Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/96100F74ADA811EC8914673DC4F9AE02.roa
File:                     96100F74ADA811EC8914673DC4F9AE02.roa (raw, json)
Hash identifier:          q4ttKCjRjuwVsqPVOrLGUpioAqRRiOzEHyTgtgR33Ak=
Subject key identifier:   12:94:BB:F6:ED:34:85:1B:87:47:51:92:1A:1E:D6:00:92:6D:08:B8
Certificate issuer:       /CN=A9153838/serialNumber=0C9A469988961778E2D11E8AE8A43E48296DAD15
Certificate serial:       DE
Authority key identifier: 0C:9A:46:99:88:96:17:78:E2:D1:1E:8A:E8:A4:3E:48:29:6D:AD:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DJpGmYiWF3ji0R6K6KQ-SCltrRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/96100F74ADA811EC8914673DC4F9AE02.roa
Signing time:             Tue 05 Jul 2022 07:52:42 +0000
ROA not before:           Tue 05 Jul 2022 07:52:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     138336
IP address blocks:        103.184.24.0/23 maxlen: 23
                          103.184.24.0/24 maxlen: 24
                          103.184.25.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153838/serialNumber=0C9A469988961778E2D11E8AE8A43E48296DAD15
        Validity
            Not Before: Jul  5 07:52:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=62c3edca-a099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3c:dd:92:77:17:0a:ba:ee:bb:74:00:e7:cb:
                    06:06:84:11:5b:f4:14:74:0f:96:a6:7b:58:89:57:
                    23:e8:d2:7f:bc:05:d9:ea:e8:d5:41:37:bf:ec:02:
                    fe:97:2b:a7:2c:3d:90:88:5b:0d:30:ac:dc:c4:5f:
                    2f:53:b2:0c:00:55:68:c2:09:f5:b3:a4:87:73:55:
                    db:2b:1d:68:aa:86:13:a7:1e:d2:c3:1e:4d:52:fa:
                    6a:89:96:c5:91:bd:93:2f:1a:6d:0b:45:00:cd:44:
                    29:c3:f8:ae:27:0c:1c:3c:57:f5:3b:0d:ea:0e:8c:
                    79:9a:56:47:12:a1:df:47:a2:02:a3:01:f2:46:91:
                    dc:ea:65:3e:1f:33:75:b3:ad:bb:a4:a3:ff:c2:51:
                    d5:36:43:9d:4d:5d:0b:c7:fd:36:c5:a7:78:ab:cc:
                    a8:f6:55:62:2d:a6:5e:61:13:18:f4:a7:96:16:95:
                    e2:86:ca:33:91:ad:96:28:99:1c:a9:1b:75:49:c4:
                    64:28:ea:77:ff:68:1b:fb:82:97:e4:4e:2c:c2:c7:
                    6c:cb:45:3b:70:25:8e:be:6f:45:d0:b2:7b:a7:96:
                    e8:65:a0:fb:17:7e:1e:5a:e2:35:f3:c6:4f:65:c5:
                    b5:3a:3b:f6:7e:1c:5e:59:46:c5:09:64:60:cb:c3:
                    e8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:94:BB:F6:ED:34:85:1B:87:47:51:92:1A:1E:D6:00:92:6D:08:B8
            X509v3 Authority Key Identifier:
                keyid:0C:9A:46:99:88:96:17:78:E2:D1:1E:8A:E8:A4:3E:48:29:6D:AD:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/DJpGmYiWF3ji0R6K6KQ-SCltrRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DJpGmYiWF3ji0R6K6KQ-SCltrRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/96100F74ADA811EC8914673DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:c9:f2:22:7d:fe:79:bd:6f:54:83:91:c0:b0:75:cf:ae:38:
         88:42:0d:7e:b1:ef:df:b5:ae:c8:79:f9:21:0f:11:35:c7:eb:
         ca:fc:b2:56:53:3a:90:8b:27:37:d2:b0:23:56:50:a9:8c:1c:
         82:bc:a8:a4:63:67:f1:28:26:6e:8a:f0:ad:f2:7f:0e:4d:f0:
         95:c8:cb:95:4f:fe:cb:52:3e:e4:1a:a8:3c:88:4b:a1:08:d5:
         aa:35:fe:21:bf:4a:be:a6:1f:29:1f:eb:52:24:f0:ca:22:bf:
         8f:29:04:33:2b:6e:32:14:40:d2:e6:40:a9:b5:f1:d5:88:b2:
         59:ce:e0:0e:7a:77:0d:24:25:37:f7:7b:f2:58:cc:f5:4b:ab:
         67:6e:a8:75:cb:a6:46:bc:8f:21:6f:f3:a1:38:70:b0:cc:5a:
         8b:fe:c8:b5:2a:c6:0f:51:1d:7a:21:5a:0c:a8:52:8f:68:c2:
         35:ca:31:e9:5f:aa:96:f2:32:c7:26:89:ba:9b:4a:45:1e:95:
         f0:26:8d:09:06:7f:d6:08:1c:d8:f3:ec:f0:5f:60:43:ab:25:
         17:2c:5c:74:9b:50:c0:6a:62:c5:4d:92:69:5e:27:6b:c2:11:
         9d:fb:c6:e0:1d:4f:cc:c0:0c:3a:86:55:0c:10:12:ce:d5:38:
         8a:14:b3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:42 2023 by rpki-client on console-fra.rpki-client.org