Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/03D8DC4A40F011EDAD789E3AC4F9AE02.roa
File:                     03D8DC4A40F011EDAD789E3AC4F9AE02.roa (raw, json)
Hash identifier:          t7XCEjkxXsWQ/Dxk256ftxVIrolRXrZfUAZmnQPH6Io=
Subject key identifier:   AC:F6:A1:54:74:D4:87:80:4F:74:E7:CE:AD:91:DE:93:08:75:34:56
Certificate issuer:       /CN=A9113F63/serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B
Certificate serial:       0192
Authority key identifier: C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/03D8DC4A40F011EDAD789E3AC4F9AE02.roa
Signing time:             Fri 15 Nov 2024 02:05:18 +0000
ROA not before:           Fri 15 Nov 2024 02:05:18 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     150331
IP address blocks:        103.13.194.0/23 maxlen: 23
                          103.13.194.0/24 maxlen: 24
                          103.13.195.0/24 maxlen: 24
                          2400:af20::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402 (0x192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113F63/serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B
        Validity
            Not Before: Nov 15 02:05:18 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6736ac5e-c6d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3b:97:cc:80:72:d1:e7:3b:c7:76:56:93:fd:
                    a6:6e:e3:b4:5f:7f:9b:d2:02:55:6e:19:f6:53:26:
                    a4:85:d5:d2:bc:45:d2:ea:66:59:e8:95:0d:26:ac:
                    ad:7d:24:6c:3c:80:5e:ad:c4:b3:8f:8c:f6:3e:11:
                    c7:e3:5e:65:8b:73:d8:e2:92:b6:c8:9f:b8:8a:79:
                    26:3e:06:66:93:d6:dd:77:4b:8d:f1:7c:fb:70:5d:
                    1b:cc:b1:81:ca:1f:1b:75:e6:98:cc:c0:24:e8:61:
                    0e:19:e4:05:07:4d:1a:a7:96:74:3e:aa:21:5a:91:
                    84:79:b4:0b:c9:48:c3:b4:ba:cd:00:a7:0f:b1:62:
                    70:b2:b8:43:0f:bc:c3:ae:da:7d:1c:ed:06:3f:3d:
                    f7:a6:43:43:ba:7a:48:ec:31:6f:f5:c1:03:27:29:
                    51:8a:d4:f4:2f:4b:88:32:28:4d:07:74:0c:71:0d:
                    3a:5b:23:94:83:9f:c6:66:fa:05:f9:4a:7f:9e:ae:
                    16:04:a9:7d:de:01:49:a4:d9:ff:25:3d:0b:14:1e:
                    ae:11:2e:87:ed:6c:d7:6b:3a:d6:f6:e5:69:68:83:
                    84:4d:57:55:4e:1e:3b:e4:b2:75:0d:6c:8d:6d:5b:
                    1d:8f:5f:29:e0:46:4f:36:61:db:4f:61:e3:d3:60:
                    0c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F6:A1:54:74:D4:87:80:4F:74:E7:CE:AD:91:DE:93:08:75:34:56
            X509v3 Authority Key Identifier:
                keyid:C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/03D8DC4A40F011EDAD789E3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.194.0/23
                IPv6:
                  2400:af20::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:d6:e4:47:e4:50:fe:6f:a2:a7:96:a0:06:2e:6f:12:8a:db:
         c3:9d:1e:d9:47:b4:53:3e:86:e7:90:0c:41:1f:54:1c:ca:08:
         4c:08:b6:d8:dc:24:d6:62:3c:4e:51:b2:9f:fd:05:11:a7:7d:
         4f:97:1c:ce:50:ae:be:10:81:6b:02:07:25:4c:99:ec:61:b8:
         55:51:1e:29:a4:cb:0d:0b:9d:a2:7b:24:74:8e:46:ca:b7:48:
         c4:de:a2:4c:05:29:10:4e:c2:d1:ab:b1:d2:8a:89:3b:77:6e:
         9e:ad:02:4e:df:e6:4d:de:2c:2e:42:bf:7f:c6:d1:7a:3f:eb:
         b6:c7:35:80:fb:1f:bf:cb:1c:d1:ed:93:c0:fc:59:1d:05:fb:
         05:78:2d:de:6f:04:3f:5e:7d:b2:e3:7d:02:e5:36:91:5a:b4:
         05:12:67:5a:c6:80:dd:30:f5:15:36:86:11:5a:e1:3a:f0:ff:
         67:bb:d4:3f:59:ec:6a:f1:1c:48:23:04:f0:0a:a8:89:98:2f:
         df:29:01:a6:f6:21:d1:fc:40:fc:67:69:2b:84:cf:0a:cc:77:
         2d:05:f9:c7:a4:99:2d:64:dd:65:bb:b1:96:18:e3:64:7f:0b:
         14:51:18:ed:f7:54:57:ad:76:db:ed:86:ec:30:07:7a:c3:b5:
         44:d6:2d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----