Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/15CBB402F68811ECBD756649C4F9AE02.roa
File:                     15CBB402F68811ECBD756649C4F9AE02.roa (raw, json)
Hash identifier:          4GFs/gVSp/KLTDRi+lFh8z3gPuGxksruy2GBeS4h2tY=
Subject key identifier:   E1:FF:7F:FE:91:CD:B7:F8:E1:BA:0A:7F:D5:B2:49:19:AD:8B:9A:92
Certificate issuer:       /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Certificate serial:       0869
Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/15CBB402F68811ECBD756649C4F9AE02.roa
Signing time:             Tue 29 Aug 2023 10:57:55 +0000
ROA not before:           Tue 29 Aug 2023 10:57:55 +0000
ROA not after:            Sat 30 Dec 2023 00:00:00 +0000
asID:                     38195
IP address blocks:        27.122.112.0/20 maxlen: 22
                          27.122.112.0/22 maxlen: 24
                          27.122.116.0/23 maxlen: 24
                          27.122.120.0/21 maxlen: 24
                          36.255.112.0/22 maxlen: 22
                          43.245.152.0/24 maxlen: 24
                          43.245.153.0/24 maxlen: 24
                          43.245.154.0/23 maxlen: 24
                          45.113.92.0/22 maxlen: 22
                          45.118.64.0/22 maxlen: 22
                          103.7.48.0/22 maxlen: 24
                          103.21.0.0/22 maxlen: 22
                          103.25.180.0/22 maxlen: 22
                          103.28.160.0/24 maxlen: 24
                          103.29.86.0/23 maxlen: 23
                          103.42.226.0/23 maxlen: 23
                          103.192.192.0/22 maxlen: 22
                          103.200.13.0/24 maxlen: 24
                          103.200.14.0/24 maxlen: 24
                          103.200.15.0/24 maxlen: 24
                          103.224.49.0/24 maxlen: 24
                          103.224.52.0/23 maxlen: 23
                          103.237.16.0/22 maxlen: 22
                          103.248.16.0/22 maxlen: 22
                          111.118.192.0/21 maxlen: 24
                          114.129.184.0/21 maxlen: 21
                          116.255.0.0/18 maxlen: 24
                          119.15.72.0/21 maxlen: 21
                          119.40.104.0/21 maxlen: 21
                          122.199.0.0/18 maxlen: 18
                          123.176.112.0/21 maxlen: 21
                          123.176.119.0/24 maxlen: 24
                          125.63.0.0/19 maxlen: 19
                          125.63.8.0/24 maxlen: 24
                          125.63.24.0/24 maxlen: 24
                          125.63.25.0/24 maxlen: 24
                          125.63.26.0/24 maxlen: 24
                          125.63.27.0/24 maxlen: 24
                          125.63.28.0/24 maxlen: 24
                          125.63.29.0/24 maxlen: 24
                          125.63.30.0/24 maxlen: 24
                          125.253.0.0/18 maxlen: 18
                          125.253.0.0/24 maxlen: 24
                          125.253.1.0/24 maxlen: 24
                          125.253.2.0/24 maxlen: 24
                          125.253.3.0/24 maxlen: 24
                          125.253.4.0/24 maxlen: 24
                          125.253.10.0/24 maxlen: 24
                          125.253.11.0/24 maxlen: 24
                          125.253.15.0/24 maxlen: 24
                          125.253.22.0/23 maxlen: 24
                          125.253.28.0/23 maxlen: 24
                          125.253.39.0/24 maxlen: 24
                          125.253.54.0/24 maxlen: 24
                          125.253.56.0/24 maxlen: 24
                          125.253.57.0/24 maxlen: 24
                          125.253.96.0/20 maxlen: 24
                          163.47.68.0/22 maxlen: 22
                          163.53.144.0/22 maxlen: 24
                          202.63.64.0/20 maxlen: 20
                          202.65.64.0/19 maxlen: 19
                          202.70.129.0/24 maxlen: 24
                          202.80.144.0/21 maxlen: 21
                          202.80.151.0/24 maxlen: 24
                          202.86.112.0/24 maxlen: 24
                          202.86.119.0/24 maxlen: 24
                          202.90.206.0/23 maxlen: 23
