Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/47AF0A22A45311EDA658083FC4F9AE02.roa
File:                     47AF0A22A45311EDA658083FC4F9AE02.roa (raw, json)
Hash identifier:          vbiu6NFGLITBa4SITAyqGB07tuAZkFnqDopemvvI0og=
Subject key identifier:   A0:52:CD:BE:CD:94:21:41:E4:58:6A:31:1D:EB:EB:66:6B:C2:4B:19
Certificate issuer:       /CN=A911E369/serialNumber=FE1391C0B226C8CEBFA4A2AD6696AE4B82BF7E27
Certificate serial:       18
Authority key identifier: FE:13:91:C0:B2:26:C8:CE:BF:A4:A2:AD:66:96:AE:4B:82:BF:7E:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hORwLImyM6_pKKtZpauS4K_fic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/47AF0A22A45311EDA658083FC4F9AE02.roa
Signing time:             Sat 04 Feb 2023 06:15:11 +0000
ROA not before:           Sat 04 Feb 2023 06:15:11 +0000
ROA not after:            Sun 31 Mar 2024 00:00:00 +0000
asID:                     140849
IP address blocks:        103.60.7.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E369/serialNumber=FE1391C0B226C8CEBFA4A2AD6696AE4B82BF7E27
        Validity
            Not Before: Feb  4 06:15:11 2023 GMT
            Not After : Mar 31 00:00:00 2024 GMT
        Subject: CN=63ddf7ef-c85e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:6a:bf:85:e9:b6:12:a6:7d:90:7b:18:f8:14:
                    6e:84:25:52:8f:19:a1:fc:9a:78:a5:7e:f3:ce:8a:
                    7d:17:9c:eb:e1:da:40:b6:6e:f7:4f:6d:9d:93:fd:
                    ed:35:14:ab:79:36:41:23:14:b9:98:da:be:99:30:
                    5c:31:0f:b5:d8:a5:ce:8f:64:63:24:47:25:3b:ec:
                    35:f8:eb:9d:c3:de:d9:c3:84:da:36:68:28:36:31:
                    ca:47:47:5a:ca:d0:0e:ad:70:bc:3f:56:ed:5c:f4:
                    ea:85:70:4f:f2:8b:94:f0:84:35:90:c4:57:cc:7a:
                    46:27:66:92:23:d2:9c:9a:5a:c4:af:5e:bf:ba:ab:
                    23:2a:e2:3f:1a:89:13:52:23:c1:55:cf:5c:8f:48:
                    01:c0:5a:52:00:6d:52:4b:d2:cc:06:85:48:ac:39:
                    95:3b:ef:bf:3e:d8:53:c8:d8:c2:59:60:58:34:87:
                    cc:45:ae:bf:43:8b:9a:42:08:2c:94:95:2e:55:8a:
                    ea:c7:ef:73:dc:ff:e5:c7:68:98:dd:26:71:47:49:
                    a2:8a:af:11:38:06:64:1c:e4:36:fd:1d:c8:f9:b3:
                    bf:6e:70:80:af:88:cb:ba:02:4f:9a:b7:65:98:a5:
                    53:51:7b:9b:45:90:51:4f:3b:3f:01:ef:17:c9:fe:
                    5f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:52:CD:BE:CD:94:21:41:E4:58:6A:31:1D:EB:EB:66:6B:C2:4B:19
            X509v3 Authority Key Identifier:
                keyid:FE:13:91:C0:B2:26:C8:CE:BF:A4:A2:AD:66:96:AE:4B:82:BF:7E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hORwLImyM6_pKKtZpauS4K_fic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/47AF0A22A45311EDA658083FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:34:b4:2f:8c:75:42:96:6a:a6:07:68:8e:92:f0:68:be:53:
         24:5c:0e:94:3a:6e:79:63:56:26:5d:fe:55:f7:eb:9b:c2:06:
         41:33:f8:d1:ea:e9:12:c0:da:02:1d:63:7a:76:54:d7:79:f9:
         0e:70:98:82:40:8c:41:20:28:07:df:9f:a6:e6:be:d2:0f:46:
         30:9a:23:72:f4:39:9e:a3:14:55:dd:00:32:be:9a:e4:e4:90:
         a7:d8:ba:5d:1e:90:23:5f:73:c1:d7:56:b3:f5:ff:77:c9:f7:
         a1:b4:d5:e4:9d:6f:e9:d3:37:d4:dd:17:22:dc:5a:ba:64:2d:
         5a:4f:68:4e:58:f1:2e:00:39:6f:0e:e9:0f:6f:ec:4f:08:ea:
         a8:ad:7e:1b:0c:92:91:7b:3b:be:1f:b4:31:3f:fe:bf:b2:83:
         31:96:25:bd:d1:1b:37:8d:07:f8:c5:80:d5:ed:03:18:32:c3:
         f6:e4:81:ef:97:13:f5:04:50:7c:6b:d5:05:d3:a7:92:4b:65:
         ec:03:ba:94:48:d6:f9:93:1a:e5:76:a1:4a:9d:87:c6:ef:ae:
         56:46:4f:cb:ab:ed:9b:5e:12:31:fe:7a:0f:e0:16:88:4d:17:
         2e:28:51:15:8b:fa:eb:2d:e1:52:60:28:85:c7:0b:a6:d3:34:
         60:ea:96:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:47 2024 by rpki-client on console-ams.rpki-client.org