Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/D82E5F1ADBC211E99D686940C4F9AE02.roa
File:                     D82E5F1ADBC211E99D686940C4F9AE02.roa (raw, json)
Hash identifier:          At2TYBc2mB9m2KMar1RnpPwLIC3piw2pCnJKYNvU7DI=
Subject key identifier:   E2:F7:D7:25:2F:27:8D:86:01:38:65:9D:B1:12:42:D5:CA:94:ED:16
Certificate issuer:       /CN=A91B6006/serialNumber=12F92E6C72E6CA25C075055B48FE37B65AB6E052
Certificate serial:       125B
Authority key identifier: 12:F9:2E:6C:72:E6:CA:25:C0:75:05:5B:48:FE:37:B6:5A:B6:E0:52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvkubHLmyiXAdQVbSP43tlq24FI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/D82E5F1ADBC211E99D686940C4F9AE02.roa
Signing time:             Tue 24 Sep 2024 17:25:30 +0000
ROA not before:           Tue 24 Sep 2024 17:25:30 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     62597
IP address blocks:        103.35.248.0/24 maxlen: 24
                          103.35.249.0/24 maxlen: 24
                          103.35.250.0/24 maxlen: 24
                          2402:cf80::/32 maxlen: 32
                          2402:cf80::/48 maxlen: 48
                          2402:cf80:100::/44 maxlen: 48
                          2402:cf80:1000::/48 maxlen: 48
                          2402:cf80:1003::/48 maxlen: 48
                          2402:cf80:1004::/48 maxlen: 48
                          2402:cf80:1005::/48 maxlen: 48
                          2402:cf80:1006::/48 maxlen: 48
                          2402:cf80:6259::/48 maxlen: 48
                          2402:cf80:7ffe::/48 maxlen: 48
                          2402:cf80:7fff::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4699 (0x125b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6006/serialNumber=12F92E6C72E6CA25C075055B48FE37B65AB6E052
        Validity
            Not Before: Sep 24 17:25:30 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66f2f60a-80c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:52:6e:3a:dc:b8:a2:a3:97:54:b6:c2:84:e6:
                    3a:8b:ed:7b:6d:1b:92:fe:41:2c:10:ec:a8:94:b1:
                    b1:b8:9d:35:07:c6:40:06:c7:f9:20:23:49:9b:ff:
                    ab:1f:db:92:aa:2b:1c:94:6d:fd:12:dd:15:08:36:
                    5e:b7:f3:f3:2f:12:a3:0d:3a:5c:82:58:9e:c3:da:
                    80:de:55:c3:66:c9:a4:58:e3:9f:87:a1:c3:35:4b:
                    75:06:e3:23:7e:b0:a1:75:b8:fd:e4:4e:35:8c:b2:
                    71:bf:a1:1a:03:5a:ec:78:2a:d0:4c:f8:72:d6:54:
                    aa:a6:7f:7a:9d:78:d5:9f:04:5f:56:4c:10:7b:12:
                    8a:49:ee:40:d4:8f:cc:71:51:01:46:86:6c:d1:fa:
                    e8:51:e4:99:29:18:5d:42:1e:c9:17:8c:2c:33:26:
                    53:bb:fe:a3:9b:59:58:3f:f9:0c:f1:09:81:9a:f5:
                    4e:c7:4d:12:66:d8:b8:17:4c:a4:0b:97:8c:5f:4f:
                    50:76:aa:92:05:95:34:5a:58:e3:66:93:86:7c:5e:
                    ca:f5:15:06:44:ec:97:ae:6c:f7:27:6e:74:2c:b3:
                    0b:b4:05:2e:2e:74:94:80:f9:10:b2:29:4d:24:48:
                    20:30:57:cc:8c:84:3a:9c:c1:9d:5e:9c:b3:17:cb:
                    a5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F7:D7:25:2F:27:8D:86:01:38:65:9D:B1:12:42:D5:CA:94:ED:16
            X509v3 Authority Key Identifier:
                keyid:12:F9:2E:6C:72:E6:CA:25:C0:75:05:5B:48:FE:37:B6:5A:B6:E0:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvkubHLmyiXAdQVbSP43tlq24FI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/D82E5F1ADBC211E99D686940C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.35.248.0-103.35.250.255
                IPv6:
                  2402:cf80::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:9c:af:d3:a5:10:15:f6:02:2e:94:9a:c0:f6:f5:ec:62:18:
         29:52:34:05:46:f3:24:38:fd:19:42:13:65:3a:c7:b4:53:26:
         94:23:93:49:9d:3d:40:83:c5:46:a1:d7:3a:d7:fa:c5:41:54:
         cf:ff:97:a0:71:50:e9:ac:4f:ac:c6:a5:7f:4d:cd:1d:76:aa:
         ef:d0:32:21:0a:67:1c:66:18:ff:81:6b:39:e3:71:35:6b:da:
         82:b6:d5:01:73:82:9c:3f:75:d8:1d:2b:a7:f1:33:74:47:d8:
         19:e6:7c:4d:9d:96:b2:db:97:27:7a:29:09:21:0e:66:75:29:
         af:87:87:c3:66:88:31:75:2e:a6:6d:d2:f2:08:0d:ff:d0:e7:
         9a:b9:62:ba:5b:db:f5:c8:89:31:15:2b:c5:bd:c1:86:3d:87:
         36:54:36:99:80:82:72:64:6a:0a:83:74:45:e9:d6:1d:90:8e:
         22:4e:85:36:71:e7:0b:cc:48:4b:62:db:74:fc:d9:3b:55:7a:
         c9:b2:cd:5b:3b:f8:08:40:47:78:5a:7a:6a:7f:0b:13:21:e4:
         e8:bf:51:b5:84:9c:b6:a3:29:c3:c4:d5:5a:1d:a8:6c:d2:a0:
         c7:c3:58:12:63:82:60:4c:76:c8:e5:9b:73:b1:9f:55:f9:f0:
         d0:d8:6d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----