMDcwMjE0WhcNMjIwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MTcxMTA3NS1jZDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzcMYHPCPKba8DHcwyUbvrfGIuoH3OD49/y4FZgW4aXMoN682U/Z6L/xWMfYq
iCh4IE8oiVvVYZjsNHZCM6Kc99oHnutF/Tf/beMkbn/UIz5cbaMU3vkYgHqKUZHE
frK1HeiAgdxx3GWxAHaQX/ANzsjhc86COV2kDklsE3GNRNEos3MC6LVOzYBXWJ+K
XFLQdBNseFzN0YNClgKy9eKJ69iWY+HaH/+H1KI2wE8P4ikQ/u6YK2Gi7FRnC/fg
6u1hMY1r4UEAD2MhSoi9kUybY3lTwawWymxkIyAr/RQwe5dBqEyIYZzHLmMXlF8D
jPsKzrRosNlvmYhBnhGIh3yNsQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJP7Znd8
mT8Civ5znu6VulsR4uGrMB8GA1UdIwQYMBaAFEiq4A0T37PM37On0l/cNW+txb7I
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTgzMy80QUEzRTZFMkM2
NEIxMUU0OTVGRjk2MzVDNEY5QUUwMi9TS3JnRFJQZnM4emZzNmZTWDl3MWI2M0Z2
c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NLcmdEUlBmczh6ZnM2ZlNYOXcxYjYzRnZzZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUU4MzMvNEFBM0U2RTJDNjRCMTFFNDk1RkY5NjM1QzRGOUFFMDIvRDE3QTM5NkUz
MjNDMTFFQ0FBRkRFMDZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAdupIAwDQYJKoZIhvcNAQELBQADggEBAIWs8WgnI9mRwXn+
iZ/R9pAGPO/fCfJYDotV6izX2nJiNYwgNfQ9dhegFxjgdyqyp+LO32OhTETPlsL+
c56cpMHwxQ2C+WHpcg/y3RXqoUHiggxbQCUKmogLqnaK98PuGelN2UK1iWQeRvSe
B/3mjcLaf4RgxhfyQsoGUV+BF/A2C8PA7PiW/pko4n2pXrDL9hsGLILfOAJy+E66
1O9OjVlZhOyoCwB2Lh/CDxt/46Dp8KXFbb3f4FATA4Kp223OsXS207h5MCJknBTB
969CI+d8OVk4QPoo5fe28aVATUIAsck3M/n8DzXJMavndE50Aj4i+TYc5bPhZ8Dt
R+hPzCM=
-----END CERTIFICATE-----