                          202.130.192.0/23 maxlen: 23
                          202.130.194.0/24 maxlen: 24
                          202.130.196.0/22 maxlen: 22
                          202.130.197.0/24 maxlen: 24
                          202.130.200.0/23 maxlen: 23
                          202.130.202.0/24 maxlen: 24
                          202.130.204.0/24 maxlen: 24
                          202.130.207.0/24 maxlen: 24
                          202.130.208.0/22 maxlen: 22
                          202.130.212.0/23 maxlen: 23
                          202.130.215.0/24 maxlen: 24
                          202.130.216.0/24 maxlen: 24
                          202.130.218.0/23 maxlen: 23
                          202.130.220.0/22 maxlen: 22
                          202.137.160.0/20 maxlen: 24
                          202.144.160.0/20 maxlen: 20
                          202.144.160.0/24 maxlen: 24
                          202.144.161.0/24 maxlen: 24
                          202.144.162.0/24 maxlen: 24
                          202.144.165.0/24 maxlen: 24
                          202.144.168.0/24 maxlen: 24
                          202.144.170.0/24 maxlen: 24
                          202.144.171.0/24 maxlen: 24
                          202.144.172.0/22 maxlen: 22
                          202.169.96.0/19 maxlen: 19
                          202.171.160.0/19 maxlen: 19
                          202.171.160.0/24 maxlen: 24
                          202.171.166.0/24 maxlen: 24
                          202.171.174.0/24 maxlen: 24
                          202.171.182.0/23 maxlen: 24
                          202.177.40.0/24 maxlen: 24
                          202.177.41.0/24 maxlen: 24
                          202.177.42.0/24 maxlen: 24
                          202.177.43.0/24 maxlen: 24
                          203.10.77.0/24 maxlen: 24
                          203.14.230.0/24 maxlen: 24
                          203.24.182.0/24 maxlen: 24
                          203.25.102.0/24 maxlen: 24
                          203.27.116.0/24 maxlen: 24
                          203.32.82.0/24 maxlen: 24
                          203.33.254.0/24 maxlen: 24
                          203.123.96.0/19 maxlen: 19
                          203.132.64.0/19 maxlen: 19
                          203.132.64.0/24 maxlen: 24
                          203.132.65.0/24 maxlen: 24
                          203.132.66.0/24 maxlen: 24
                          203.132.67.0/24 maxlen: 24
                          203.132.68.0/24 maxlen: 24
                          203.132.69.0/24 maxlen: 24
                          203.132.70.0/24 maxlen: 24
                          203.132.71.0/24 maxlen: 24
                          203.132.72.0/24 maxlen: 24
                          203.132.73.0/24 maxlen: 24
                          203.132.88.0/21 maxlen: 24
                          203.153.16.0/22 maxlen: 22
                          203.153.16.0/24 maxlen: 24
                          203.153.18.0/24 maxlen: 24
                          203.189.4.0/24 maxlen: 24
                          210.5.32.0/21 maxlen: 21
                          220.233.4.0/22 maxlen: 24
                          220.233.8.0/22 maxlen: 24
                          220.233.36.0/22 maxlen: 24
                          220.233.44.0/22 maxlen: 22
                          223.27.64.0/22 maxlen: 22
                          2401:d000::/28 maxlen: 28
                          2404:c600::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2153 (0x869)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
        Validity
            Not Before: Aug 29 10:57:55 2023 GMT
            Not After : Dec 30 00:00:00 2023 GMT
        Subject: CN=64edcf33-18fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:23:f1:6b:0b:5f:5a:4a:4e:68:92:d4:54:ac:
                    4f:20:93:1e:16:af:8e:21:37:4d:08:f7:76:ba:fc:
                    6f:4a:d0:36:e0:fd:25:57:9e:ae:77:05:b5:d7:58:
                    c9:93:dc:ef:ab:c6:b2:40:e9:eb:85:b0:df:3f:0a:
                    98:c4:3b:d5:c4:83:12:59:ee:3f:aa:44:c8:d8:8e:
                    b4:18:20:9c:ed:40:eb:e7:48:51:92:3f:e4:72:67:
                    83:07:0a:23:07:c6:0c:92:0f:94:a9:29:e1:bf:22:
