Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/70253888478111EEAF9EB62EC4F9AE02.roa
File:                     70253888478111EEAF9EB62EC4F9AE02.roa (raw, json)
Hash identifier:          BQWLLp5AImfbBq763vvDpgX+6Q3xmVvjxSK4ih5JSF8=
Subject key identifier:   BB:E9:64:52:43:9D:B5:F2:63:CA:29:4D:0E:B9:F4:32:7B:23:CF:37
Certificate issuer:       /CN=A918CDEC/serialNumber=EB56994352EB01E40E60C78A43B957AE290EF745
Certificate serial:       052E
Authority key identifier: EB:56:99:43:52:EB:01:E4:0E:60:C7:8A:43:B9:57:AE:29:0E:F7:45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/70253888478111EEAF9EB62EC4F9AE02.roa
Signing time:             Fri 21 Jun 2024 00:29:50 +0000
ROA not before:           Fri 21 Jun 2024 00:29:50 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     9291
IP address blocks:        2406:1540:9291::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1326 (0x52e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CDEC
        Validity
            Not Before: Jun 21 00:29:50 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=6674c97e-3b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f8:89:87:21:bd:ba:67:f1:9a:82:93:76:43:
                    67:c9:73:50:0c:f8:30:d3:31:4e:f6:8d:26:98:c5:
                    45:1b:ea:8c:ab:84:1e:4e:32:e0:6d:bc:06:7f:d9:
                    55:5b:4f:1c:5a:0f:c9:18:f0:36:5d:27:57:5c:b9:
                    80:9a:98:47:4e:36:50:d4:22:54:f4:78:86:ba:ae:
                    ed:85:a4:86:f7:a2:cc:39:bd:eb:49:dd:81:45:1b:
                    1a:2e:00:49:7f:c8:a7:87:45:89:65:82:20:0b:df:
                    22:6f:08:30:96:bc:dc:a8:2e:fa:ff:3e:8d:02:23:
                    42:53:91:49:23:a4:ba:e1:a3:c7:b9:ae:ed:6a:b2:
                    dd:c3:86:6b:59:37:2a:c8:14:70:79:f8:8b:c7:8a:
                    35:5e:36:36:41:7f:a0:c2:2f:2a:aa:6e:76:33:68:
                    e4:df:63:3b:10:8f:cf:1e:59:da:87:45:2a:ae:05:
                    80:51:17:94:86:a7:98:a6:61:e6:6e:7e:4b:12:c7:
                    7c:86:a6:fc:7f:5d:0d:cb:6d:3a:b4:73:d2:6e:99:
                    66:91:fa:c2:73:0e:91:72:51:66:c7:6e:be:e6:fe:
                    a2:06:aa:1d:8b:70:2b:fe:6e:6e:2b:41:d0:f0:16:
                    e1:b8:7e:82:97:45:a1:4c:a3:0a:9a:02:45:2b:06:
                    35:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E9:64:52:43:9D:B5:F2:63:CA:29:4D:0E:B9:F4:32:7B:23:CF:37
            X509v3 Authority Key Identifier:
                keyid:EB:56:99:43:52:EB:01:E4:0E:60:C7:8A:43:B9:57:AE:29:0E:F7:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/70253888478111EEAF9EB62EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:1540:9291::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:30:15:b7:c0:89:93:99:90:a4:09:69:83:00:54:dd:80:81:
         44:b5:6a:49:5e:26:e6:08:09:2b:20:af:2c:4c:e8:6a:a2:c9:
         ab:ce:d8:dd:f3:24:98:71:65:21:9a:ef:af:a3:f5:fc:a1:38:
         4d:e5:0e:4a:60:03:dc:f4:d0:06:82:65:ea:c0:2e:9f:00:76:
         e1:09:66:4d:82:fc:81:0d:2f:cb:5f:d4:74:2d:33:48:a9:70:
         6e:89:b9:5a:b0:7a:9e:dd:d3:6f:fd:d7:77:cb:83:f5:2e:0a:
         a0:9e:6c:a5:76:4f:70:db:b2:07:78:ba:91:fc:08:e7:3d:92:
         ff:38:45:a6:31:4a:6f:78:00:b3:da:55:aa:04:13:6d:dc:6e:
         cb:00:05:0c:20:32:94:9e:fe:b2:e5:17:eb:68:b1:6c:26:95:
         5c:be:72:0d:39:97:ad:44:24:d7:06:e6:bf:4c:2c:77:5a:4c:
         2e:9f:d6:f4:01:d2:d4:3d:7e:be:30:e9:ab:a3:33:46:17:c2:
         85:28:8d:00:79:d4:4b:d5:02:a7:99:e7:01:84:24:b2:ed:1e:
         ed:d2:5d:a2:8f:89:c8:72:0a:d0:e6:5f:4e:0b:43:23:94:5c:
         6d:7a:7c:5d:4b:4e:11:7d:6f:74:b8:f6:9a:10:1c:8c:41:97:
         bf:ff:cb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----