Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/4/323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa
File:                     323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa (raw, json)
Hash identifier:          r4ECuFZt/L5fS+cZP8XPnWcJahGSY+Jt42LE76pHOT4=
Subject key identifier:   CD:89:64:9E:15:72:B6:B8:58:3F:4E:A3:29:9F:02:9F:DB:0A:F8:34
Certificate issuer:       /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Certificate serial:       29F0519A631F5B97E0E713D684E9F365F57AC966
Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/4/323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa
Signing time:             Sun 03 Nov 2024 05:08:54 +0000
ROA not before:           Sun 03 Nov 2024 05:03:54 +0000
ROA not after:            Sun 02 Nov 2025 05:08:54 +0000
asID:                     9449
IP address blocks:        2403:7e00:f001::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f0:51:9a:63:1f:5b:97:e0:e7:13:d6:84:e9:f3:65:f5:7a:c9:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
        Validity
            Not Before: Nov  3 05:03:54 2024 GMT
            Not After : Nov  2 05:08:54 2025 GMT
        Subject: CN=CD89649E1572B6B8583F4EA3299F029FDB0AF834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7f:b3:70:10:ff:6b:d5:ba:67:26:7e:fe:04:
                    11:19:4e:9f:7c:c7:60:b1:2c:3b:9f:63:e1:a6:01:
                    2e:ed:fd:84:11:08:f7:a2:44:e1:56:6f:d7:e0:94:
                    ab:a7:f1:59:0a:82:b4:bc:c1:b5:36:54:72:bc:fe:
                    c8:81:ae:8e:c6:1d:73:e3:67:16:12:ac:55:02:aa:
                    49:2e:4d:a4:55:ca:83:cd:20:47:68:14:f7:f4:32:
                    99:0d:e7:d8:3e:3c:e9:c2:bd:bc:8f:4e:11:74:f6:
                    8c:aa:7e:18:73:49:42:95:df:62:c7:b0:6d:35:c3:
                    a0:06:c8:30:92:70:6a:01:23:36:24:eb:2c:00:1b:
                    d4:0f:82:38:7d:ab:4c:f7:cd:31:18:df:cc:f5:fe:
                    50:cc:20:d0:2d:0a:49:97:5b:e9:d9:05:96:71:b9:
                    80:67:e1:97:73:d8:14:5e:6f:a0:d5:25:88:ad:a2:
                    f3:33:a7:7e:3e:7a:47:eb:b5:54:7b:8d:53:ae:37:
                    12:bb:52:cb:4d:98:da:2d:08:78:fe:40:99:c2:c4:
                    91:a8:31:d5:5f:1c:75:3c:b1:54:bc:df:7d:3d:b4:
                    8e:ea:dd:ff:ec:79:58:a4:cd:c7:3a:50:3f:da:24:
                    59:81:ea:02:76:8f:5a:8f:79:f7:e5:c3:16:e7:64:
                    c7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:89:64:9E:15:72:B6:B8:58:3F:4E:A3:29:9F:02:9F:DB:0A:F8:34
            X509v3 Authority Key Identifier:
                keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:7e00:f001::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:a2:b3:d6:0b:29:91:5e:10:63:56:99:15:cf:ed:d7:0e:48:
