Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/410520D640B011EE8D704466C4F9AE02.roa
File:                     410520D640B011EE8D704466C4F9AE02.roa (raw, json)
Hash identifier:          Qn7eRJoRs1aKXlFMBCrsm51wCP2kAtexeLa0ZZqZtBY=
Subject key identifier:   14:67:E9:8F:47:68:14:5B:8A:5C:62:47:7F:F1:9B:03:5A:8A:C8:63
Certificate issuer:       /CN=A914EC08/serialNumber=D1B8E671973559020F8703D17DCD892692E640A2
Certificate serial:       93
Authority key identifier: D1:B8:E6:71:97:35:59:02:0F:87:03:D1:7D:CD:89:26:92:E6:40:A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0bjmcZc1WQIPhwPRfc2JJpLmQKI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/410520D640B011EE8D704466C4F9AE02.roa
Signing time:             Tue 22 Aug 2023 05:53:44 +0000
ROA not before:           Tue 22 Aug 2023 05:53:44 +0000
ROA not after:            Sun 31 Mar 2024 00:00:00 +0000
asID:                     149197
IP address blocks:        103.73.34.0/24 maxlen: 24
                          103.73.35.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EC08/serialNumber=D1B8E671973559020F8703D17DCD892692E640A2
        Validity
            Not Before: Aug 22 05:53:44 2023 GMT
            Not After : Mar 31 00:00:00 2024 GMT
        Subject: CN=64e44d68-bdd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:75:b3:cf:30:be:62:d2:e7:8c:47:9b:58:87:
                    3a:ab:d4:08:bf:24:84:cd:3c:ad:a1:77:51:a4:e7:
                    14:f1:02:87:db:49:2b:f3:0e:34:a7:c7:61:27:b1:
                    76:5d:2f:77:6c:e0:5d:4a:8f:98:4b:49:c2:ba:9e:
                    a0:18:78:36:cc:a0:a5:2c:d5:ce:e5:fb:97:ab:ad:
                    b7:87:66:ee:b2:28:b2:20:dc:4f:af:78:02:87:15:
                    8c:c0:cb:23:67:bd:03:9e:bd:7d:8e:23:a5:a3:65:
                    fc:8c:a5:5b:3f:93:8c:78:a4:a3:bf:9b:44:58:c2:
                    3a:da:58:27:4d:f7:ed:72:a2:82:d0:16:f5:c0:05:
                    8c:02:fe:0c:21:76:2d:5d:93:24:ac:9c:13:3f:ae:
                    77:8a:c9:cb:c6:c0:2d:1f:c4:0b:af:f0:07:f1:4e:
                    1b:f8:3f:2e:70:36:e9:84:91:b7:89:cd:e5:1d:eb:
                    6d:9f:91:f5:f6:ba:2b:5f:14:0c:5c:36:36:d4:93:
                    78:fb:38:22:72:3d:1d:5b:76:24:cb:97:35:27:f5:
                    58:4a:6e:2f:ad:54:1c:6f:e3:f6:b0:58:c2:7a:71:
                    df:37:2a:86:11:b7:21:c8:9e:b2:fb:8a:b8:28:e4:
                    4c:11:96:6e:ef:fc:f7:cb:9f:65:da:33:6e:7a:58:
                    ef:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:67:E9:8F:47:68:14:5B:8A:5C:62:47:7F:F1:9B:03:5A:8A:C8:63
            X509v3 Authority Key Identifier:
