Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F443D/CD1C027C069511EB8D9DF329C4F9AE02/61700512069711EB913E6D2BC4F9AE02.roa
File:                     61700512069711EB913E6D2BC4F9AE02.roa (raw, json)
Hash identifier:          csbEI6DvAm2+WCfdjQkLZAiuOjLFcT1/Tq+4YrkmzfA=
Subject key identifier:   C9:E0:29:75:4B:02:A9:C2:D9:15:20:07:5C:14:56:CB:C2:CE:B6:F8
Certificate issuer:       /CN=A91F443D/serialNumber=92C940685BFAD732D364D89DE2D00C188A0253CE
Certificate serial:       05FD
Authority key identifier: 92:C9:40:68:5B:FA:D7:32:D3:64:D8:9D:E2:D0:0C:18:8A:02:53:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kslAaFv61zLTZNid4tAMGIoCU84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F443D/CD1C027C069511EB8D9DF329C4F9AE02/61700512069711EB913E6D2BC4F9AE02.roa
Signing time:             Sat 04 Mar 2023 23:49:50 +0000
ROA not before:           Sat 04 Mar 2023 23:49:50 +0000
ROA not after:            Wed 01 May 2024 00:00:00 +0000
asID:                     135046
IP address blocks:        103.207.18.0/24 maxlen: 24
                          2001:df0:5e00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1533 (0x5fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F443D/serialNumber=92C940685BFAD732D364D89DE2D00C188A0253CE
        Validity
            Not Before: Mar  4 23:49:50 2023 GMT
            Not After : May  1 00:00:00 2024 GMT
        Subject: CN=6403d91d-913c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e6:04:fc:8b:51:fb:83:61:fc:af:6a:9d:cc:
                    57:40:87:44:4d:ff:07:79:fc:e3:f4:18:0a:49:f3:
                    73:60:97:40:d1:dd:c2:9c:92:2e:2f:24:d8:df:69:
                    76:98:60:ce:06:4c:fb:73:db:4d:b1:08:36:14:dc:
                    ec:50:db:99:df:63:e2:d9:73:13:06:11:44:09:9c:
                    91:19:dc:a8:63:9b:57:c3:41:f5:53:a4:6a:f5:75:
                    fc:21:50:58:dd:79:92:fd:26:ed:d8:91:c5:c3:0f:
                    55:2a:f2:6f:50:fe:ac:8a:26:18:8b:57:58:fb:29:
                    5d:f1:88:a6:c9:c5:74:c8:9b:47:50:85:7b:1c:cb:
                    cf:0d:29:e9:73:09:23:b4:b0:9a:af:f8:30:39:04:
                    68:17:6b:c6:5a:04:09:a2:7c:2a:4b:10:95:27:a0:
                    ca:f9:b1:5e:52:14:a8:42:ee:36:d8:03:89:a3:1d:
                    9b:13:59:ca:74:0d:23:9b:10:c5:a9:60:07:cd:b2:
                    ff:dd:0e:57:1d:40:c1:8b:39:48:0b:81:97:40:22:
                    e0:a8:b2:a8:d4:30:00:c2:7b:27:6f:e5:1f:3f:3a:
                    61:74:74:88:14:e5:34:d5:7f:64:ad:80:16:9b:83:
                    78:fe:9e:a9:f6:be:84:f0:a1:ee:b6:7e:c8:b3:07:
                    48:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E0:29:75:4B:02:A9:C2:D9:15:20:07:5C:14:56:CB:C2:CE:B6:F8
            X509v3 Authority Key Identifier:
