Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/AECB680AEDE111EC99675556C4F9AE02.roa
File:                     AECB680AEDE111EC99675556C4F9AE02.roa (raw, json)
Hash identifier:          pnv4rcHNEZuplwfZ63+fNzet07kNRurf7Dw9B4GMpiI=
Subject key identifier:   54:F9:4B:63:04:7C:E5:32:A6:06:0E:9B:F4:6F:37:AD:94:18:C7:DA
Certificate issuer:       /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Certificate serial:       06BB
Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/AECB680AEDE111EC99675556C4F9AE02.roa
Signing time:             Thu 23 Jun 2022 06:03:06 +0000
ROA not before:           Thu 23 Jun 2022 06:03:06 +0000
ROA not after:            Fri 30 Dec 2022 00:00:00 +0000
asID:                     38195
IP address blocks:        27.122.112.0/20 maxlen: 22
                          27.122.112.0/22 maxlen: 24
                          27.122.116.0/23 maxlen: 24
                          27.122.120.0/21 maxlen: 24
                          36.255.112.0/22 maxlen: 22
                          43.245.152.0/24 maxlen: 24
                          43.245.153.0/24 maxlen: 24
                          43.245.154.0/23 maxlen: 24
                          45.113.92.0/22 maxlen: 22
                          45.118.64.0/22 maxlen: 22
                          103.7.48.0/22 maxlen: 24
                          103.21.0.0/22 maxlen: 22
                          103.25.180.0/22 maxlen: 22
                          103.29.86.0/23 maxlen: 23
                          103.42.226.0/23 maxlen: 23
                          103.192.192.0/22 maxlen: 22
                          103.200.13.0/24 maxlen: 24
                          103.200.14.0/24 maxlen: 24
                          103.200.15.0/24 maxlen: 24
                          103.224.49.0/24 maxlen: 24
                          103.224.52.0/23 maxlen: 23
                          103.248.16.0/22 maxlen: 22
                          111.118.192.0/21 maxlen: 24
                          114.129.184.0/21 maxlen: 21
                          116.255.0.0/18 maxlen: 24
                          119.15.72.0/21 maxlen: 21
                          119.40.104.0/21 maxlen: 21
                          122.199.0.0/18 maxlen: 18
                          123.176.119.0/24 maxlen: 24
                          125.63.0.0/19 maxlen: 19
                          125.63.24.0/24 maxlen: 24
                          125.63.25.0/24 maxlen: 24
                          125.63.26.0/24 maxlen: 24
                          125.63.27.0/24 maxlen: 24
                          125.63.28.0/24 maxlen: 24
                          125.63.29.0/24 maxlen: 24
                          125.63.30.0/24 maxlen: 24
                          125.253.0.0/18 maxlen: 18
                          125.253.0.0/24 maxlen: 24
                          125.253.1.0/24 maxlen: 24
                          125.253.2.0/24 maxlen: 24
                          125.253.3.0/24 maxlen: 24
                          125.253.4.0/24 maxlen: 24
                          125.253.10.0/24 maxlen: 24
                          125.253.11.0/24 maxlen: 24
                          125.253.15.0/24 maxlen: 24
                          125.253.20.0/24 maxlen: 24
                          125.253.22.0/23 maxlen: 24
                          125.253.28.0/23 maxlen: 24
                          125.253.39.0/24 maxlen: 24
                          125.253.54.0/24 maxlen: 24
                          125.253.56.0/24 maxlen: 24
                          125.253.57.0/24 maxlen: 24
                          125.253.96.0/20 maxlen: 24
                          163.47.68.0/22 maxlen: 22
                          202.63.64.0/20 maxlen: 20
                          202.65.64.0/19 maxlen: 19
                          202.70.129.0/24 maxlen: 24
                          202.80.144.0/21 maxlen: 21
                          202.80.151.0/24 maxlen: 24
                          202.86.112.0/24 maxlen: 24
                          202.86.119.0/24 maxlen: 24
                          202.90.206.0/23 maxlen: 23
                          202.130.192.0/23 maxlen: 23
                          202.130.194.0/24 maxlen: 24
                          202.130.196.0/22 maxlen: 22
                          202.130.197.0/24 maxlen: 24
                          202.130.200.0/23 maxlen: 23
                          202.130.202.0/24 maxlen: 24
                          202.130.204.0/24 maxlen: 24
                          202.130.207.0/24 maxlen: 24
                          202.130.208.0/22 maxlen: 22
                          202.130.212.0/23 maxlen: 23
                          202.130.215.0/24 maxlen: 24