                keyid:D1:B8:E6:71:97:35:59:02:0F:87:03:D1:7D:CD:89:26:92:E6:40:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/0bjmcZc1WQIPhwPRfc2JJpLmQKI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0bjmcZc1WQIPhwPRfc2JJpLmQKI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/410520D640B011EE8D704466C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bc:62:f9:4e:fb:3f:d5:91:43:93:42:39:02:db:e9:30:bb:e3:
         f9:90:51:80:46:7b:da:90:e6:b1:1a:f1:98:b6:ec:6a:46:fc:
         90:90:83:c6:ef:9b:bd:1a:84:26:3d:84:29:24:12:3f:5c:8c:
         1c:ee:80:cf:15:3d:2d:8d:25:4a:b5:3f:3e:30:f4:38:ce:f8:
         10:1c:31:15:59:67:bf:2c:86:42:d9:a1:fc:65:b1:24:4c:29:
         b8:6a:b6:97:a6:88:c9:67:78:08:c2:7d:49:31:48:a7:1c:24:
         2a:90:bd:1c:1f:bd:82:13:7b:cc:29:10:f8:bf:7d:31:fa:49:
         fa:55:8b:bb:07:32:53:0c:ca:64:b8:b0:73:4f:92:7f:59:bf:
         6d:98:51:85:1c:42:ad:a8:67:21:d5:0a:7b:d0:97:aa:a0:8d:
         fd:05:67:4c:2e:91:45:33:a9:36:8b:5d:d8:9f:3d:c7:c7:52:
         6a:18:64:36:c6:a5:29:ef:0d:f0:6d:a2:fe:6a:5c:05:03:03:
         1e:92:3b:88:a3:29:8d:d5:4c:c0:df:6f:55:8e:02:c1:a3:45:
         9b:1f:db:f9:1f:f7:0a:42:63:d0:b8:9f:9a:d7:c4:2a:de:fc:
         bd:8a:cc:fa:0f:9e:84:3b:74:14:ee:25:20:bb:b4:8f:38:b6:
         9c:86:0d:14
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEVDMDgxMTAvBgNVBAUTKEQxQjhFNjcxOTczNTU5MDIwRjg3MDNEMTdEQ0Q4OTI2
OTJFNjQwQTIwHhcNMjMwODIyMDU1MzQ0WhcNMjQwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGU0NGQ2OC1iZGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzHWzzzC+YtLnjEebWIc6q9QIvySEzTytoXdRpOcU8QKH20kr8w40p8dhJ7F2
XS93bOBdSo+YS0nCup6gGHg2zKClLNXO5fuXq623h2busiiyINxPr3gChxWMwMsj
Z70Dnr19jiOlo2X8jKVbP5OMeKSjv5tEWMI62lgnTfftcqKC0Bb1wAWMAv4MIXYt
XZMkrJwTP653isnLxsAtH8QLr/AH8U4b+D8ucDbphJG3ic3lHettn5H19rorXxQM
XDY21JN4+zgicj0dW3Yky5c1J/VYSm4vrVQcb+P2sFjCenHfNyqGEbchyJ6y+4q4
KORMEZZu7/z3y59l2jNueljvKwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBRn6Y9H
aBRbilxiR3/xmwNaishjMB8GA1UdIwQYMBaAFNG45nGXNVkCD4cD0X3NiSaS5kCi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUMwOC84MTJBMkM1ODdE
M0IxMUVEOThCRjlFNDhDNEY5QUUwMi8wYmptY1pjMVdRSVBod1BSZmMySkpwTG1R
S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBiam1jWmMxV1FJUGh3UFJmYzJKSnBMbVFLSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEVDMDgvODEyQTJDNTg3RDNCMTFFRDk4QkY5RTQ4QzRGOUFFMDIvNDEwNTIwRDY0
MEIwMTFFRThENzA0NDY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnSSIwDQYJKoZIhvcNAQELBQADggEBALxi+U77P9WRQ5NC
OQLb6TC74/mQUYBGe9qQ5rEa8Zi27GpG/JCQg8bvm70ahCY9hCkkEj9cjBzugM8V
PS2NJUq1Pz4w9DjO+BAcMRVZZ78shkLZofxlsSRMKbhqtpemiMlneAjCfUkxSKcc
JCqQvRwfvYITe8wpEPi/fTH6SfpVi7sHMlMMymS4sHNPkn9Zv22YUYUcQq2oZyHV
CnvQl6qgjf0FZ0wukUUzqTaLXdifPcfHUmoYZDbGpSnvDfBtov5qXAUDAx6SO4ij
KY3VTMDfb1WOAsGjRZsf2/kf9wpCY9C4n5rXxCre/L2KzPoPnoQ7dBTuJSC7tI84
tpyGDRQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-ams.rpki-client.org