Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/F531B47AC60411ECA41C213BC4F9AE02.roa
File:                     F531B47AC60411ECA41C213BC4F9AE02.roa (raw, json)
Hash identifier:          YLLKgDlYYJNFMSVf2wjq/vOvn6SkKxyB5SXkor8d0zc=
Subject key identifier:   E8:1B:3E:BA:72:2A:F6:67:47:78:5E:ED:ED:53:75:44:8E:7A:0D:46
Certificate issuer:       /CN=A9110650/serialNumber=78B79CF82751861F279A5FA504931538DADCDAFA
Certificate serial:       02
Authority key identifier: 78:B7:9C:F8:27:51:86:1F:27:9A:5F:A5:04:93:15:38:DA:DC:DA:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eLec-CdRhh8nml-lBJMVONrc2vo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/F531B47AC60411ECA41C213BC4F9AE02.roa
Signing time:             Wed 27 Apr 2022 08:35:14 +0000
ROA not before:           Wed 27 Apr 2022 08:35:14 +0000
ROA not after:            Fri 30 Dec 2022 00:00:00 +0000
asID:                     132742
IP address blocks:        43.243.240.0/22 maxlen: 22
                          103.39.56.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110650/serialNumber=78B79CF82751861F279A5FA504931538DADCDAFA
        Validity
            Not Before: Apr 27 08:35:14 2022 GMT
            Not After : Dec 30 00:00:00 2022 GMT
        Subject: CN=62690042-21fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d3:1e:58:b5:5f:8b:2f:76:53:bc:2c:f0:3b:
                    d6:0c:a6:34:b4:77:27:bc:48:c3:c6:44:91:9a:5d:
                    d9:fe:28:0f:ec:e7:92:2d:94:70:20:8b:98:81:76:
                    66:c7:6e:b8:c3:92:a2:5e:cc:3a:23:a3:ec:36:8b:
                    4e:db:73:cd:c3:d0:e1:3b:22:27:96:0f:ac:05:14:
                    38:e6:8f:fb:2f:49:7f:ad:5f:ca:95:7d:84:d7:0b:
                    47:9c:ef:6b:d1:e0:c4:12:ab:d6:fc:ac:4c:78:50:
                    92:36:2b:96:04:95:7a:c4:53:e1:95:60:64:4c:1f:
                    58:7e:67:e6:89:b7:b8:0a:72:7d:d7:65:1a:8f:01:
                    5b:55:12:cf:21:40:6b:2a:fa:06:2f:3d:a1:c2:ec:
                    6c:80:f7:c9:25:63:7a:14:4e:26:1e:d2:95:7c:b0:
                    52:2e:29:d2:c6:97:e7:f4:e1:3e:2c:bc:49:7e:bd:
                    e0:26:7e:c8:d6:58:b5:9a:19:a1:0b:d3:38:4e:00:
                    f2:77:d6:9a:a6:ea:31:63:4b:01:87:46:79:95:f1:
                    81:ea:e9:5e:87:bb:c3:91:fb:7f:b2:7c:86:c1:4d:
                    ef:fc:8d:a4:d6:87:2f:56:6b:1f:bd:89:de:99:07:
                    3d:c5:33:44:e9:4f:51:0d:af:74:83:a5:35:42:df:
                    6f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:1B:3E:BA:72:2A:F6:67:47:78:5E:ED:ED:53:75:44:8E:7A:0D:46
            X509v3 Authority Key Identifier:
                keyid:78:B7:9C:F8:27:51:86:1F:27:9A:5F:A5:04:93:15:38:DA:DC:DA:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/eLec-CdRhh8nml-lBJMVONrc2vo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eLec-CdRhh8nml-lBJMVONrc2vo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110650/6596CC72C60111ECA38F3410C4F9AE02/F531B47AC60411ECA41C213BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.243.240.0/22
                  103.39.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:32:a9:ec:f0:e1:f4:ef:1a:14:8e:e5:a0:08:a0:f3:9e:b2:
         f7:0a:f3:93:c8:bf:75:5c:9f:c2:be:f5:bf:3e:d3:9c:24:09:
         13:7b:34:5b:42:25:76:d7:90:89:02:99:cd:55:5a:2f:aa:e1:
         0f:6a:4b:79:c0:79:d7:7d:5d:74:89:28:d8:d2:fd:ef:fb:a8:
         74:a4:ae:f5:f6:34:86:be:b1:67:ce:40:3e:70:2d:32:c6:07:
         98:bc:67:07:5f:e5:d2:0d:e0:26:d0:97:06:9d:e7:df:d4:6a:
         27:cf:8d:d7:8c:fe:73:ad:a0:48:f8:c4:e2:e7:72:15:8e:54:
         14:40:09:72:eb:98:0c:61:fd:2c:89:09:ac:73:d6:49:39:04:
         bd:e8:9f:4f:1a:3f:ab:99:c4:24:ac:7f:c4:53:09:31:e8:ec:
         7e:2c:1e:34:48:1f:18:8f:23:b7:d3:ea:f7:a0:2e:43:ef:b2:
         9d:5e:e3:21:1f:b7:6d:cd:ff:ce:5e:07:84:16:48:eb:51:f1:
         ec:8d:b9:e7:9b:7b:8f:99:15:cb:13:a1:5e:73:4b:4a:30:ef:
         f0:95:94:91:21:92:56:87:22:52:8a:b4:b4:7e:cd:8d:c6:2e:
         8e:fb:06:32:e0:6c:34:fb:59:39:5b:ad:2d:ed:2b:06:72:4b:
         06:ca:23:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org