Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/6F2BD65EBBA911ECB5515D5CC4F9AE02.roa
File:                     6F2BD65EBBA911ECB5515D5CC4F9AE02.roa (raw, json)
Hash identifier:          gaTBFeklKoDr5yT5nGiiTePm7IPmhh4KM12/TjSrAEs=
Subject key identifier:   1B:23:8E:AC:9A:24:F3:54:55:2F:82:E9:F4:DB:0F:91:99:BE:94:1D
Certificate issuer:       /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28
Certificate serial:       04
Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/6F2BD65EBBA911ECB5515D5CC4F9AE02.roa
Signing time:             Thu 14 Apr 2022 04:14:53 +0000
ROA not before:           Thu 14 Apr 2022 04:14:53 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     149783
IP address blocks:        103.186.84.0/24 maxlen: 24
                          103.186.85.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28
        Validity
            Not Before: Apr 14 04:14:53 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=62579fbd-ea9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:75:8c:fb:53:59:d9:36:23:44:d4:08:6d:67:
                    8c:43:b7:b2:50:f4:e5:25:4d:71:f9:db:3b:cb:a2:
                    be:83:41:a0:ad:db:72:f5:e5:69:10:91:f6:1e:b7:
                    d4:16:cc:a4:34:16:e9:f5:a3:14:5b:65:5e:bb:9e:
                    66:7e:d1:32:2b:6c:d1:af:01:30:9d:9e:f1:e0:06:
                    44:76:a1:d3:86:46:27:9a:5b:ab:d2:67:26:e8:4e:
                    80:e7:c4:7d:86:e8:f2:10:d3:cb:69:32:b5:44:97:
                    16:99:5e:c1:af:52:be:9a:5d:92:a9:ca:e5:c0:38:
                    f1:c1:b1:66:8c:e5:b1:11:3f:54:fc:e2:4a:00:45:
                    0a:12:ed:9c:ca:b8:7b:95:02:f5:94:c1:0b:a3:0f:
                    5a:9d:11:ca:91:db:83:72:4e:a8:0d:d2:5d:1e:36:
                    68:92:ac:ad:d5:f9:2e:d2:fa:51:47:08:aa:51:2f:
                    df:50:c1:45:67:4d:97:c9:99:db:4a:8c:42:8d:73:
                    d9:b3:0e:d2:df:bb:22:2b:59:2e:1d:cb:1a:5b:a3:
                    4b:25:41:ea:03:57:01:fc:f2:ec:5a:45:79:f5:44:
                    5b:90:36:ed:97:8c:da:e2:13:2a:6d:0f:82:f7:4b:
                    7b:2f:e0:e1:49:24:9a:17:d6:9d:5c:44:7e:7a:c0:
                    56:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:23:8E:AC:9A:24:F3:54:55:2F:82:E9:F4:DB:0F:91:99:BE:94:1D
            X509v3 Authority Key Identifier:
                keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/6F2BD65EBBA911ECB5515D5CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:44:4d:96:5e:bf:f0:c1:ac:56:80:96:d6:44:80:4f:2d:4f:
         8f:8b:bf:12:c8:63:11:fc:fb:3a:b6:1e:88:0c:11:a1:6d:f7:
         d8:e1:b7:bc:61:c2:47:e9:1f:a3:30:f8:5f:11:65:56:57:d7:
         8c:1e:f1:9b:74:5d:1a:cc:b9:44:36:e1:19:33:5b:df:d8:29:
         0f:df:1d:f5:a5:22:23:85:88:b4:87:b2:3f:11:d9:02:6c:c4:
         89:78:d8:e2:57:7d:16:24:08:e1:2f:9a:fa:ee:e1:44:b8:42:
         9d:41:e5:cf:e6:eb:2c:5d:45:53:dd:d0:5a:cf:aa:42:a3:fd:
         b4:98:7f:fa:27:75:1f:4f:8f:18:25:9b:15:ba:4f:e0:8c:5e:
         14:da:e0:93:c5:84:75:37:2d:1b:66:50:3c:58:f8:c7:ed:6b:
         77:fc:19:41:59:5a:36:c2:b0:61:19:44:c0:23:7b:87:a4:d1:
         10:4b:d3:ac:f2:9b:9c:44:23:d0:f0:9e:17:5b:07:f3:68:b5:
         90:9c:13:3d:e8:1b:06:94:d3:31:67:06:d4:fd:7c:0c:ff:e6:
         ff:b6:97:73:75:7c:6b:9e:46:8b:d9:70:0c:aa:4c:c7:fd:b7:
         bb:9b:9f:78:41:b5:1d:c9:f1:3a:c8:85:7a:fb:61:95:0e:2b:
         1d:74:97:3c
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
N0ZDMjExMC8GA1UEBRMoNzNCQTIxQkUzNkREREZENTg2OTAxMTZENkVFQzdCREM3
RUZFRkIyODAeFw0yMjA0MTQwNDE0NTNaFw0yMzA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTYyNTc5ZmJkLWVhOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDYdYz7U1nZNiNE1AhtZ4xDt7JQ9OUlTXH52zvLor6DQaCt23L15WkQkfYet9QW
zKQ0Fun1oxRbZV67nmZ+0TIrbNGvATCdnvHgBkR2odOGRieaW6vSZyboToDnxH2G
6PIQ08tpMrVElxaZXsGvUr6aXZKpyuXAOPHBsWaM5bERP1T84koARQoS7ZzKuHuV
AvWUwQujD1qdEcqR24NyTqgN0l0eNmiSrK3V+S7S+lFHCKpRL99QwUVnTZfJmdtK
jEKNc9mzDtLfuyIrWS4dyxpbo0slQeoDVwH88uxaRXn1RFuQNu2XjNriEyptD4L3
S3sv4OFJJJoX1p1cRH56wFbBAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUGyOOrJok
81RVL4Lp9NsPkZm+lB0wHwYDVR0jBBgwFoAUc7ohvjbd39WGkBFtbux73H7++ygw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3RkMyLzVFMzBCRjcwQkJB
NjExRUNCQUY0MzE1NkM0RjlBRTAyL2M3b2h2amJkMzlXR2tCRnRidXg3M0g3LS15
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYzdvaHZqYmQzOVdHa0JGdGJ1eDczSDctLXlnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
N0ZDMi81RTMwQkY3MEJCQTYxMUVDQkFGNDMxNTZDNEY5QUUwMi82RjJCRDY1RUJC
QTkxMUVDQjU1MTVENUNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWe6VDANBgkqhkiG9w0BAQsFAAOCAQEAnkRNll6/8MGsVoCW
1kSATy1Pj4u/EshjEfz7OrYeiAwRoW332OG3vGHCR+kfozD4XxFlVlfXjB7xm3Rd
Gsy5RDbhGTNb39gpD98d9aUiI4WItIeyPxHZAmzEiXjY4ld9FiQI4S+a+u7hRLhC
nUHlz+brLF1FU93QWs+qQqP9tJh/+id1H0+PGCWbFbpP4IxeFNrgk8WEdTctG2ZQ
PFj4x+1rd/wZQVlaNsKwYRlEwCN7h6TREEvTrPKbnEQj0PCeF1sH82i1kJwTPegb
BpTTMWcG1P18DP/m/7aXc3V8a55Gi9lwDKpMx/23u5ufeEG1HcnxOsiFevthlQ4r
HXSXPA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:57 2024 by rpki-client on console-fra.rpki-client.org