Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/4279BBD80C5811EA93151657C4F9AE02.roa
File:                     4279BBD80C5811EA93151657C4F9AE02.roa (raw, json)
Hash identifier:          Qr1MVsMkxlS4uO3yJyCx+P8+r/e/VyB1sxLb8hNLQ/8=
Subject key identifier:   92:74:63:91:A5:33:46:A1:BF:0D:B9:C3:CC:FC:AB:2A:E3:24:0F:08
Certificate issuer:       /CN=A91A8151/serialNumber=5124A04E23AADDA44D94AB0D4AB2C0B7B20BFC75
Certificate serial:       0B81
Authority key identifier: 51:24:A0:4E:23:AA:DD:A4:4D:94:AB:0D:4A:B2:C0:B7:B2:0B:FC:75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USSgTiOq3aRNlKsNSrLAt7IL_HU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/4279BBD80C5811EA93151657C4F9AE02.roa
Signing time:             Wed 26 Jun 2024 19:51:04 +0000
ROA not before:           Wed 26 Jun 2024 19:51:04 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     137889
IP address blocks:        103.116.164.0/22 maxlen: 24
                          2402:fd40::/32 maxlen: 32
                          2402:fd40::/36 maxlen: 36
                          2402:fd40:1000::/36 maxlen: 36
                          2402:fd40:1000::/48 maxlen: 48
                          2402:fd40:1001::/48 maxlen: 48
                          2402:fd40:1002::/48 maxlen: 48
                          2402:fd40:1003::/48 maxlen: 48
                          2402:fd40:1004::/48 maxlen: 48
                          2402:fd40:1005::/48 maxlen: 48
                          2402:fd40:1006::/48 maxlen: 48
                          2402:fd40:1007::/48 maxlen: 48
                          2402:fd40:2000::/36 maxlen: 36
                          2402:fd40:3000::/36 maxlen: 36
                          2402:fd40:4000::/36 maxlen: 36
                          2402:fd40:5000::/36 maxlen: 36
                          2402:fd40:6000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2945 (0xb81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8151/serialNumber=5124A04E23AADDA44D94AB0D4AB2C0B7B20BFC75
        Validity
            Not Before: Jun 26 19:51:04 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=667c7128-15a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:17:ac:75:9f:0c:54:37:1c:4e:77:cc:03:32:
                    3b:16:37:1a:04:6f:08:a2:bc:85:b5:8a:96:18:86:
                    f2:d1:4e:41:37:63:09:e4:f4:28:40:bd:20:de:b2:
                    49:c2:d2:ae:63:3a:14:fa:53:a8:69:87:af:6e:0c:
                    fd:71:2a:11:52:a0:42:cb:ac:9f:a9:32:c3:6b:86:
                    de:51:6b:fa:4b:74:b3:1e:98:a8:3f:94:a3:c0:62:
                    86:83:89:35:70:5a:51:52:d6:da:d6:29:2c:b2:8c:
                    ad:6e:d8:57:e1:7d:4f:1a:79:c0:a5:dd:8b:ab:18:
                    4f:07:99:66:6f:80:3b:92:7f:c1:ef:88:9b:cf:24:
                    53:c3:89:f0:ed:21:b5:3f:3e:4a:54:ad:f1:aa:a6:
                    71:bb:b5:c7:91:be:90:bf:cb:ce:71:cd:22:0d:73:
                    18:4a:65:5c:ec:80:1d:a9:63:c3:b7:74:b6:cc:0a:
                    93:bc:34:38:d9:e9:75:1e:fe:b4:3f:8b:b5:00:80:
                    13:f4:c2:52:70:d1:65:fd:18:7f:dd:a0:14:ba:bd:
                    38:b2:33:71:18:15:0d:22:d6:de:f3:ea:c6:bb:9f:
                    5c:f4:a9:56:4e:15:c7:6c:ed:9b:f2:07:a6:eb:51:
                    69:a7:e5:2f:09:b0:1b:3a:f2:3f:75:e2:f3:aa:b0:
                    94:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:74:63:91:A5:33:46:A1:BF:0D:B9:C3:CC:FC:AB:2A:E3:24:0F:08
            X509v3 Authority Key Identifier:
                keyid:51:24:A0:4E:23:AA:DD:A4:4D:94:AB:0D:4A:B2:C0:B7:B2:0B:FC:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USSgTiOq3aRNlKsNSrLAt7IL_HU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/4279BBD80C5811EA93151657C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.164.0/22
                IPv6:
                  2402:fd40::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:7a:f6:12:0d:e6:9f:6a:84:68:29:e4:0c:58:6d:8b:39:e8:
         22:a6:97:ae:e9:55:a2:32:65:a3:97:93:6f:50:dd:c9:2c:0f:
         44:6e:eb:fa:ab:8d:21:e7:a7:73:02:c8:26:fb:81:ca:bf:9d:
         f0:97:f5:dd:f1:ba:d3:62:cd:f6:d0:b8:45:ae:37:7a:f6:78:
         69:96:47:44:9e:95:b5:7b:28:be:3e:9a:ed:75:6c:e2:12:da:
         99:d9:7b:0d:cf:e6:36:ab:d0:f7:ac:6d:7d:62:e6:1e:fa:aa:
         4c:62:4f:bd:5c:0b:61:6a:92:71:15:3e:51:6e:e9:1b:1b:4a:
         bf:71:b6:39:01:a6:3f:a7:70:c3:1e:fa:34:f8:0a:49:05:0d:
         4f:3e:9e:87:9a:f8:33:98:cc:91:88:4f:fa:39:29:3d:ca:c4:
         24:75:20:50:14:c6:32:ad:7b:09:87:5c:d8:f2:5a:cc:b3:1b:
         09:32:9d:15:b0:7e:29:48:12:92:44:4f:03:6a:92:5e:94:7a:
         dd:88:3a:f8:b5:bc:3e:37:15:04:1f:57:0a:ba:a3:e5:56:d2:
         d8:56:1f:13:b9:d5:5f:93:63:14:4b:f9:51:ad:0f:e7:65:95:
         09:cf:37:69:1e:bc:11:25:3e:bb:ff:31:d6:a9:e7:76:63:c3:
         d2:58:08:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----