Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/DB612316D36C11ED8F630113C4F9AE02.roa
File:                     DB612316D36C11ED8F630113C4F9AE02.roa (raw, json)
Hash identifier:          gt5FCErSaC93lyNPb/8KHmvuWqML3Vr6QAz4f/t62W0=
Subject key identifier:   15:5C:6A:6C:D6:51:5E:5C:2A:24:7D:FD:1E:F5:2F:6F:73:BD:62:44
Certificate issuer:       /CN=A914EC08/serialNumber=D1B8E671973559020F8703D17DCD892692E640A2
Certificate serial:       44
Authority key identifier: D1:B8:E6:71:97:35:59:02:0F:87:03:D1:7D:CD:89:26:92:E6:40:A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0bjmcZc1WQIPhwPRfc2JJpLmQKI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/DB612316D36C11ED8F630113C4F9AE02.roa
Signing time:             Wed 05 Apr 2023 04:46:41 +0000
ROA not before:           Wed 05 Apr 2023 04:46:41 +0000
ROA not after:            Sun 31 Mar 2024 00:00:00 +0000
asID:                     134475
IP address blocks:        103.73.35.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EC08/serialNumber=D1B8E671973559020F8703D17DCD892692E640A2
        Validity
            Not Before: Apr  5 04:46:41 2023 GMT
            Not After : Mar 31 00:00:00 2024 GMT
        Subject: CN=642cfd31-cc6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7f:24:b0:19:7e:80:c1:72:a5:56:b6:6a:84:
                    0a:f7:af:d2:4f:f4:1f:38:5e:08:eb:16:76:f7:a4:
                    e5:9c:e1:c9:ca:77:63:f0:4b:68:71:b9:a8:1d:8f:
                    bd:6f:4a:77:34:68:a9:83:14:2b:30:81:7e:15:16:
                    bd:d6:4a:95:70:5b:1b:db:7f:ff:06:ee:5c:d2:ec:
                    6f:bb:99:5a:c7:e6:a1:07:22:ca:36:ec:bc:31:d5:
                    4d:c5:03:30:5b:5c:75:7a:21:27:4e:0e:45:91:5d:
                    4d:18:39:b6:60:a4:b1:66:61:dc:58:cb:d7:42:39:
                    1e:4b:3f:ba:93:49:78:e9:59:f1:42:d6:18:c9:ed:
                    4d:9b:6e:d2:8e:a6:41:97:3f:65:ed:aa:32:8f:a7:
                    ee:16:66:e3:73:32:e7:a1:1d:4b:15:6b:f0:e6:a9:
                    44:e2:0b:45:3a:7b:b7:33:c8:56:e7:9c:f3:42:e5:
                    14:8f:86:34:75:2d:38:37:8c:54:a1:b4:3a:ec:9d:
                    5e:d7:9b:69:74:41:46:31:9f:aa:41:78:ae:e3:7f:
                    b0:00:69:ab:c0:69:cf:37:2d:ae:5a:7a:f5:73:de:
                    11:ec:b7:4b:7c:51:63:54:a8:75:c8:d0:0a:50:88:
                    fc:ac:c2:26:e8:0b:bb:b3:57:73:30:54:0d:f6:c6:
                    bc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:5C:6A:6C:D6:51:5E:5C:2A:24:7D:FD:1E:F5:2F:6F:73:BD:62:44
            X509v3 Authority Key Identifier:
                keyid:D1:B8:E6:71:97:35:59:02:0F:87:03:D1:7D:CD:89:26:92:E6:40:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/0bjmcZc1WQIPhwPRfc2JJpLmQKI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0bjmcZc1WQIPhwPRfc2JJpLmQKI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/DB612316D36C11ED8F630113C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:5a:77:dc:9b:10:8c:64:ae:ea:f6:e8:40:00:3e:42:dd:b0:
         66:b1:78:1b:7e:89:f6:88:40:ad:4a:fe:a2:ea:c2:90:a1:4b:
         45:57:63:a5:e7:cf:53:7f:49:2d:fa:9f:82:00:c6:c8:e1:25:
         ca:16:c3:f6:98:98:5f:f1:b2:06:ca:bf:7c:e9:42:06:98:ea:
         29:4a:9c:c8:55:51:4a:ca:1b:00:5f:80:7f:c1:2a:02:29:1d:
         ad:32:d0:c6:3b:c3:3f:b6:d6:c0:df:25:d0:1c:c5:eb:d6:14:
         94:9c:79:14:fc:46:0f:95:73:a3:e1:48:76:9d:4a:98:e2:ab:
         f3:b4:79:a3:4e:e1:e8:0f:3a:5c:fc:97:b8:5c:80:5c:76:6f:
         4e:34:38:1e:07:53:dd:0b:71:d0:fa:d2:2d:c2:14:09:f8:6a:
         f9:2e:53:12:f6:d6:48:29:e0:31:a4:51:34:f4:bc:aa:21:ba:
         ce:fb:cf:65:31:e8:18:cf:45:ef:5f:ce:08:fc:38:51:40:45:
         42:5f:d5:9e:b0:8f:37:30:4b:1a:ae:59:f0:53:be:76:fd:ff:
         a2:1a:e1:51:a1:c3:ad:29:f8:d4:59:c8:5b:46:d4:e4:9e:d2:
         e6:2a:83:27:05:74:e1:3a:0b:79:c3:3e:39:5a:2d:a5:c5:10:
         5f:25:4f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-ams.rpki-client.org