Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/26FDBC6410CA11ED8FD1E65EC4F9AE02.roa
File:                     26FDBC6410CA11ED8FD1E65EC4F9AE02.roa (raw, json)
Hash identifier:          v8bqNuuFg7M4amwrImCLaWWp0MBfpM8c5jGCIaWN6+8=
Subject key identifier:   62:9D:B6:93:29:CE:C1:35:EA:E1:2E:14:00:F7:DA:48:3B:F1:A6:46
Certificate issuer:       /CN=A914E1C1/serialNumber=E3F3154D988276A2F541E5EA62818C770BBB80EA
Certificate serial:       02
Authority key identifier: E3:F3:15:4D:98:82:76:A2:F5:41:E5:EA:62:81:8C:77:0B:BB:80:EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_MVTZiCdqL1QeXqYoGMdwu7gOo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/26FDBC6410CA11ED8FD1E65EC4F9AE02.roa
Signing time:             Sun 31 Jul 2022 12:13:14 +0000
ROA not before:           Sun 31 Jul 2022 12:13:14 +0000
ROA not after:            Tue 31 Oct 2023 00:00:00 +0000
asID:                     132561
IP address blocks:        103.58.180.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E1C1/serialNumber=E3F3154D988276A2F541E5EA62818C770BBB80EA
        Validity
            Not Before: Jul 31 12:13:14 2022 GMT
            Not After : Oct 31 00:00:00 2023 GMT
        Subject: CN=62e671da-8d90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cc:9b:d2:5b:45:e1:0a:10:73:1e:a5:06:48:
                    56:23:ca:15:25:d6:07:d6:b6:a0:8c:bc:fe:47:44:
                    a3:1e:7e:42:9a:5c:d5:01:56:8f:e1:70:59:4f:0b:
                    b9:a8:2f:19:83:0c:2e:86:68:78:4c:72:41:fa:0c:
                    1f:03:ee:f7:a9:db:3d:04:b7:d3:7b:7e:6d:e8:f3:
                    ce:a2:17:75:bd:93:93:89:65:a9:6d:48:b6:00:a0:
                    a7:83:05:0e:a5:60:ea:04:ba:9f:87:5d:4e:62:22:
                    1f:f9:3e:b9:7a:d5:41:76:2a:f6:92:0c:ec:35:bc:
                    72:93:69:55:a3:c8:68:45:cb:87:18:79:4c:5f:60:
                    3f:d6:ab:ca:bc:d0:10:89:54:c9:42:df:f5:f4:2e:
                    55:f6:07:69:20:d3:c3:cc:a1:35:c8:91:1d:cc:02:
                    1e:d6:74:95:05:b9:f9:a9:38:58:88:d1:aa:7e:15:
                    1a:93:b2:8e:06:3d:a2:ec:f9:49:3e:0d:96:63:b2:
                    44:89:f8:4a:98:d6:f0:b0:65:8c:03:62:d1:33:75:
                    db:9b:fe:bf:6a:d1:4d:28:35:3c:7d:2f:28:57:07:
                    d3:43:d0:0e:84:c1:64:12:45:0d:6a:55:96:06:d4:
                    5f:48:bc:d5:45:cf:99:83:e9:18:c2:91:ef:0b:6e:
                    5a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:9D:B6:93:29:CE:C1:35:EA:E1:2E:14:00:F7:DA:48:3B:F1:A6:46
            X509v3 Authority Key Identifier:
