Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/3/323030313a6466303a3230363a3a2f34382d3438203d3e203337393930.roa
File:                     323030313a6466303a3230363a3a2f34382d3438203d3e203337393930.roa (raw, json)
Hash identifier:          ZwC3/xpvwhFW9owX791hDufwh79YCQgvkbzA8LlrLz0=
Subject key identifier:   AD:FA:D8:36:8E:D1:25:0E:9E:FB:50:87:C3:76:DE:9D:7E:45:0A:F2
Certificate issuer:       /CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Certificate serial:       55015A2B9C3E73E840804D52433AB4B3D63AF63D
Authority key identifier: B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/3/323030313a6466303a3230363a3a2f34382d3438203d3e203337393930.roa
Signing time:             Sun 03 Dec 2023 04:12:06 +0000
ROA not before:           Sun 03 Dec 2023 04:07:06 +0000
ROA not after:            Sun 01 Dec 2024 04:12:06 +0000
asID:                     37990
IP address blocks:        2001:df0:206::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:01:5a:2b:9c:3e:73:e8:40:80:4d:52:43:3a:b4:b3:d6:3a:f6:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
        Validity
            Not Before: Dec  3 04:07:06 2023 GMT
            Not After : Dec  1 04:12:06 2024 GMT
        Subject: CN=ADFAD8368ED1250E9EFB5087C376DE9D7E450AF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f2:3a:ab:20:e4:be:2b:3e:d0:33:8f:39:97:
                    75:5f:9c:e2:01:b8:d3:3d:97:dc:db:0a:32:e7:76:
                    4a:c0:7e:83:0b:81:67:4b:19:d1:82:91:96:39:d5:
                    d2:7f:a8:41:bc:99:8d:74:a8:16:4e:87:42:db:7d:
                    8a:65:25:86:1e:1e:e5:28:f7:45:ab:43:82:71:98:
                    41:cb:2c:ec:5f:25:da:80:e3:d9:11:56:a7:2f:c0:
                    29:d5:36:41:69:a2:23:a4:49:a8:81:35:9d:37:54:
                    1e:48:09:8d:7b:1f:4f:6c:77:cd:46:6b:94:0c:3a:
                    72:7d:28:5f:c1:a0:68:ba:97:44:d7:28:2d:65:fa:
                    87:68:1e:68:f1:91:4c:cd:53:c8:a8:ae:a0:ff:cf:
                    c4:2d:b7:7a:99:c7:06:31:51:f1:64:0e:e3:e2:43:
                    55:2b:9d:cb:4f:e1:58:6f:a7:b7:27:de:b9:1f:1a:
                    c5:49:5f:ee:64:c5:2e:cc:bf:89:d3:f1:9b:e5:a3:
                    d7:f8:ea:da:cc:88:d4:2e:71:ee:c6:bd:e8:f7:56:
                    0b:e9:ad:e4:3b:aa:f6:99:29:3a:a7:08:12:17:62:
                    67:3d:8f:3b:75:7d:c1:ac:13:a1:df:a2:94:3b:da:
                    59:34:cb:92:18:ae:dd:10:63:fa:ed:d0:2d:96:7e:
                    17:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:FA:D8:36:8E:D1:25:0E:9E:FB:50:87:C3:76:DE:9D:7E:45:0A:F2
            X509v3 Authority Key Identifier:
                keyid:B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/323030313a6466303a3230363a3a2f34382d3438203d3e203337393930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:206::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:9d:13:ea:9f:07:bb:9b:c8:87:5c:19:18:ed:b4:b2:c1:15:
         e1:f9:e3:00:8d:7d:8a:9c:7d:13:13:06:61:1e:c2:22:6b:67:
         d9:0b:b8:b7:29:d3:dc:e8:74:d3:25:f0:d6:15:28:87:ac:c0:
         8e:22:b4:20:fd:7b:54:42:66:d3:bb:8e:49:41:94:81:57:39:
         03:6c:f6:8a:4a:a2:2f:5d:9b:37:e2:79:4f:54:87:be:e0:0e:
         fb:fc:eb:3e:ab:3e:68:42:28:ab:19:1d:5a:77:41:18:5e:46:
         c2:41:62:38:9a:6e:bd:23:87:7a:86:b1:df:69:a5:06:cd:47:
         92:25:dc:73:b3:6f:d8:64:3d:06:4b:eb:b3:ca:2c:80:ad:b1:
         c7:40:ea:82:cf:87:ed:c9:4b:a2:14:1f:59:6f:ce:d6:1f:70:
         e1:57:48:90:2b:0a:f3:33:2f:e9:db:59:b8:04:70:b3:23:87:
         e8:3e:c6:01:1f:89:31:83:c2:2f:00:81:4e:4b:57:da:ad:39:
         7f:4c:19:1c:be:70:2f:be:9a:df:b6:3e:93:c5:b5:eb:b9:04:
         9b:e1:5f:d6:95:df:93:69:73:f2:ed:b4:f4:04:f8:64:6c:aa:
         e2:3c:16:f1:41:42:2a:87:11:c6:fc:ce:fd:51:43:a7:5c:d0:
         82:d0:16:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----