                    b5:10:2b:48:67:49:a4:44:ec:0a:de:b4:28:61:28:
                    67:b0:12:a1:45:1d:6c:c6:f9:53:b0:a3:2d:3a:a3:
                    a5:2f:db:34:7d:28:e7:37:a7:98:1b:25:82:8a:6a:
                    10:fb:f1:81:fe:c3:45:36:c0:38:39:58:5e:ee:39:
                    17:4f:cb:51:e6:ac:c8:95:58:c4:65:8e:b1:47:05:
                    13:c8:51:7d:b6:03:e7:79:0e:2c:63:80:d2:1c:0e:
                    41:98:83:72:aa:67:7d:6d:14:a8:59:3e:a1:b4:3c:
                    ce:db:24:0e:99:f4:fa:a1:8d:25:bf:56:cb:18:35:
                    38:b0:2f:b0:5a:5b:71:58:31:07:36:cd:12:81:46:
                    53:67:f3:e1:1d:96:f8:b8:1b:25:6b:0a:ca:29:a3:
                    bd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:FF:7F:FE:91:CD:B7:F8:E1:BA:0A:7F:D5:B2:49:19:AD:8B:9A:92
            X509v3 Authority Key Identifier:
                keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/15CBB402F68811ECBD756649C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.122.112.0/20
                  36.255.112.0/22
                  43.245.152.0/22
                  45.113.92.0/22
                  45.118.64.0/22
                  103.7.48.0/22
                  103.21.0.0/22
                  103.25.180.0/22
                  103.28.160.0/24
                  103.29.86.0/23
                  103.42.226.0/23
                  103.192.192.0/22
                  103.200.13.0-103.200.15.255
                  103.224.49.0/24
                  103.224.52.0/23
                  103.237.16.0/22
                  103.248.16.0/22
                  111.118.192.0/21
                  114.129.184.0/21
                  116.255.0.0/18
                  119.15.72.0/21
                  119.40.104.0/21
                  122.199.0.0/18
                  123.176.112.0/21
                  125.63.0.0/19
                  125.253.0.0/18
                  125.253.96.0/20
                  163.47.68.0/22
                  163.53.144.0/22
                  202.63.64.0/20
                  202.65.64.0/19
                  202.70.129.0/24
                  202.80.144.0/21
                  202.86.112.0/24
                  202.86.119.0/24
                  202.90.206.0/23
                  202.130.192.0-202.130.194.255
                  202.130.196.0-202.130.202.255
                  202.130.204.0/24
                  202.130.207.0-202.130.213.255
                  202.130.215.0-202.130.216.255
                  202.130.218.0-202.130.223.255
                  202.137.160.0/20
                  202.144.160.0/20
                  202.169.96.0/19
                  202.171.160.0/19
                  202.177.40.0/22
                  203.10.77.0/24
                  203.14.230.0/24
                  203.24.182.0/24
                  203.25.102.0/24
                  203.27.116.0/24
                  203.32.82.0/24
                  203.33.254.0/24
                  203.123.96.0/19
                  203.132.64.0/19
                  203.153.16.0/22
                  203.189.4.0/24
                  210.5.32.0/21
                  220.233.4.0-220.233.11.255
                  220.233.36.0/22
                  220.233.44.0/22
                  223.27.64.0/22
                IPv6:
                  2401:d000::/28
                  2404:c600::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:4c:33:06:ea:13:f3:f1:52:3f:1a:71:c9:22:6b:12:6f:1b:
         1c:56:c5:c1:45:f9:fc:f4:06:a4:f0:42:a7:a0:77:f4:26:d8:
         9b:47:e4:ec:80:c3:fa:a7:60:53:ef:85:46:24:41:39:4c:4f:
         13:5b:8f:0f:de:44:a9:a9:3a:25:8d:35:57:f1:1f:57:f1:65:
         ea:14:3a:45:a4:c1:cb:79:de:13:c6:89:b3:17:54:65:b5:f6:
         e4:c8:73:71:0b:88:56:1d:c3:6e:2e:7b:83:5d:73:f4:ec:3d:
         26:62:ce:a2:b5:d8:f4:20:aa:ef:25:4d:10:4c:4d:09:b4:ed:
         96:b9:f1:6d:04:9e:7f:17:88:e6:7d:11:d5:b2:93:76:ae:cd:
         87:a4:f2:0f:e3:cd:5a:fd:7b:15:13:44:61:cb:af:d5:9e:ce:
         5e:37:8e:c8:ad:a5:9b:9f:57:1b:b1:70:fc:9a:23:f2:63:71:
         01:5d:3a:40:24:48:47:df:39:32:9e:1b:74:a7:b1:79:66:f6:
         5a:4d:5e:5a:de:77:59:8b:7d:05:d3:c4:1e:da:04:b5:92:c3:
         b7:c0:df:b9:73:16:52:79:07:bf:4c:67:f3:f4:1e:7e:15:e3:
         c5:46:25:52:02:a6:96:6c:1d:17:f3:9f:00:0c:97:c3:df:d6:
         16:72:ad:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-ams.rpki-client.org