                keyid:E3:F3:15:4D:98:82:76:A2:F5:41:E5:EA:62:81:8C:77:0B:BB:80:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_MVTZiCdqL1QeXqYoGMdwu7gOo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/26FDBC6410CA11ED8FD1E65EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.58.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:5d:90:87:a4:90:91:ed:5a:6f:24:ab:68:6b:c8:f3:b9:18:
         e3:77:ab:82:b2:e8:9b:cc:f1:ac:17:2f:ba:5c:e2:77:09:85:
         8a:df:4b:7a:5a:32:8e:df:0c:fa:35:7f:17:e4:3b:ab:d2:66:
         17:5c:37:b7:41:38:f7:4a:9b:d2:c9:35:08:cd:40:1d:a7:b1:
         96:58:17:99:4e:53:7c:56:2b:7f:ce:5b:56:44:f5:11:80:32:
         68:87:f0:5b:4d:31:f8:6a:44:5d:f7:0d:b8:79:7c:c6:9a:05:
         78:fd:98:63:dc:88:15:c0:77:cd:1d:27:40:33:04:36:4a:06:
         09:48:97:51:78:4e:75:29:53:9c:83:a2:6f:d4:e8:ad:4c:1f:
         d0:c2:89:d1:24:71:af:fc:e6:1d:d1:9a:62:4b:cb:cf:8c:ae:
         ee:42:4b:42:32:cc:36:5b:70:be:ac:77:6d:74:ca:2d:87:38:
         d8:db:7c:fd:33:2a:90:d1:97:0f:57:13:70:6a:ea:8e:3e:95:
         10:43:0c:05:ed:43:98:f0:7b:11:02:75:fe:9b:f7:2e:79:1d:
         2c:84:a5:14:93:99:e3:8b:07:d9:ce:dc:29:67:4b:df:f3:04:
         68:59:f7:a4:5d:dc:d8:ad:1b:a4:30:fe:20:ed:e1:7d:9b:a1:
         fb:a8:33:15
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
RTFDMTExMC8GA1UEBRMoRTNGMzE1NEQ5ODgyNzZBMkY1NDFFNUVBNjI4MThDNzcw
QkJCODBFQTAeFw0yMjA3MzExMjEzMTRaFw0yMzEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTYyZTY3MWRhLThkOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCUzJvSW0XhChBzHqUGSFYjyhUl1gfWtqCMvP5HRKMefkKaXNUBVo/hcFlPC7mo
LxmDDC6GaHhMckH6DB8D7vep2z0Et9N7fm3o886iF3W9k5OJZaltSLYAoKeDBQ6l
YOoEup+HXU5iIh/5Prl61UF2KvaSDOw1vHKTaVWjyGhFy4cYeUxfYD/Wq8q80BCJ
VMlC3/X0LlX2B2kg08PMoTXIkR3MAh7WdJUFufmpOFiI0ap+FRqTso4GPaLs+Uk+
DZZjskSJ+EqY1vCwZYwDYtEzddub/r9q0U0oNTx9LyhXB9ND0A6EwWQSRQ1qVZYG
1F9IvNVFz5mD6RjCke8LblrVAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUYp22kynO
wTXq4S4UAPfaSDvxpkYwHwYDVR0jBBgwFoAU4/MVTZiCdqL1QeXqYoGMdwu7gOow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFMUMxL0RCRTVGMkNBMTBD
NzExRUQ4QkIzQjc1REM0RjlBRTAyLzRfTVZUWmlDZHFMMVFlWHFZb0dNZHd1N2dP
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNF9NVlRaaUNkcUwxUWVYcVlvR01kd3U3Z09vLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTFDMS9EQkU1RjJDQTEwQzcxMUVEOEJCM0I3NURDNEY5QUUwMi8yNkZEQkM2NDEw
Q0ExMUVEOEZEMUU2NUVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWc6tDANBgkqhkiG9w0BAQsFAAOCAQEAkl2Qh6SQke1abySr
aGvI87kY43ergrLom8zxrBcvulzidwmFit9Leloyjt8M+jV/F+Q7q9JmF1w3t0E4
90qb0sk1CM1AHaexllgXmU5TfFYrf85bVkT1EYAyaIfwW00x+GpEXfcNuHl8xpoF
eP2YY9yIFcB3zR0nQDMENkoGCUiXUXhOdSlTnIOib9TorUwf0MKJ0SRxr/zmHdGa
YkvLz4yu7kJLQjLMNltwvqx3bXTKLYc42Nt8/TMqkNGXD1cTcGrqjj6VEEMMBe1D
mPB7EQJ1/pv3LnkdLISlFJOZ44sH2c7cKWdL3/MEaFn3pF3c2K0bpDD+IO3hfZuh
+6gzFQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-ams.rpki-client.org