Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/E390F83EC1CD11EB86A00568C4F9AE02.roa
File:                     E390F83EC1CD11EB86A00568C4F9AE02.roa (raw, json)
Hash identifier:          l/jme7wWS4I9LN6Uqmqgm8y3qkl6ZZcy6rtZNU+mraw=
Subject key identifier:   33:ED:8C:E2:49:79:5E:8C:09:0C:A4:67:C3:79:EC:CE:5C:2B:58:8C
Certificate issuer:       /CN=A911959A/serialNumber=5C0D176A802B2E4557E885A6C0EAB5D0D070D7A7
Certificate serial:       0523
Authority key identifier: 5C:0D:17:6A:80:2B:2E:45:57:E8:85:A6:C0:EA:B5:D0:D0:70:D7:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/E390F83EC1CD11EB86A00568C4F9AE02.roa
Signing time:             Sat 13 Jul 2024 01:14:48 +0000
ROA not before:           Sat 13 Jul 2024 01:14:48 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     142298
IP address blocks:        103.167.190.0/23 maxlen: 23
                          103.167.190.0/24 maxlen: 24
                          103.167.191.0/24 maxlen: 24
                          2001:df6:bd80::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1315 (0x523)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911959A/serialNumber=5C0D176A802B2E4557E885A6C0EAB5D0D070D7A7
        Validity
            Not Before: Jul 13 01:14:48 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=6691d508-3ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b3:8c:8b:86:0c:8c:35:01:4c:6c:a9:1a:94:
                    5a:f4:3e:81:40:60:77:84:a1:fa:8b:3b:45:8c:ed:
                    05:72:68:d3:1c:23:e7:e8:47:44:ab:65:79:6a:70:
                    3f:d9:c8:8b:e3:22:10:ff:48:de:a1:66:4d:45:9a:
                    f5:a9:73:21:f0:40:16:bf:45:11:84:e5:da:d4:d5:
                    db:5e:cd:b2:4f:fc:41:db:40:b8:d8:ba:d2:ce:a1:
                    78:43:48:ef:47:24:78:a4:fb:50:51:9d:93:48:c2:
                    a4:25:b8:a2:c4:7f:ab:5b:6f:ed:0d:aa:25:42:bc:
                    74:12:91:0a:9d:68:82:1e:13:96:a4:08:80:f0:9f:
                    d1:87:04:5d:12:23:5b:6f:5c:14:1e:40:57:18:da:
                    2a:e0:0b:cb:d3:dd:39:9e:ff:f4:9e:c2:67:f8:55:
                    0a:ec:c1:de:6b:58:30:a3:52:c9:6d:d3:86:b7:19:
                    69:26:e0:de:c5:13:a4:f9:98:82:1d:52:9e:19:85:
                    c5:a9:cd:0d:94:1e:f3:35:96:88:d6:86:4e:80:b8:
                    0b:30:81:3d:c7:21:d2:50:85:36:f9:26:25:96:bf:
                    fb:11:65:2e:e2:06:9e:da:6f:a8:1e:c0:83:cc:8a:
                    67:6a:2d:8b:c1:69:36:6a:0f:74:70:d7:3e:83:88:
                    db:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:ED:8C:E2:49:79:5E:8C:09:0C:A4:67:C3:79:EC:CE:5C:2B:58:8C
            X509v3 Authority Key Identifier:
                keyid:5C:0D:17:6A:80:2B:2E:45:57:E8:85:A6:C0:EA:B5:D0:D0:70:D7:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/E390F83EC1CD11EB86A00568C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.190.0/23
