Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/C42AFD98A81511EDA068AB3AC4F9AE02.roa
File:                     C42AFD98A81511EDA068AB3AC4F9AE02.roa (raw, json)
Hash identifier:          lbOFjIv9ghMwLFi9KiQ/be694xNuRqPPAo0Ci7Kys+8=
Subject key identifier:   76:BC:9A:95:EE:CF:90:EA:B0:D2:1C:CF:DE:51:3B:4E:B3:17:ED:5D
Certificate issuer:       /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100
Certificate serial:       7BD2
Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/C42AFD98A81511EDA068AB3AC4F9AE02.roa
Signing time:             Wed 26 Jul 2023 02:16:08 +0000
ROA not before:           Wed 26 Jul 2023 02:16:08 +0000
ROA not after:            Tue 31 Oct 2023 00:00:00 +0000
asID:                     139760
IP address blocks:        202.9.114.128/27 maxlen: 27
                          203.4.212.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31698 (0x7bd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100
        Validity
            Not Before: Jul 26 02:16:08 2023 GMT
            Not After : Oct 31 00:00:00 2023 GMT
        Subject: CN=64c081e7-bd79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2d:57:ee:51:71:99:8c:be:38:f7:b4:ce:5a:
                    60:de:14:1b:72:b3:2e:dc:cf:4c:ab:70:07:1d:e1:
                    65:ff:b2:ee:40:90:d1:7b:6a:7e:5c:ed:74:b5:1b:
                    51:76:70:74:9b:86:fc:06:d0:90:71:cc:ec:f1:fc:
                    ff:7c:1b:3d:5d:2d:5c:c7:bb:d4:e0:3b:61:c2:75:
                    dc:58:23:53:58:0a:d2:f3:dc:d4:1d:79:28:7a:45:
                    cc:b1:cd:86:60:a9:83:39:d1:40:2a:d7:02:52:42:
                    22:f1:46:22:de:c2:a7:cf:aa:92:1e:20:fd:eb:55:
                    6a:d5:2e:a3:42:7d:3d:75:5f:2e:31:d6:21:1c:f8:
                    8f:ec:5f:eb:e7:c0:94:01:5a:3e:88:bb:7c:d1:c8:
                    21:97:55:7f:c7:94:62:74:81:b3:23:d2:83:dc:65:
                    01:28:bc:de:dd:b0:91:a3:bd:9c:fa:41:dd:4f:a7:
                    c7:3e:44:67:96:b0:6f:18:dd:10:ba:f3:f5:5e:b6:
                    36:66:92:c7:83:35:b9:ac:fb:8a:6c:84:da:9c:a1:
                    15:d8:19:56:c8:92:8e:42:f4:9a:fe:eb:4b:dc:f1:
                    48:d1:e2:6c:f1:05:a3:0f:d3:b2:50:79:87:28:cf:
                    04:07:58:68:d4:6a:53:fe:87:c9:29:af:e9:b2:68:
                    f7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:BC:9A:95:EE:CF:90:EA:B0:D2:1C:CF:DE:51:3B:4E:B3:17:ED:5D
            X509v3 Authority Key Identifier:
                keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/C42AFD98A81511EDA068AB3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.9.114.128/27
                  203.4.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:bc:c7:be:19:c5:b6:a8:43:25:0e:7f:c2:6b:ab:7b:aa:a6:
         d8:8e:75:97:41:75:a0:40:4e:9a:48:74:4b:f3:83:51:8c:2d:
         50:19:59:ed:7a:88:b7:74:70:8b:65:02:eb:79:a8:49:6d:ba:
         5e:5f:56:ba:a7:97:d6:8c:dc:a7:4f:db:a4:8a:19:f8:6f:2c:
         98:48:a7:43:91:f3:7e:41:01:5e:0f:41:88:fb:8a:6d:a0:dc:
         7e:0e:d3:32:b4:6d:80:74:8f:0a:d7:1b:38:96:1a:49:f4:7b:
         62:ee:fd:75:26:10:73:87:90:8c:e6:1d:25:f7:bc:88:13:ba:
         cb:da:3c:39:39:7e:d5:8c:4b:a0:3e:17:62:65:5a:63:9c:7a:
         76:32:de:26:45:4a:59:93:52:6d:5d:b6:11:90:ff:d3:a2:1b:
         cb:64:bb:8c:b1:50:cf:a2:51:96:07:15:6b:f3:9f:cc:a9:05:
         7d:f5:f1:9f:8d:42:09:64:28:7c:6a:71:39:78:4c:3b:07:d7:
         33:bf:86:1f:94:97:bf:94:42:6d:e5:08:03:4f:f6:9b:c3:bc:
         fb:b2:8f:81:22:44:a4:d5:cb:2c:a6:6a:0d:7b:d5:c9:c9:b2:
         a6:6c:58:14:dc:50:6c:b3:e8:96:ca:73:48:ca:74:75:a2:6e:
         36:96:71:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:02 2024 by rpki-client on console-fra.rpki-client.org