                keyid:92:C9:40:68:5B:FA:D7:32:D3:64:D8:9D:E2:D0:0C:18:8A:02:53:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F443D/CD1C027C069511EB8D9DF329C4F9AE02/kslAaFv61zLTZNid4tAMGIoCU84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kslAaFv61zLTZNid4tAMGIoCU84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F443D/CD1C027C069511EB8D9DF329C4F9AE02/61700512069711EB913E6D2BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.207.18.0/24
                IPv6:
                  2001:df0:5e00::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:82:d2:82:8c:d8:00:85:15:79:99:ee:c5:69:13:70:86:be:
         1f:af:59:21:46:c7:f3:40:41:d4:1b:57:ee:b2:97:72:50:dc:
         59:be:7b:b4:bd:60:ba:6e:e7:99:55:52:21:6c:21:77:8f:da:
         1d:8e:d2:3f:96:f0:0c:96:3a:95:15:53:01:bb:4b:5a:c4:41:
         ea:01:d6:14:38:55:54:80:05:de:b4:f8:ce:3f:ba:98:cc:8c:
         70:7d:ad:02:b5:95:37:eb:66:27:23:0b:30:89:be:30:c6:1d:
         06:b9:54:48:0e:6a:ba:09:b4:ac:ad:c3:c8:04:14:f2:d2:39:
         01:4a:fe:3e:5e:a0:1c:52:74:f8:26:62:91:0d:df:27:54:5a:
         27:9b:f2:2c:3e:03:91:ed:4c:19:84:a2:27:ae:56:7e:5f:78:
         52:9e:8b:a1:bc:e2:39:49:50:39:55:5e:1a:40:1e:b1:b7:3a:
         df:4b:03:a5:3c:e4:eb:a7:26:74:d6:76:83:57:02:fa:16:f4:
         07:12:64:77:08:a2:59:85:58:ed:e7:13:b6:45:bb:a0:2b:0a:
         2a:ce:1c:db:36:48:d7:8e:e4:8e:7f:83:03:98:4b:10:e9:98:
         33:0b:df:ae:c4:ea:57:51:4f:c8:49:98:c5:b4:69:b4:90:1b:
         f5:7f:84:8b
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICBf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjQ0M0QxMTAvBgNVBAUTKDkyQzk0MDY4NUJGQUQ3MzJEMzY0RDg5REUyRDAwQzE4
OEEwMjUzQ0UwHhcNMjMwMzA0MjM0OTUwWhcNMjQwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDAzZDkxZC05MTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApeYE/ItR+4Nh/K9qncxXQIdETf8Hefzj9BgKSfNzYJdA0d3CnJIuLyTY32l2
mGDOBkz7c9tNsQg2FNzsUNuZ32Pi2XMTBhFECZyRGdyoY5tXw0H1U6Rq9XX8IVBY
3XmS/Sbt2JHFww9VKvJvUP6siiYYi1dY+yld8YimycV0yJtHUIV7HMvPDSnpcwkj
tLCar/gwOQRoF2vGWgQJonwqSxCVJ6DK+bFeUhSoQu422AOJox2bE1nKdA0jmxDF
qWAHzbL/3Q5XHUDBizlIC4GXQCLgqLKo1DAAwnsnb+UfPzphdHSIFOU01X9krYAW
m4N4/p6p9r6E8KHutn7IswdI0wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFMngKXVL
AqnC2RUgB1wUVsvCzrb4MB8GA1UdIwQYMBaAFJLJQGhb+tcy02TYneLQDBiKAlPO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDQzRC9DRDFDMDI3QzA2
OTUxMUVCOEQ5REYzMjlDNEY5QUUwMi9rc2xBYUZ2NjF6TFRaTmlkNHRBTUdJb0NV
ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tzbEFhRnY2MXpMVFpOaWQ0dEFNR0lvQ1U4NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjQ0M0QvQ0QxQzAyN0MwNjk1MTFFQjhEOURGMzI5QzRGOUFFMDIvNjE3MDA1MTIw
Njk3MTFFQjkxM0U2RDJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBABnzxIwDwQCAAIwCQMHACABDfBeADANBgkqhkiG9w0BAQsF
AAOCAQEAX4LSgozYAIUVeZnuxWkTcIa+H69ZIUbH80BB1BtX7rKXclDcWb57tL1g
um7nmVVSIWwhd4/aHY7SP5bwDJY6lRVTAbtLWsRB6gHWFDhVVIAF3rT4zj+6mMyM
cH2tArWVN+tmJyMLMIm+MMYdBrlUSA5qugm0rK3DyAQU8tI5AUr+Pl6gHFJ0+CZi
kQ3fJ1RaJ5vyLD4Dke1MGYSiJ65Wfl94Up6LobziOUlQOVVeGkAesbc630sDpTzk
66cmdNZ2g1cC+hb0BxJkdwiiWYVY7ecTtkW7oCsKKs4c2zZI147kjn+DA5hLEOmY
MwvfrsTqV1FPyEmYxbRptJAb9X+Eiw==
-----END CERTIFICATE-----