         f9:ff:a5:8b:96:51:1a:16:3e:f2:24:7e:40:2c:84:da:48:9f:
         a5:b3:31:f0:5f:71:81:36:d8:e7:5d:70:41:cf:4e:d6:4c:bf:
         18:20:f7:f8:50:c9:d4:46:16:6b:76:7b:6f:07:ae:a0:d3:8e:
         ba:a8:a5:7c:e9:a7:c1:5b:b2:82:54:97:f8:f6:62:d2:d3:26:
         35:fe:b6:fb:49:a3:44:63:01:9e:68:9b:6b:9a:ea:ad:7e:9a:
         c2:0a:01:58:ed:6c:59:90:a9:1b:84:05:c2:69:99:b3:59:e0:
         71:1e:5d:dd:7d:0a:af:63:a4:22:20:b7:0b:ef:ac:3d:3f:cc:
         d9:8e:e6:00:dd:e6:7c:27:9d:c7:68:b6:42:40:66:da:59:45:
         6b:73:28:30:04:09:20:66:65:67:ae:34:5f:52:ac:b9:69:95:
         e8:c9:b0:36:fb:83:95:4e:29:b4:04:2c:cf:3b:3c:12:9d:d5:
         d7:50:c7:33:15:ac:88:30:7b:80:14:48:4a:ee:79:a0:22:1c:
         0d:e6:91:8d:24:35:d1:c0:f8:2a:d9:7e:0f:a8:16:1b:44:b5:
         71:7d:9a:5a:38:57:2a:93:fd:52:84:86:6b:f2:13:0b:47:35:
         72:b8:1a:31
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUKfBRmmMfW5fg5xPWhOnzZfV6yWYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRTUzOUMwMDAwMTEwLwYDVQQFEyhCNzM1MUIwNUIx
NjE5RTlERTM5NUYwQjJGRkM5RUUxMTI5RjMwMEI0MB4XDTI0MTEwMzA1MDM1NFoX
DTI1MTEwMjA1MDg1NFowMzExMC8GA1UEAxMoQ0Q4OTY0OUUxNTcyQjZCODU4M0Y0
RUEzMjk5RjAyOUZEQjBBRjgzNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMB/s3AQ/2vVumcmfv4EERlOn3zHYLEsO59j4aYBLu39hBEI96JE4VZv1+CU
q6fxWQqCtLzBtTZUcrz+yIGujsYdc+NnFhKsVQKqSS5NpFXKg80gR2gU9/QymQ3n
2D486cK9vI9OEXT2jKp+GHNJQpXfYsewbTXDoAbIMJJwagEjNiTrLAAb1A+COH2r
TPfNMRjfzPX+UMwg0C0KSZdb6dkFlnG5gGfhl3PYFF5voNUliK2i8zOnfj56R+u1
VHuNU643ErtSy02Y2i0IeP5AmcLEkagx1V8cdTyxVLzffT20jurd/+x5WKTNxzpQ
P9okWYHqAnaPWo959+XDFudkx1cCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBTNiWSe
FXK2uFg/TqMpnwKf2wr4NDAfBgNVHSMEGDAWgBS3NRsFsWGeneOV8LL/ye4RKfMA
tDAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvNC9CNzM1MUIw
NUIxNjE5RTlERTM5NUYwQjJGRkM5RUUxMTI5RjMwMEI0LmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi90elViQmJGaG5w
M2psZkN5XzhudUVTbnpBTFEuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYB
BQUHMAuGdXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkx
OTA1MzAwMDAwLzQvMzIzNDMwMzMzYTM3NjUzMDMwM2E2NjMwMzAzMTNhM2EyZjM0
MzgyZDM0MzgyMDNkM2UyMDM5MzQzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAN+APABMA0GCSqG
SIb3DQEBCwUAA4IBAQB7orPWCymRXhBjVpkVz+3XDkj5/6WLllEaFj7yJH5ALITa
SJ+lszHwX3GBNtjnXXBBz07WTL8YIPf4UMnURhZrdntvB66g0466qKV86afBW7KC
VJf49mLS0yY1/rb7SaNEYwGeaJtrmuqtfprCCgFY7WxZkKkbhAXCaZmzWeBxHl3d
fQqvY6QiILcL76w9P8zZjuYA3eZ8J53HaLZCQGbaWUVrcygwBAkgZmVnrjRfUqy5
aZXoybA2+4OVTim0BCzPOzwSndXXUMczFayIMHuAFEhK7nmgIhwN5pGNJDXRwPgq
2X4PqBYbRLVxfZpaOFcqk/1ShIZr8hMLRzVyuBox
-----END CERTIFICATE-----