Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A916C75D0000/0/323430373a636463303a656666663a3a2f34382d3438203d3e20313339323939.roa
File:                     323430373a636463303a656666663a3a2f34382d3438203d3e20313339323939.roa (raw, json)
Hash identifier:          LI+xMM2Z+83SkXwr5tNIXM2b6eq/SAyHQdR+AVAq1iY=
Subject key identifier:   C9:77:88:84:EB:BF:E1:C2:85:A1:10:85:35:03:50:F6:7E:17:85:EE
Certificate issuer:       /CN=A916C75D0000/serialNumber=492C94B5D5EC5F8E371BA1D7C081A711B8E26A6D
Certificate serial:       5D21B12FAC268F2985EE9C136870557AA530CEFE
Authority key identifier: 49:2C:94:B5:D5:EC:5F:8E:37:1B:A1:D7:C0:81:A7:11:B8:E2:6A:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSyUtdXsX443G6HXwIGnEbjiam0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A916C75D0000/0/323430373a636463303a656666663a3a2f34382d3438203d3e20313339323939.roa
Signing time:             Wed 19 Jun 2024 13:04:46 +0000
ROA not before:           Wed 19 Jun 2024 12:59:46 +0000
ROA not after:            Wed 18 Jun 2025 13:04:46 +0000
asID:                     139299
IP address blocks:        2407:cdc0:efff::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:21:b1:2f:ac:26:8f:29:85:ee:9c:13:68:70:55:7a:a5:30:ce:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C75D0000/serialNumber=492C94B5D5EC5F8E371BA1D7C081A711B8E26A6D
        Validity
            Not Before: Jun 19 12:59:46 2024 GMT
            Not After : Jun 18 13:04:46 2025 GMT
        Subject: CN=C9778884EBBFE1C285A11085350350F67E1785EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ae:8e:11:ad:7e:42:82:6b:18:bc:10:30:bb:
                    60:a1:ed:39:c6:3c:ee:58:11:7f:90:59:49:28:45:
                    04:7b:38:e0:eb:e2:45:91:93:c4:01:c0:6e:24:d1:
                    d6:1c:e0:96:cd:08:a9:3f:b3:46:28:91:d2:42:f9:
                    34:2a:d8:10:ca:5d:26:e9:70:71:98:62:81:a3:c1:
                    42:66:df:97:6b:53:45:78:b6:04:9f:73:29:c7:fd:
                    a1:bc:22:9d:46:ee:40:99:a8:e8:db:77:04:3b:e0:
                    d5:f9:80:8b:4f:e8:81:94:04:80:53:9e:b0:4a:83:
                    e0:0d:60:60:a2:2d:bf:e5:a7:90:25:e9:79:b6:20:
                    7f:1a:eb:80:fb:f7:3d:36:06:10:a6:88:58:0d:45:
                    4d:74:7f:4b:36:5d:17:7f:43:d8:fb:95:7f:37:29:
                    52:a7:e4:f0:23:b5:ae:e5:69:8e:7d:8d:dd:dd:42:
                    a8:51:19:0b:05:bc:83:cd:7b:87:64:59:fd:db:9b:
                    fb:06:37:16:35:0a:6a:1e:42:e6:9f:21:f7:28:76:
                    3b:2d:81:bd:e5:f8:88:43:0b:f9:2e:0a:2f:6d:0b:
                    04:6b:36:49:33:34:d7:87:bb:57:ce:bf:10:e6:08:
                    01:14:7a:3a:96:60:f7:a5:0c:fb:3b:b9:2c:07:a9:
                    94:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:77:88:84:EB:BF:E1:C2:85:A1:10:85:35:03:50:F6:7E:17:85:EE
            X509v3 Authority Key Identifier:
                keyid:49:2C:94:B5:D5:EC:5F:8E:37:1B:A1:D7:C0:81:A7:11:B8:E2:6A:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A916C75D0000/0/492C94B5D5EC5F8E371BA1D7C081A711B8E26A6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSyUtdXsX443G6HXwIGnEbjiam0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A916C75D0000/0/323430373a636463303a656666663a3a2f34382d3438203d3e20313339323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:cdc0:efff::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:68:99:a0:49:00:d9:f2:cf:a5:14:96:6c:f3:3a:29:3a:84:
         e8:7b:c9:4b:4d:25:38:47:03:7c:ca:e6:40:9e:c5:6c:92:3a:
         7c:1d:93:af:7c:dc:09:4c:75:17:56:80:7f:a1:15:0b:2a:25:
         9d:f6:c5:a6:85:0e:fa:f8:92:30:f8:cf:87:3f:55:64:f0:d5:
         85:53:dc:a4:b3:f8:1c:ac:23:19:a5:0c:1c:60:13:2d:12:74:
         14:41:6d:90:98:3b:16:81:cd:e2:46:31:50:6a:21:2b:e1:ea:
         33:34:8a:55:9c:13:49:7b:ef:e7:d2:38:53:f7:b3:4c:40:b3:
         b8:db:43:19:3e:97:1c:8f:7e:4a:50:5e:7b:5e:d5:78:41:1a:
         0f:c7:1c:a2:0c:53:ce:d3:7a:af:3b:ca:0d:6d:1a:27:ac:0f:
         97:7e:cb:5c:62:09:56:31:f1:ec:11:c4:6b:19:c9:76:99:9f:
         e9:59:1d:89:dc:13:28:f6:b2:50:17:08:08:75:b2:84:76:5d:
         d6:af:6d:54:05:cf:10:a7:40:d8:3b:32:72:c0:5c:75:6e:e7:
         b9:81:64:cc:62:7a:8a:d6:8f:26:24:ce:68:7c:14:87:eb:5b:
         3d:2e:3f:84:d0:f9:eb:b5:30:5d:73:42:b1:1b:7c:3d:ab:af:
         98:6a:af:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----