Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/F96174ECC27D11EDB8226F2DC4F9AE02.roa
File:                     F96174ECC27D11EDB8226F2DC4F9AE02.roa (raw, json)
Hash identifier:          kXeNIsHETQcXUic6LYufG6XvgVMVgH9sGtHQdmkZT90=
Subject key identifier:   0D:4D:78:5F:3E:FE:B7:D8:C0:87:EC:C6:9E:94:DE:4E:99:1C:10:4F
Certificate issuer:       /CN=A91BB6E3/serialNumber=919FA819B2FFF145521AF664035278E7E7914A49
Certificate serial:       0183
Authority key identifier: 91:9F:A8:19:B2:FF:F1:45:52:1A:F6:64:03:52:78:E7:E7:91:4A:49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kZ-oGbL_8UVSGvZkA1J45-eRSkk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/F96174ECC27D11EDB8226F2DC4F9AE02.roa
Signing time:             Wed 15 Jan 2025 19:16:00 +0000
ROA not before:           Wed 15 Jan 2025 19:16:00 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     150705
IP address blocks:        103.62.148.0/24 maxlen: 24
                          103.62.149.0/24 maxlen: 24
                          2401:dee0::/32 maxlen: 32
                          2401:dee0::/48 maxlen: 48
                          2401:dee0:1::/48 maxlen: 48
                          2401:dee0:2::/48 maxlen: 48
                          2401:dee0:3::/48 maxlen: 48
                          2401:dee0:4::/48 maxlen: 48
                          2401:dee0:5::/48 maxlen: 48
                          2401:dee0:6::/48 maxlen: 48
                          2401:dee0:7::/48 maxlen: 48
                          2401:dee0:8::/48 maxlen: 48
                          2401:dee0:9::/48 maxlen: 48
                          2401:dee0:a::/48 maxlen: 48
                          2401:dee0:b::/48 maxlen: 48
                          2401:dee0:c::/48 maxlen: 48
                          2401:dee0:e::/48 maxlen: 48
                          2401:dee0:f::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB6E3/serialNumber=919FA819B2FFF145521AF664035278E7E7914A49
        Validity
            Not Before: Jan 15 19:16:00 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=6788096f-a6b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b8:62:cd:f2:19:53:83:d9:5b:71:c1:37:d7:
                    62:93:78:9c:ba:f9:24:0e:1e:d5:16:f8:1e:41:f5:
                    54:2a:d6:5e:72:e0:33:bf:2e:c4:06:b5:5c:14:9d:
                    63:05:b7:2a:b1:4e:d8:ea:38:83:1e:bd:64:15:4b:
                    23:22:40:e3:a9:00:df:34:2b:ac:f2:2e:a5:1b:20:
                    b7:27:60:b7:20:60:fa:ae:e8:ab:74:d5:e5:20:b0:
                    19:ba:42:ff:ae:1e:f3:3c:1d:0f:fa:0e:83:72:c5:
                    78:2f:e1:1d:f7:8b:47:26:9c:32:bd:89:80:04:66:
                    30:ee:c7:90:68:0e:ef:5d:61:c0:45:f4:93:84:95:
                    f0:6c:86:90:b6:5b:fd:77:88:a1:6c:67:83:61:34:
                    e1:46:9c:b4:26:93:32:0c:f5:8c:9e:c0:ff:27:ba:
                    eb:b6:f4:bc:b4:8c:a7:64:60:ba:e1:8a:64:83:ec:
                    23:e5:f0:7c:dc:6c:cc:e9:31:4f:41:56:c9:c8:c2:
                    b4:e3:b0:58:f1:7f:28:99:d3:1b:05:13:e1:e0:7d:
                    ce:51:f7:99:b9:f1:26:8b:0b:02:80:91:91:26:ec:
                    c2:55:e8:54:5a:be:ce:4d:02:fa:a3:f0:07:0f:cc:
                    37:72:f3:cc:37:36:68:57:c0:91:24:49:89:f0:5f:
                    5c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:4D:78:5F:3E:FE:B7:D8:C0:87:EC:C6:9E:94:DE:4E:99:1C:10:4F
            X509v3 Authority Key Identifier:
                keyid:91:9F:A8:19:B2:FF:F1:45:52:1A:F6:64:03:52:78:E7:E7:91:4A:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/kZ-oGbL_8UVSGvZkA1J45-eRSkk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kZ-oGbL_8UVSGvZkA1J45-eRSkk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/F96174ECC27D11EDB8226F2DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.62.148.0/23
                IPv6:
                  2401:dee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:3a:d7:75:a5:88:91:45:d7:88:fc:70:04:12:52:86:6e:a3:
         32:27:0d:78:3d:90:0f:33:b9:c1:d7:cf:a9:11:bf:f8:1b:e0:
         31:d4:f5:2c:d6:bd:df:bc:38:d3:99:fc:0e:b1:5d:7b:73:a2:
         a1:f2:f6:ca:71:e2:5b:f7:80:c4:6e:a1:cb:fb:aa:27:e8:cf:
         f3:bb:6f:84:fd:6a:c3:a8:bc:42:b3:45:0e:de:39:cb:f9:18:
         89:0d:43:7b:df:08:74:1c:f3:e7:2a:cd:ad:2a:f2:1e:66:3d:
         82:a6:87:4a:da:af:fa:2c:96:a8:1b:af:2c:3a:55:03:c8:54:
         83:6b:d6:c5:21:ec:fe:e6:c4:8e:26:f1:b3:39:bb:ac:4a:75:
         63:fc:4d:36:e1:05:0c:da:5a:d8:d6:2f:6d:ab:68:32:22:50:
         8c:d2:ac:da:b3:35:a7:48:05:8d:29:d8:87:b5:bb:49:d8:c5:
         08:17:2d:f0:ff:66:8f:13:3f:c1:6a:5c:ec:42:d8:56:84:2e:
         ab:5c:ff:27:30:fd:ee:03:fe:e5:5d:2b:3a:38:fe:fc:a3:ba:
         e6:e6:73:13:57:8c:ca:69:0e:eb:8b:4a:a1:79:c6:1a:1c:b2:
         5f:31:ba:2b:e4:b9:8b:83:6c:4b:19:07:3e:30:77:63:5f:eb:
         1e:6c:38:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----