Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A916C75D0000/0/323430373a636463303a656666303a3a2f34382d3438203d3e20313532373034.roa
File:                     323430373a636463303a656666303a3a2f34382d3438203d3e20313532373034.roa (raw, json)
Hash identifier:          hga7PszpptMHyDnmi7wv0nma/yqJE5N8azLNtIyeZFM=
Subject key identifier:   0B:D6:D5:85:51:F5:0E:04:42:B1:E9:21:60:39:D9:FC:CB:A2:44:A0
Certificate issuer:       /CN=A916C75D0000/serialNumber=492C94B5D5EC5F8E371BA1D7C081A711B8E26A6D
Certificate serial:       665A20476BBADE898C0FEB1D0BB86CE3C3422D53
Authority key identifier: 49:2C:94:B5:D5:EC:5F:8E:37:1B:A1:D7:C0:81:A7:11:B8:E2:6A:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSyUtdXsX443G6HXwIGnEbjiam0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A916C75D0000/0/323430373a636463303a656666303a3a2f34382d3438203d3e20313532373034.roa
Signing time:             Wed 26 Jun 2024 14:33:12 +0000
ROA not before:           Wed 26 Jun 2024 14:28:12 +0000
ROA not after:            Wed 25 Jun 2025 14:33:12 +0000
asID:                     152704
IP address blocks:        2407:cdc0:eff0::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:5a:20:47:6b:ba:de:89:8c:0f:eb:1d:0b:b8:6c:e3:c3:42:2d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C75D0000/serialNumber=492C94B5D5EC5F8E371BA1D7C081A711B8E26A6D
        Validity
            Not Before: Jun 26 14:28:12 2024 GMT
            Not After : Jun 25 14:33:12 2025 GMT
        Subject: CN=0BD6D58551F50E0442B1E9216039D9FCCBA244A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6b:1f:2b:bc:5b:2e:0d:4f:70:4b:c6:7a:79:
                    7f:04:88:79:6d:73:83:d8:76:8a:d0:a5:e3:3e:d9:
                    92:33:70:f8:65:20:c2:83:34:a5:82:c2:63:db:e5:
                    a8:99:62:21:73:82:f1:7c:55:d8:9c:8a:16:e7:ca:
                    da:28:22:d7:45:54:bb:87:6f:3a:e9:0a:58:9a:a1:
                    8d:30:77:86:e9:f2:ce:90:ee:ab:b4:51:f0:8c:aa:
                    ad:88:91:69:31:b7:6e:28:87:2e:f1:5f:30:cc:0b:
                    d3:f2:f2:dc:27:93:d1:c2:5b:16:26:7a:ca:a8:78:
                    ea:68:4e:98:fe:e8:eb:6f:db:a7:a2:31:cd:7d:6b:
                    65:97:f9:8e:60:c2:1a:25:da:13:b1:b4:87:13:a1:
                    f9:47:4d:ac:75:81:e6:b3:3d:9a:20:e6:35:5b:f6:
                    a5:4c:be:4f:13:6e:c0:83:84:39:2c:f5:2e:f6:22:
                    50:16:4b:93:47:9a:70:c5:55:48:85:80:c6:f1:02:
                    b6:6e:e9:a9:ae:08:52:47:e9:dd:fd:19:14:5f:51:
                    5f:90:50:04:91:34:fa:f9:23:5f:c5:46:c3:92:2a:
                    e5:18:89:b0:b6:fe:a4:ea:1a:97:e3:eb:c9:f4:67:
                    61:b7:5c:05:52:be:03:4e:f9:bd:53:b3:ef:4a:26:
                    bf:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D6:D5:85:51:F5:0E:04:42:B1:E9:21:60:39:D9:FC:CB:A2:44:A0
            X509v3 Authority Key Identifier:
                keyid:49:2C:94:B5:D5:EC:5F:8E:37:1B:A1:D7:C0:81:A7:11:B8:E2:6A:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A916C75D0000/0/492C94B5D5EC5F8E371BA1D7C081A711B8E26A6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSyUtdXsX443G6HXwIGnEbjiam0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A916C75D0000/0/323430373a636463303a656666303a3a2f34382d3438203d3e20313532373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:cdc0:eff0::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:96:bb:1a:dc:93:f6:a7:19:76:49:5b:c4:11:eb:99:f5:67:
         bd:b1:98:1d:7e:fd:29:58:39:91:a3:0c:76:92:7c:5e:ae:d6:
         44:ee:69:51:77:29:45:77:fe:a1:3c:8d:33:26:1a:a2:3d:8d:
         90:7d:76:cb:6a:73:9f:fb:7c:e4:66:31:9f:7f:fe:6f:80:1c:
         b7:67:a4:bc:af:df:89:be:22:38:0d:f6:f9:17:62:c3:f7:ab:
         92:75:a8:82:a7:27:6c:54:e6:c6:8e:79:71:48:40:a7:c6:55:
         32:99:d2:53:5e:87:e9:73:b9:1f:f6:c8:84:cb:ee:c2:4a:9f:
         ce:82:ab:72:f9:7e:ca:bf:ad:46:d7:ad:c8:22:6f:39:10:54:
         4a:2b:2d:20:ca:08:9e:e0:b4:26:ff:94:4c:7f:84:dd:d8:3b:
         ac:a7:a1:4b:ab:ed:04:4e:ec:42:9d:7c:2c:43:ce:fb:c5:a3:
         46:bd:c1:98:8d:62:4e:c8:57:f0:33:26:28:b1:64:14:d4:dc:
         6a:bc:a0:59:0b:45:f5:a5:da:1a:49:c6:59:de:03:79:9e:ff:
         92:cf:3d:0e:41:d0:33:ad:b3:a6:6e:d3:8b:ae:bf:04:c6:e6:
         10:62:a3:97:2e:af:5d:c3:d9:ee:6f:da:1c:87:8d:4d:55:ad:
         9c:a3:18:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----