Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9599/C4D1585CDB0F11EB8A986139C4F9AE02/970965A6512D11EC89CDEB81C4F9AE02.roa
File:                     970965A6512D11EC89CDEB81C4F9AE02.roa (raw, json)
Hash identifier:          lKQ31T9kqc45KBzZXgIfGMww0MWVzLhcV1QYFt+ZoQU=
Subject key identifier:   3F:FF:DF:2B:7F:15:68:1C:16:E1:64:6B:A1:03:72:59:10:15:4B:DD
Certificate issuer:       /CN=A91B9599/serialNumber=818F8B20DA1E21C948897810A2B4254B8A7CD3B0
Certificate serial:       0495
Authority key identifier: 81:8F:8B:20:DA:1E:21:C9:48:89:78:10:A2:B4:25:4B:8A:7C:D3:B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gY-LINoeIclIiXgQorQlS4p807A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9599/C4D1585CDB0F11EB8A986139C4F9AE02/970965A6512D11EC89CDEB81C4F9AE02.roa
Signing time:             Fri 19 Jan 2024 01:22:41 +0000
ROA not before:           Fri 19 Jan 2024 01:22:41 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     49544
IP address blocks:        103.125.216.0/24 maxlen: 24
                          103.125.219.0/24 maxlen: 24
                          2403:fa40:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1173 (0x495)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9599/serialNumber=818F8B20DA1E21C948897810A2B4254B8A7CD3B0
        Validity
            Not Before: Jan 19 01:22:41 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65a9cee0-b234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:41:c6:e3:2c:a0:34:31:88:ef:15:fd:5f:b3:
                    a9:2a:10:33:05:10:29:af:e1:02:7e:f6:dd:e9:cd:
                    08:5c:7c:38:bb:33:34:da:6b:15:67:6b:41:4e:eb:
                    78:9b:42:11:60:8a:0f:64:7d:67:3f:e6:a5:ae:da:
                    ea:ff:dc:d3:52:79:fe:69:75:53:3c:4e:37:a6:f1:
                    d5:7a:9c:6d:eb:c5:67:c1:c9:42:79:f9:d5:ee:03:
                    33:4a:43:4d:f5:d5:23:7b:4a:c6:6b:64:a3:69:91:
                    d0:31:f7:8a:09:b1:9c:1e:5f:02:72:af:23:63:c5:
                    34:af:2b:79:b7:8b:e8:0f:aa:e0:8b:62:b3:83:bb:
                    e0:9f:f4:2e:63:71:6a:bd:16:d9:20:93:73:4d:f2:
                    80:07:37:fa:2b:cc:93:f3:8f:87:f0:69:ee:3a:da:
                    6b:63:fe:c6:f7:b5:14:ed:81:82:b2:fa:e1:a8:a3:
                    2e:89:d1:46:20:8f:76:0b:8e:4b:00:2c:20:a8:9b:
                    d5:06:6a:82:16:bf:7b:4c:cb:f2:a0:8f:93:86:38:
                    9a:fa:33:03:3e:69:65:02:e5:ee:99:31:0b:a2:7c:
                    33:f3:1a:80:66:95:78:76:94:3f:8c:d5:4b:4a:e4:
                    b4:f7:4a:5f:be:8e:ba:4d:ac:49:49:ff:95:51:ea:
                    b7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:FF:DF:2B:7F:15:68:1C:16:E1:64:6B:A1:03:72:59:10:15:4B:DD
            X509v3 Authority Key Identifier:
                keyid:81:8F:8B:20:DA:1E:21:C9:48:89:78:10:A2:B4:25:4B:8A:7C:D3:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9599/C4D1585CDB0F11EB8A986139C4F9AE02/gY-LINoeIclIiXgQorQlS4p807A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gY-LINoeIclIiXgQorQlS4p807A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9599/C4D1585CDB0F11EB8A986139C4F9AE02/970965A6512D11EC89CDEB81C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.216.0/24
                  103.125.219.0/24
                IPv6:
                  2403:fa40:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:1f:02:a8:b7:d7:24:b9:fa:b6:b9:30:c3:88:90:c9:63:c8:
         32:2d:5e:b6:73:11:b9:f3:fc:e2:c5:d9:70:6f:9e:47:3c:f5:
         74:46:4b:71:ad:e9:db:2f:ad:fa:3d:07:38:ac:00:80:e7:fe:
         5e:e4:4f:0c:56:5f:55:99:1e:63:2a:68:f4:11:89:09:06:36:
         78:a3:55:fe:7d:e6:b5:eb:23:cc:81:d6:ac:b3:6f:dd:31:22:
         61:b4:48:f6:d3:b8:aa:62:ca:c3:98:1a:bf:de:67:c1:79:5b:
         83:a5:5c:17:6c:bf:3e:d1:2e:85:ab:b8:23:81:b5:67:12:40:
         8c:fb:70:36:74:bd:3a:41:85:53:7d:18:2e:4f:75:ea:da:09:
         ea:41:e0:0f:8e:b9:dd:38:f8:7e:92:79:74:35:a9:f1:f2:9f:
         7b:fd:f2:13:a9:73:d5:f9:38:5f:06:22:41:bb:20:66:a8:21:
         ec:bd:c9:10:9b:44:e2:a4:59:80:1e:96:22:c7:fa:16:b2:9c:
         59:0c:16:2b:78:0e:27:36:bd:ac:a7:f8:a8:9b:99:61:a5:6d:
         02:b1:e5:de:c4:64:f4:bd:d8:fe:39:7f:bf:63:08:48:d4:a1:
         c1:7e:43:fe:17:1e:0d:a3:8e:9e:10:8b:3f:4b:ce:2f:33:4b:
         f2:c0:d3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----