Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/D206EE7C323C11ECAAFDE06BC4F9AE02.roa
File:                     D206EE7C323C11ECAAFDE06BC4F9AE02.roa (raw, json)
Hash identifier:          gIXJf1pha2x85Ex+p85IejVWE/SRVAveib29Gyu5oxM=
Subject key identifier:   52:68:64:CC:AF:14:40:D2:C2:C4:AE:75:F3:97:5D:E1:77:22:4F:45
Certificate issuer:       /CN=A919E833/serialNumber=48AAE00D13DFB3CCDFB3A7D25FDC356FADC5BEC8
Certificate serial:       22DA
Authority key identifier: 48:AA:E0:0D:13:DF:B3:CC:DF:B3:A7:D2:5F:DC:35:6F:AD:C5:BE:C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKrgDRPfs8zfs6fSX9w1b63Fvsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/D206EE7C323C11ECAAFDE06BC4F9AE02.roa
Signing time:             Thu 21 Oct 2021 07:02:15 +0000
ROA not before:           Thu 21 Oct 2021 07:02:15 +0000
ROA not after:            Fri 01 Jul 2022 00:00:00 +0000
asID:                     45758
IP address blocks:        110.164.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8922 (0x22da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E833/serialNumber=48AAE00D13DFB3CCDFB3A7D25FDC356FADC5BEC8
        Validity
            Not Before: Oct 21 07:02:15 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=61711076-9602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:bc:e4:6c:2c:d4:1d:d2:90:d9:3d:22:bd:21:
                    18:c5:2d:95:b2:6b:35:bb:07:96:3d:74:8e:3b:1e:
                    fd:78:ac:7b:4e:47:1b:1e:7d:99:93:85:39:d1:58:
                    16:ae:d7:db:74:ff:6b:f3:31:c6:fe:41:44:23:52:
                    be:9b:a5:33:03:8f:3f:47:60:d3:27:3a:bb:eb:ea:
                    9e:8f:ae:c1:6b:63:58:e8:96:10:d5:8e:40:64:d6:
                    7c:1c:f7:1d:ac:ec:5d:91:93:05:ba:cb:12:75:02:
                    9f:12:04:07:60:f2:8b:5b:d9:6e:a6:be:e8:ea:c0:
                    c7:97:44:a2:94:be:91:f6:3f:d4:55:40:67:42:21:
                    3d:9a:d4:d8:da:b4:ac:2a:e7:6f:0a:de:0b:21:7b:
                    48:a0:b3:f5:a6:f6:2b:0b:dd:a3:f5:00:c3:de:0e:
                    24:29:6a:ef:c0:5b:c5:40:71:d2:00:fa:70:78:cd:
                    e7:33:70:5a:78:6c:19:12:89:e8:f8:7c:1e:bc:b6:
                    94:de:03:c4:74:85:3a:29:f4:d2:1f:3d:d8:eb:96:
                    69:b3:b9:95:66:a4:bb:2f:c0:79:c6:ad:eb:83:d8:
                    f8:43:bf:77:80:45:66:e0:9c:17:41:b4:87:06:8f:
                    47:c5:c7:6f:ef:cb:bd:b4:d0:9e:17:ef:d3:20:10:
                    86:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:68:64:CC:AF:14:40:D2:C2:C4:AE:75:F3:97:5D:E1:77:22:4F:45
            X509v3 Authority Key Identifier:
                keyid:48:AA:E0:0D:13:DF:B3:CC:DF:B3:A7:D2:5F:DC:35:6F:AD:C5:BE:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/SKrgDRPfs8zfs6fSX9w1b63Fvsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKrgDRPfs8zfs6fSX9w1b63Fvsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E833/4AA3E6E2C64B11E495FF9635C4F9AE02/D206EE7C323C11ECAAFDE06BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.164.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         c3:db:20:df:21:cc:cd:3b:af:01:7c:50:45:a2:fe:11:4a:29:
         a5:46:8a:12:df:27:f3:1a:89:91:3c:bb:7b:ff:3c:82:ba:43:
         87:81:f9:09:63:01:43:4c:80:97:6a:2f:61:8f:00:fc:6d:cd:
         2c:b5:0a:3e:49:a2:bc:0b:c8:ed:81:1a:c4:b8:1d:86:df:c9:
         1d:e2:88:16:97:09:da:73:74:bc:7a:a8:b2:07:a0:f8:5b:e5:
         f8:5a:59:5e:af:ad:d7:7f:bd:c1:38:86:39:95:21:34:e0:a8:
         ba:ad:f9:3e:f2:03:69:ed:9a:d4:d6:c3:99:63:bc:37:ee:78:
         ee:fd:3a:b0:87:b5:78:7b:b3:f4:e8:26:ad:6b:88:6c:11:42:
         53:88:04:8d:ad:37:fb:4d:e1:e5:39:d4:37:5d:00:1b:85:26:
         1d:63:03:79:98:92:dc:9d:b9:eb:cd:d6:fe:00:3c:6f:9a:1a:
         59:c3:ca:2e:7b:40:af:54:bd:da:95:00:89:84:c5:b7:01:79:
         3a:a1:be:1a:8e:90:9e:4f:e5:d8:d4:46:65:04:84:b9:cd:d8:
         b2:f6:d9:22:ba:a9:bb:55:51:44:30:b0:9a:ee:fd:b1:d5:bb:
         ce:cf:33:4b:ca:08:90:5e:65:00:48:89:63:7e:03:43:d7:90:
         dc:75:0d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----