Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/718673B6BB7F11EC9E187F19C4F9AE02.roa
File:                     718673B6BB7F11EC9E187F19C4F9AE02.roa (raw, json)
Hash identifier:          O8VxzFOTQcqKK+CbKNz7Oarn0uADD/6F4h0/93MvW2k=
Subject key identifier:   57:C2:36:CE:61:79:23:EA:C2:31:E0:DC:6F:8D:47:2F:C9:09:ED:34
Certificate issuer:       /CN=A916593B/serialNumber=49AB5DD11DC922DCC8F23DD5A92C6994DD703504
Certificate serial:       02F4
Authority key identifier: 49:AB:5D:D1:1D:C9:22:DC:C8:F2:3D:D5:A9:2C:69:94:DD:70:35:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/718673B6BB7F11EC9E187F19C4F9AE02.roa
Signing time:             Sat 23 Nov 2024 01:04:31 +0000
ROA not before:           Sat 23 Nov 2024 01:04:31 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     45809
IP address blocks:        103.70.24.0/22 maxlen: 24
                          2001:dce:8::/48 maxlen: 48
                          2001:dce:9::/48 maxlen: 48
                          2001:dce:a::/48 maxlen: 48
                          2001:dce:2000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 756 (0x2f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916593B/serialNumber=49AB5DD11DC922DCC8F23DD5A92C6994DD703504
        Validity
            Not Before: Nov 23 01:04:31 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=67412a1e-1310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:48:47:b6:a1:72:60:5e:12:81:8c:84:ae:42:
                    cb:aa:e8:b5:6a:c2:9d:b5:03:4e:12:d1:b2:79:97:
                    53:98:08:0d:dc:13:75:0d:b2:e0:b3:c8:3c:62:42:
                    95:46:91:7c:da:cf:26:3b:2e:d8:29:28:70:58:07:
                    48:b5:b6:be:d4:91:be:29:21:8a:5d:f2:7a:7e:3a:
                    77:95:51:03:ba:5b:dd:2f:51:08:79:f3:a7:2a:41:
                    62:73:d6:c5:34:b6:01:b7:4b:be:8c:25:64:f4:f6:
                    45:3d:1b:d1:11:93:68:9a:c0:de:13:5d:7f:bf:a9:
                    09:2a:90:2f:19:76:67:da:1d:ed:e2:14:af:7f:99:
                    8d:f6:54:07:c7:94:d6:01:51:af:c8:80:17:52:60:
                    e2:a5:ed:4b:61:fb:8d:63:e0:66:51:9a:a3:0b:ad:
                    66:54:29:59:5d:16:3b:ce:a2:f2:97:b7:98:bf:b1:
                    b7:d9:c5:21:cb:ac:a9:9d:26:13:69:68:2f:21:d4:
                    07:6e:7f:78:57:76:27:4f:3e:2d:9f:ab:2b:d5:bb:
                    20:fb:6a:a3:39:51:38:26:26:0c:a1:0c:8b:e8:cc:
                    76:27:02:c2:74:7b:1e:b4:35:ff:00:31:0b:57:bb:
                    d0:dd:cf:52:3a:ec:dd:67:b4:1b:7a:2b:87:66:f4:
                    0b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C2:36:CE:61:79:23:EA:C2:31:E0:DC:6F:8D:47:2F:C9:09:ED:34
            X509v3 Authority Key Identifier:
                keyid:49:AB:5D:D1:1D:C9:22:DC:C8:F2:3D:D5:A9:2C:69:94:DD:70:35:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/718673B6BB7F11EC9E187F19C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.24.0/22
                IPv6:
                  2001:dce:8::-2001:dce:a:ffff:ffff:ffff:ffff:ffff
                  2001:dce:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:03:d4:20:71:d5:a4:e2:e7:4d:7c:a2:e3:ee:b1:1c:8b:f9:
         a1:1b:b7:f7:83:87:c6:8e:76:4d:49:16:ba:0c:1b:4c:0d:c4:
         3d:7e:52:b3:7e:a1:a1:88:c4:38:d4:3c:ea:19:db:68:7f:08:
         14:3a:3b:0f:4d:63:3e:b9:df:cb:42:b2:61:2e:43:bf:2a:4e:
         35:f9:38:99:67:df:99:95:2a:65:b7:ed:e8:fd:4e:df:ff:3c:
         fc:6d:0f:48:c5:12:21:f2:b0:1f:bf:e7:e6:4e:7a:eb:c0:c6:
         72:84:67:e4:3b:30:19:fd:f1:14:4b:49:3f:ce:99:98:f6:22:
         c7:48:e4:31:8b:4f:4a:80:46:91:39:2b:e3:48:e1:d0:bc:39:
         5b:ce:c4:93:c2:81:12:1b:7c:73:dc:ca:23:74:2f:2a:80:35:
         d1:fc:0d:9e:eb:77:1c:e4:f1:ce:8a:99:2b:20:88:91:ee:7a:
         34:7a:3b:dd:50:be:2d:cd:6c:50:9c:bf:dd:24:88:93:dd:ff:
         0b:bb:3a:8d:67:fb:24:7b:2a:00:5f:dc:a9:0e:f0:f3:7a:ec:
         33:e1:9b:98:f0:4f:11:6e:6a:62:2b:d1:a2:86:04:8d:cb:d3:
         bf:ba:ed:c0:55:04:44:7c:d4:e2:5e:de:53:19:35:ed:ce:64:
         ef:af:73:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----