Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/C3E640EE917811ED904ACF83C4F9AE02.roa
File:                     C3E640EE917811ED904ACF83C4F9AE02.roa (raw, json)
Hash identifier:          U1JZUMbZcbonZCdC7TOrqHH67lPPcra0baMZ+HxHTq0=
Subject key identifier:   59:D2:C8:A6:ED:81:03:DC:DF:2B:62:E6:CA:76:9E:2E:5A:10:B5:E9
Certificate issuer:       /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C
Certificate serial:       0196
Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/C3E640EE917811ED904ACF83C4F9AE02.roa
Signing time:             Fri 13 Dec 2024 02:36:15 +0000
ROA not before:           Fri 13 Dec 2024 02:36:15 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     133321
IP address blocks:        203.214.197.0/24 maxlen: 24
                          203.214.198.0/24 maxlen: 24
                          203.214.199.0/24 maxlen: 24
                          2404:c400:9000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C
        Validity
            Not Before: Dec 13 02:36:15 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=675b9d9f-e55f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:51:b2:d9:3f:72:fd:2c:8e:00:16:95:f9:bc:
                    36:96:e2:f8:d7:cf:d9:6f:60:2b:52:38:c7:6a:0f:
                    6c:ab:b7:4e:35:f1:9f:d8:68:90:cd:b1:5c:ed:04:
                    51:4a:1c:c6:86:1f:5f:8d:c3:ad:be:8f:82:88:0b:
                    03:9b:1c:bd:d6:4a:cd:5a:37:a8:ce:57:7f:3c:ed:
                    39:54:87:0c:be:5e:4f:98:32:27:94:93:5e:d6:51:
                    fd:77:f0:f7:ef:0e:3f:cb:37:ce:0b:b7:9b:8e:f0:
                    47:fe:33:56:a3:0c:77:9b:f7:ae:be:49:08:22:c8:
                    87:5c:c0:6c:7a:55:8b:73:3f:1b:4e:13:fb:6e:9d:
                    3f:f8:97:b0:51:72:c1:ce:6f:82:74:0f:9d:b0:66:
                    54:fd:79:d6:82:9d:dd:5c:3b:c9:4d:95:41:ef:37:
                    06:b1:fd:27:d3:7a:66:d4:b8:d0:61:db:5a:54:f3:
                    24:58:21:e8:f7:11:29:49:c7:bf:c4:dd:fc:ce:eb:
                    fd:5e:2d:cb:c2:a4:be:f9:79:d8:67:1a:f3:f7:d7:
                    be:4d:f1:86:1d:a8:2c:e4:c3:1e:c9:d4:03:46:35:
                    85:1e:c0:6d:f2:bc:58:75:d2:fa:b5:69:f0:f5:5a:
                    0a:b7:ad:5a:a4:28:35:f5:79:35:4d:73:93:19:33:
                    42:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D2:C8:A6:ED:81:03:DC:DF:2B:62:E6:CA:76:9E:2E:5A:10:B5:E9
            X509v3 Authority Key Identifier:
                keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/C3E640EE917811ED904ACF83C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.214.197.0-203.214.199.255
                IPv6:
                  2404:c400:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         93:f2:69:08:eb:0a:c1:1d:1a:9e:26:64:4f:ed:10:b5:60:59:
         fc:25:f0:38:2f:2c:44:89:9a:3b:67:9b:48:ed:b6:f7:65:e7:
         c7:ad:0e:2b:a5:35:35:c7:0b:e5:21:4d:ac:1e:86:58:c6:87:
         6f:05:65:a3:83:f4:0b:1f:eb:e8:80:a6:39:89:4c:ee:93:28:
         c5:35:e3:a5:14:f2:d7:c7:89:fc:7b:48:d3:a0:82:21:11:09:
         37:ff:45:1c:51:94:45:ee:95:9c:26:ea:70:b7:69:e1:70:91:
         2c:a2:25:61:09:b0:fc:21:51:26:83:e6:a0:6b:48:60:ca:9d:
         f3:2c:9c:e9:2f:6c:90:0a:97:86:ef:8f:38:c7:47:1a:21:d8:
         95:0e:07:6e:f4:0e:cd:f1:19:7c:ff:40:1a:f4:58:24:3c:52:
         b4:a9:8e:1f:43:a6:82:be:81:d2:f6:66:f3:c5:78:b4:36:ac:
         9f:00:1e:56:d8:6e:99:6a:a6:aa:cb:e2:4d:1c:04:0e:6e:f6:
         37:6e:2b:8d:21:91:f7:87:bf:f9:39:4b:6d:1a:fb:23:b4:34:
         bb:21:46:8f:16:5c:31:29:90:4e:af:bd:6e:e3:42:16:4d:b2:
         d0:b0:24:06:0f:8c:e7:a5:16:0a:40:6c:8f:b1:fc:90:94:f6:
         b7:6a:3d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----