Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A916C75D0000/1/323430313a323132303a3a2f33322d3438203d3e203338313336.roa
File:                     323430313a323132303a3a2f33322d3438203d3e203338313336.roa (raw, json)
Hash identifier:          ogmFNLKzsVErjfQlTox04E6yTQGgoeo/2sqILyEzZSk=
Subject key identifier:   43:51:55:E2:6E:A7:1E:F7:A3:D0:8A:12:C2:65:E0:B4:0A:C3:F9:8A
Certificate issuer:       /CN=A91130000000/serialNumber=E3B1D97CE75EC9867761EB52E2B0EB09AA96B906
Certificate serial:       0929C2ED37C9906D974E2E783ADB488122B232B4
Authority key identifier: E3:B1:D9:7C:E7:5E:C9:86:77:61:EB:52:E2:B0:EB:09:AA:96:B9:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47HZfOdeyYZ3YetS4rDrCaqWuQY.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A916C75D0000/1/323430313a323132303a3a2f33322d3438203d3e203338313336.roa
Signing time:             Wed 26 Jun 2024 02:49:12 +0000
ROA not before:           Wed 26 Jun 2024 02:44:12 +0000
ROA not after:            Wed 25 Jun 2025 02:49:12 +0000
asID:                     38136
IP address blocks:        2401:2120::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:29:c2:ed:37:c9:90:6d:97:4e:2e:78:3a:db:48:81:22:b2:32:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91130000000/serialNumber=E3B1D97CE75EC9867761EB52E2B0EB09AA96B906
        Validity
            Not Before: Jun 26 02:44:12 2024 GMT
            Not After : Jun 25 02:49:12 2025 GMT
        Subject: CN=435155E26EA71EF7A3D08A12C265E0B40AC3F98A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0f:d7:fe:70:f0:11:b7:3b:55:9b:62:a4:83:
                    65:42:95:55:60:ef:7d:19:d2:2b:ba:c9:a7:bc:0a:
                    a9:aa:00:b1:4d:f8:73:6d:01:ab:76:94:0a:d4:68:
                    2e:0a:a5:c2:49:a4:8c:1c:0a:61:61:30:11:27:b0:
                    25:88:80:57:42:f5:d9:1c:f6:d6:60:ba:75:33:ef:
                    57:12:ef:a1:67:6f:a4:64:34:53:a7:fe:de:34:87:
                    25:95:12:84:01:3b:2a:49:a4:88:9d:ba:a0:ee:18:
                    8c:b2:49:01:45:c6:2e:c8:88:43:b0:81:08:f3:0a:
                    65:76:7a:2e:db:68:bc:b4:9c:41:8a:45:37:84:ec:
                    24:03:35:68:6e:b9:6d:f0:66:3f:b7:8d:4e:3d:b8:
                    25:a3:c7:a8:5d:7b:33:7d:2b:8b:98:24:64:05:3e:
                    c0:11:ac:f5:aa:bc:65:2e:3f:11:35:08:e5:51:f4:
                    fe:90:e7:e6:4c:2f:59:30:98:a7:d3:42:2d:c4:48:
                    18:6a:ea:65:14:0f:10:09:1a:73:05:6c:59:14:01:
                    18:e5:a8:02:40:26:2b:cc:a2:03:40:a2:fb:9b:2c:
                    6e:25:cd:c9:2c:e8:88:61:4d:be:0e:75:a7:1c:95:
                    88:a7:9a:e2:e0:cf:f2:c0:51:d5:e8:94:50:ce:e5:
                    78:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:51:55:E2:6E:A7:1E:F7:A3:D0:8A:12:C2:65:E0:B4:0A:C3:F9:8A
            X509v3 Authority Key Identifier:
                keyid:E3:B1:D9:7C:E7:5E:C9:86:77:61:EB:52:E2:B0:EB:09:AA:96:B9:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A916C75D0000/1/E3B1D97CE75EC9867761EB52E2B0EB09AA96B906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47HZfOdeyYZ3YetS4rDrCaqWuQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A916C75D0000/1/323430313a323132303a3a2f33322d3438203d3e203338313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:2120::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:8b:e4:4d:e5:e3:47:53:10:ef:e2:3a:bb:d0:f6:84:fc:9f:
         d5:68:96:52:a9:d4:f5:a9:dd:bc:ca:0b:13:63:2a:53:86:97:
         45:ba:a7:8f:9a:0a:77:9f:3c:50:d2:aa:cf:f4:72:88:a8:de:
         ff:2a:47:c2:66:d6:d9:61:c8:cd:71:e0:89:45:89:69:12:4e:
         a1:c4:94:0e:a2:88:09:84:9b:1d:47:a1:b3:b8:e3:3c:74:8e:
         dd:3c:35:82:44:7d:93:cc:52:9c:6a:2f:ed:95:73:90:ea:ca:
         62:7f:8a:cb:29:85:d9:a7:f2:c0:a6:ba:0a:0f:0b:f3:d6:72:
         6a:b9:49:3d:b4:40:1d:68:f7:30:f0:c0:8e:e2:09:e2:f0:38:
         ef:d3:34:c3:2f:d2:a4:40:75:13:3e:0d:8d:ac:b4:cb:74:2b:
         cf:73:ad:95:a2:fd:fb:af:62:e0:54:d9:17:c4:e3:27:b3:cc:
         f0:37:30:39:4a:89:22:9d:5b:ee:25:71:da:37:b9:92:1d:9e:
         20:d0:9a:16:e5:cf:63:82:f5:97:a7:97:3e:b4:24:4f:71:4c:
         7b:e9:0c:64:07:d2:99:ee:8f:49:f4:8c:df:72:ec:43:f4:d7:
         c6:ec:d4:63:6f:0a:18:1e:df:0c:42:8c:b2:ea:4a:b1:69:35:
         30:83:b0:a0
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgIUCSnC7TfJkG2XTi54OttIgSKyMrQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMTMwMDAwMDAwMTEwLwYDVQQFEyhFM0IxRDk3Q0U3
NUVDOTg2Nzc2MUVCNTJFMkIwRUIwOUFBOTZCOTA2MB4XDTI0MDYyNjAyNDQxMloX
DTI1MDYyNTAyNDkxMlowMzExMC8GA1UEAxMoNDM1MTU1RTI2RUE3MUVGN0EzRDA4
QTEyQzI2NUUwQjQwQUMzRjk4QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANsP1/5w8BG3O1WbYqSDZUKVVWDvfRnSK7rJp7wKqaoAsU34c20Bq3aUCtRo
LgqlwkmkjBwKYWEwESewJYiAV0L12Rz21mC6dTPvVxLvoWdvpGQ0U6f+3jSHJZUS
hAE7KkmkiJ26oO4YjLJJAUXGLsiIQ7CBCPMKZXZ6LttovLScQYpFN4TsJAM1aG65
bfBmP7eNTj24JaPHqF17M30ri5gkZAU+wBGs9aq8ZS4/ETUI5VH0/pDn5kwvWTCY
p9NCLcRIGGrqZRQPEAkacwVsWRQBGOWoAkAmK8yiA0Ci+5ssbiXNySzoiGFNvg51
pxyViKea4uDP8sBR1eiUUM7leOcCAwEAAaOCAhAwggIMMB0GA1UdDgQWBBRDUVXi
bqce96PQihLCZeC0CsP5ijAfBgNVHSMEGDAWgBTjsdl8517Jhndh61LisOsJqpa5
BjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE2Qzc1RDAwMDAvMS9FM0IxRDk3
Q0U3NUVDOTg2Nzc2MUVCNTJFMkIwRUIwOUFBOTZCOTA2LmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi80N0haZk9kZXlZ
WjNZZXRTNHJEckNhcVd1UVkuY2VyMIGJBggrBgEFBQcBCwR9MHsweQYIKwYBBQUH
MAuGbXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxNkM3
NUQwMDAwLzEvMzIzNDMwMzEzYTMyMzEzMjMwM2EzYTJmMzMzMjJkMzQzODIwM2Qz
ZTIwMzMzODMxMzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggr
BgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQBISAwDQYJKoZIhvcNAQELBQADggEB
AH6L5E3l40dTEO/iOrvQ9oT8n9VollKp1PWp3bzKCxNjKlOGl0W6p4+aCnefPFDS
qs/0coio3v8qR8Jm1tlhyM1x4IlFiWkSTqHElA6iiAmEmx1HobO44zx0jt08NYJE
fZPMUpxqL+2Vc5DqymJ/issphdmn8sCmugoPC/PWcmq5ST20QB1o9zDwwI7iCeLw
OO/TNMMv0qRAdRM+DY2stMt0K89zrZWi/fuvYuBU2RfE4yezzPA3MDlKiSKdW+4l
cdo3uZIdniDQmhblz2OC9Zenlz60JE9xTHvpDGQH0pnuj0n0jN9y7EP018bs1GNv
Chge3wxCjLLqSrFpNTCDsKA=
-----END CERTIFICATE-----