                IPv6:
                  2001:df6:bd80::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:f9:06:12:76:0c:3c:1b:33:4b:0c:15:b8:56:2b:4e:d6:90:
         57:7c:9c:8e:67:24:b2:b0:35:9b:84:7e:b4:a4:63:d7:20:89:
         f1:99:72:c9:72:df:9f:93:44:7f:ee:25:e6:84:bc:49:98:ae:
         93:01:37:81:ee:12:83:f3:35:1f:b2:4a:58:c1:92:e5:40:64:
         72:f3:48:20:bc:e1:4e:a2:41:68:2d:d1:4e:43:3a:71:58:d2:
         e3:d2:32:95:c0:22:6e:2e:05:0f:2a:c4:dd:9d:4e:5a:1e:4b:
         e0:e1:46:85:f3:ec:4c:d8:95:ec:15:60:e9:22:8b:d9:18:24:
         03:31:80:90:09:05:99:35:da:d7:89:8f:a7:8c:44:65:1f:da:
         9f:97:ef:f2:02:7b:00:85:23:b7:d2:87:f4:65:4f:4f:f6:32:
         1b:2e:fd:ed:3e:51:98:bc:88:0c:ef:6b:77:ab:84:68:95:63:
         5e:e9:26:69:f4:c5:63:a4:9f:80:19:38:39:74:13:0d:02:e8:
         f0:b4:f9:fe:ce:33:f7:be:c5:27:04:4b:da:80:ca:9b:80:da:
         93:f4:63:e7:11:c0:11:a5:b9:2c:5e:5e:b8:e9:ff:e0:6c:d8:
         cb:56:11:97:a0:4c:e4:e2:ba:3d:f8:99:e1:d9:f7:5c:83:8d:
         8e:a6:87:77
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICBSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTk1OUExMTAvBgNVBAUTKDVDMEQxNzZBODAyQjJFNDU1N0U4ODVBNkMwRUFCNUQw
RDA3MEQ3QTcwHhcNMjQwNzEzMDExNDQ4WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjkxZDUwOC0zZWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu7OMi4YMjDUBTGypGpRa9D6BQGB3hKH6iztFjO0FcmjTHCPn6EdEq2V5anA/
2ciL4yIQ/0jeoWZNRZr1qXMh8EAWv0URhOXa1NXbXs2yT/xB20C42LrSzqF4Q0jv
RyR4pPtQUZ2TSMKkJbiixH+rW2/tDaolQrx0EpEKnWiCHhOWpAiA8J/RhwRdEiNb
b1wUHkBXGNoq4AvL0905nv/0nsJn+FUK7MHea1gwo1LJbdOGtxlpJuDexROk+ZiC
HVKeGYXFqc0NlB7zNZaI1oZOgLgLMIE9xyHSUIU2+SYllr/7EWUu4gae2m+oHsCD
zIpnai2LwWk2ag90cNc+g4jbmwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDPtjOJJ
eV6MCQykZ8N57M5cK1iMMB8GA1UdIwQYMBaAFFwNF2qAKy5FV+iFpsDqtdDQcNen
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTU5QS8yRjhEQ0IwMkMx
Q0IxMUVCOTE3NUNFNjZDNEY5QUUwMi9YQTBYYW9BckxrVlg2SVdtd09xMTBOQncx
NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hBMFhhb0FyTGtWWDZJV213T3ExME5CdzE2Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTk1OUEvMkY4RENCMDJDMUNCMTFFQjkxNzVDRTY2QzRGOUFFMDIvRTM5MEY4M0VD
MUNEMTFFQjg2QTAwNTY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFnp74wDwQCAAIwCQMHACABDfa9gDANBgkqhkiG9w0BAQsF
AAOCAQEAkfkGEnYMPBszSwwVuFYrTtaQV3ycjmcksrA1m4R+tKRj1yCJ8ZlyyXLf
n5NEf+4l5oS8SZiukwE3ge4Sg/M1H7JKWMGS5UBkcvNIILzhTqJBaC3RTkM6cVjS
49IylcAibi4FDyrE3Z1OWh5L4OFGhfPsTNiV7BVg6SKL2RgkAzGAkAkFmTXa14mP
p4xEZR/an5fv8gJ7AIUjt9KH9GVPT/YyGy797T5RmLyIDO9rd6uEaJVjXukmafTF
Y6SfgBk4OXQTDQLo8LT5/s4z977FJwRL2oDKm4Dak/Rj5xHAEaW5LF5euOn/4GzY
y1YRl6BM5OK6PfiZ4dn3XIONjqaHdw==
-----END CERTIFICATE-----