Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/76C5241CF47311EC8721C33DC4F9AE02.roa
File:                     76C5241CF47311EC8721C33DC4F9AE02.roa (raw, json)
Hash identifier:          g19FhTBXCPfsej+IJgF1Do8UhJTPPb20EhKNCmaxyOU=
Subject key identifier:   ED:9D:0F:04:6C:2D:B9:BD:F6:2A:C4:EC:01:5B:1A:62:45:D0:93:01
Certificate issuer:       /CN=A91D506C/serialNumber=DD8F3D963FA8D1F22D57F4DFB29ABD70D2558E37
Certificate serial:       0213
Authority key identifier: DD:8F:3D:96:3F:A8:D1:F2:2D:57:F4:DF:B2:9A:BD:70:D2:55:8E:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y89lj-o0fItV_Tfspq9cNJVjjc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/76C5241CF47311EC8721C33DC4F9AE02.roa
Signing time:             Fri 05 Jul 2024 03:24:42 +0000
ROA not before:           Fri 05 Jul 2024 03:24:42 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     149985
IP address blocks:        103.190.34.0/23 maxlen: 23
                          103.190.34.0/24 maxlen: 24
                          103.190.35.0/24 maxlen: 24
                          2001:df0:e340::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 531 (0x213)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D506C/serialNumber=DD8F3D963FA8D1F22D57F4DFB29ABD70D2558E37
        Validity
            Not Before: Jul  5 03:24:42 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=6687677a-052b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ff:51:9c:f5:b9:b2:35:b1:33:86:19:1d:a5:
                    cd:d1:7e:d6:03:1a:b0:f9:13:8e:59:c2:74:64:e0:
                    8f:e3:2a:f0:37:9a:98:2a:f6:5d:03:c8:04:7a:94:
                    e4:b2:30:0a:63:71:8b:f1:4e:e7:42:c6:ad:b9:d1:
                    21:57:f9:4a:b1:8b:04:41:0f:eb:07:93:5b:6b:49:
                    a6:9a:ee:61:a6:ba:2c:f0:c8:19:a6:44:a5:96:73:
                    a1:6f:35:ad:a1:28:b7:2d:0e:37:f1:04:66:db:96:
                    c8:a4:92:7a:bc:17:b5:fb:6e:f1:f1:0e:62:cc:b8:
                    a1:b9:c6:c6:ba:73:7d:b8:e6:18:b0:69:03:e8:a5:
                    4b:58:bc:b9:fc:73:68:3b:ca:da:6c:26:fa:f9:2e:
                    08:cf:2d:f9:c9:26:8c:08:30:d9:bb:5b:ef:f2:1b:
                    74:18:c9:e8:2a:d0:5d:c4:10:f7:f4:16:85:c3:d5:
                    53:e6:6b:4f:3b:cd:c8:fb:15:0c:4a:1d:14:66:4e:
                    13:5e:40:0e:e6:f6:ba:ce:aa:2a:8e:7a:41:c8:ab:
                    d6:9d:43:a8:41:c4:9d:f1:42:bb:74:d6:1f:15:4a:
                    20:33:48:5d:16:91:52:61:0e:08:be:20:d6:27:bd:
                    7f:92:87:7d:b8:bc:77:fb:05:1e:6b:49:71:5c:d8:
                    e2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:9D:0F:04:6C:2D:B9:BD:F6:2A:C4:EC:01:5B:1A:62:45:D0:93:01
            X509v3 Authority Key Identifier:
                keyid:DD:8F:3D:96:3F:A8:D1:F2:2D:57:F4:DF:B2:9A:BD:70:D2:55:8E:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y89lj-o0fItV_Tfspq9cNJVjjc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/76C5241CF47311EC8721C33DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.34.0/23
                IPv6:
                  2001:df0:e340::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:96:bf:b0:0d:72:10:d6:39:78:1d:9d:dd:d6:18:ac:ff:b1:
         a7:92:67:5b:b8:af:02:94:64:a2:f0:24:d5:3f:4b:39:8e:4a:
         2e:87:76:b0:a6:00:50:48:08:22:6d:e5:51:5c:77:8e:5a:63:
         16:7c:12:e8:ac:a6:c0:d1:45:50:2f:e4:6c:80:6c:3b:a2:61:
         a8:ae:86:83:eb:6e:0e:e2:52:86:83:d3:54:ed:5c:b1:98:ce:
         a7:03:38:6e:a1:54:d8:97:43:f5:0b:bd:9d:7a:90:f1:05:0e:
         87:07:59:e4:14:cc:82:c1:d6:dd:87:8b:d2:c6:e5:af:1f:30:
         b8:c8:c4:4a:27:68:dc:b6:4f:bc:ef:76:a2:2a:44:3f:30:ad:
         ea:8a:f0:8d:3c:f5:3a:ed:75:9a:13:29:4e:4e:97:9c:a9:47:
         5a:09:ab:89:98:d4:c0:30:24:59:bc:da:56:c5:a6:c7:6a:c1:
         bf:ea:17:ee:d7:40:29:0c:5d:64:9c:16:7b:5c:b1:99:2b:7a:
         84:bd:68:6c:53:89:55:5e:ff:fe:31:c6:f1:2c:5c:03:e2:62:
         2b:36:88:f4:7f:17:42:f9:2b:78:a7:cf:cd:25:4c:82:2e:c4:
         47:25:66:f1:3a:22:97:89:24:4e:47:ea:d1:6c:84:c5:54:ee:
         27:68:5c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----