Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/946803165E4311ECA7724365C4F9AE02.roa
File:                     946803165E4311ECA7724365C4F9AE02.roa (raw, json)
Hash identifier:          UeIvcD0whm09v8KGGwc3J1jbo9T+ZqpfRaoOo0Vpkaw=
Subject key identifier:   F0:31:A8:10:CB:26:E2:14:F0:54:48:DA:94:97:E0:A7:53:7A:77:1D
Certificate issuer:       /CN=A91316B0/serialNumber=FC74B25C0DAD893E19E522DAD9D9C012EB82F589
Certificate serial:       04
Authority key identifier: FC:74:B2:5C:0D:AD:89:3E:19:E5:22:DA:D9:D9:C0:12:EB:82:F5:89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/946803165E4311ECA7724365C4F9AE02.roa
Signing time:             Thu 16 Dec 2021 07:41:29 +0000
ROA not before:           Thu 16 Dec 2021 07:41:29 +0000
ROA not after:            Thu 02 Mar 2023 00:00:00 +0000
asID:                     137967
IP address blocks:        103.178.31.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91316B0/serialNumber=FC74B25C0DAD893E19E522DAD9D9C012EB82F589
        Validity
            Not Before: Dec 16 07:41:29 2021 GMT
            Not After : Mar  2 00:00:00 2023 GMT
        Subject: CN=61baeda9-57cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1d:ba:6f:68:45:e7:ce:cf:4e:1d:3f:de:0f:
                    19:03:71:76:a4:9e:29:4d:7a:62:58:d7:7a:65:27:
                    60:53:f3:55:4d:95:25:39:ea:28:e6:09:e6:e9:b6:
                    5c:9c:5e:e5:e4:22:b3:c0:46:81:f9:d6:d6:e9:12:
                    88:71:e3:b2:d2:78:48:21:0b:29:25:08:f1:b7:43:
                    0d:24:be:00:dd:6e:16:9b:c8:01:2d:22:0a:63:8d:
                    5a:46:ae:2a:ef:a9:0a:50:0d:4a:68:bf:49:fe:60:
                    f6:da:d9:a9:4d:66:4e:cc:f2:ee:26:54:dd:6d:80:
                    59:34:e7:f4:70:e1:9a:51:46:3b:5e:ee:c1:44:b5:
                    cf:3e:d7:e1:05:c3:ae:40:f4:99:cd:24:40:25:01:
                    1b:04:d4:5b:ec:06:17:93:a8:ba:4e:14:33:01:8f:
                    19:39:be:d9:b7:ea:8a:d5:68:c2:1a:23:49:0b:4b:
                    88:a3:44:16:d7:7a:82:c8:18:ae:e6:76:89:4f:06:
                    71:86:fd:87:59:a1:ee:ec:ef:c2:f5:06:7a:82:14:
                    81:c2:dd:99:8f:1d:86:14:30:8c:9a:9c:38:5f:a9:
                    fe:17:1a:c7:87:2e:fd:f3:ab:11:dd:a8:5a:1c:b2:
                    f1:fc:0c:ac:6a:6e:6c:c6:92:e9:ce:58:49:24:5a:
                    8b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:31:A8:10:CB:26:E2:14:F0:54:48:DA:94:97:E0:A7:53:7A:77:1D
            X509v3 Authority Key Identifier:
                keyid:FC:74:B2:5C:0D:AD:89:3E:19:E5:22:DA:D9:D9:C0:12:EB:82:F5:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/946803165E4311ECA7724365C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:d8:53:89:ad:4f:fb:77:0b:c7:c2:9c:c3:6f:75:91:82:33:
         75:85:cf:ce:62:3b:24:d1:8e:f1:51:bf:77:63:dd:b7:89:a3:
         d3:cc:f1:e1:c8:56:45:46:91:63:47:57:c4:8e:64:ce:8d:c4:
         73:a1:b1:2a:5c:51:a5:8e:11:44:03:50:04:41:a2:cc:6b:88:
         06:60:c6:80:1f:95:ee:42:cc:a1:57:e3:6f:97:fa:da:3e:57:
         c7:19:48:3d:5d:91:03:aa:a1:fe:d0:97:29:15:95:2b:bd:bd:
         20:30:c8:99:64:87:06:aa:a9:4d:c9:ce:f0:54:cd:cf:c4:f4:
         04:9b:c8:d9:58:64:d0:22:23:55:a6:f4:f3:00:ae:c3:b2:76:
         bb:cb:b0:50:c6:8f:75:33:65:50:d1:ec:06:17:a7:4b:26:1f:
         a1:8b:69:ca:5c:e9:28:65:c6:15:cb:35:5c:51:d2:6c:e7:79:
         58:26:c5:19:f5:45:e1:36:ba:b2:61:23:2e:21:1a:7f:c9:f0:
         ee:e0:3e:06:65:80:76:52:d6:66:de:c7:26:01:bf:08:8a:ea:
         3c:cf:f0:e7:c7:99:79:96:15:1a:05:37:7f:25:60:c0:b5:be:
         35:22:a1:fe:88:32:58:78:e1:40:69:17:e9:a1:f3:2e:d8:a9:
         37:42:04:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:36 2023 by rpki-client on console-ams.rpki-client.org