                          202.130.216.0/24 maxlen: 24
                          202.130.218.0/23 maxlen: 23
                          202.130.220.0/22 maxlen: 22
                          202.137.160.0/20 maxlen: 24
                          202.144.160.0/20 maxlen: 20
                          202.144.160.0/24 maxlen: 24
                          202.144.161.0/24 maxlen: 24
                          202.144.162.0/24 maxlen: 24
                          202.144.165.0/24 maxlen: 24
                          202.144.168.0/24 maxlen: 24
                          202.144.170.0/24 maxlen: 24
                          202.144.171.0/24 maxlen: 24
                          202.144.172.0/22 maxlen: 22
                          202.171.160.0/19 maxlen: 19
                          202.171.160.0/24 maxlen: 24
                          202.171.166.0/24 maxlen: 24
                          202.171.174.0/24 maxlen: 24
                          202.171.182.0/23 maxlen: 24
                          202.177.40.0/24 maxlen: 24
                          202.177.41.0/24 maxlen: 24
                          202.177.42.0/24 maxlen: 24
                          202.177.43.0/24 maxlen: 24
                          203.14.230.0/24 maxlen: 24
                          203.24.182.0/24 maxlen: 24
                          203.25.102.0/24 maxlen: 24
                          203.32.82.0/24 maxlen: 24
                          203.33.254.0/24 maxlen: 24
                          203.123.96.0/19 maxlen: 19
                          203.132.64.0/19 maxlen: 19
                          203.132.64.0/24 maxlen: 24
                          203.132.65.0/24 maxlen: 24
                          203.132.66.0/24 maxlen: 24
                          203.132.67.0/24 maxlen: 24
                          203.132.68.0/24 maxlen: 24
                          203.132.69.0/24 maxlen: 24
                          203.132.70.0/24 maxlen: 24
                          203.132.71.0/24 maxlen: 24
                          203.132.72.0/24 maxlen: 24
                          203.132.73.0/24 maxlen: 24
                          203.132.88.0/21 maxlen: 24
                          203.153.16.0/22 maxlen: 22
                          203.153.16.0/24 maxlen: 24
                          203.153.18.0/24 maxlen: 24
                          210.5.32.0/21 maxlen: 21
                          223.27.64.0/22 maxlen: 22
                          2401:d000::/28 maxlen: 28
                          2404:c600::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1723 (0x6bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
        Validity
            Not Before: Jun 23 06:03:06 2022 GMT
            Not After : Dec 30 00:00:00 2022 GMT
        Subject: CN=62b4021a-7304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:62:7e:81:c3:65:e6:1e:77:0b:c2:86:68:d3:
                    71:a3:fd:8d:7d:f7:13:b6:35:5c:2b:16:f2:60:19:
                    ee:59:58:27:5f:26:27:ac:f9:30:24:65:ee:a7:70:
                    35:b2:92:8a:dd:8e:1f:ed:a0:05:e6:e6:7d:34:37:
                    30:fa:15:c2:e7:8a:7c:ad:83:51:11:44:39:93:96:
                    de:ef:a9:f5:31:f4:b2:16:ea:1d:4f:6e:06:07:87:
                    61:a6:cd:7e:42:93:e6:1b:99:3d:6f:95:4c:f2:de:
                    8d:a5:e6:3c:73:32:d5:62:cc:87:d0:0f:24:dd:a1:
                    8f:50:5f:34:60:dd:c0:07:26:bf:46:b8:6d:73:29:
                    c5:aa:ca:03:16:e4:55:4f:5c:f3:b9:7a:3c:78:7e:
                    c3:90:0c:9a:4c:7f:27:79:ae:d3:5a:23:8a:67:f3:
                    9c:31:6e:b5:0a:4d:d7:97:cf:4b:dd:d6:e1:4c:e9:
                    70:1b:f7:29:2c:d6:8e:7a:6f:2d:c6:45:e3:c7:f6:
                    54:bc:c6:6a:65:6f:65:08:a3:0a:f6:6f:5d:5d:0c:
                    b2:8d:46:85:8c:8c:45:93:a4:ae:88:63:6b:56:fc:
                    84:e4:8d:05:37:f9:f1:c0:fd:e4:1d:71:b8:70:44:
                    fb:07:12:0c:4e:e9:6c:6f:f9:12:8f:ed:2e:64:60:
                    00:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F9:4B:63:04:7C:E5:32:A6:06:0E:9B:F4:6F:37:AD:94:18:C7:DA
            X509v3 Authority Key Identifier:
                keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/AECB680AEDE111EC99675556C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.122.112.0/20
                  36.255.112.0/22
                  43.245.152.0/22
                  45.113.92.0/22
                  45.118.64.0/22
                  103.7.48.0/22
                  103.21.0.0/22
                  103.25.180.0/22
                  103.29.86.0/23
                  103.42.226.0/23
                  103.192.192.0/22
                  103.200.13.0-103.200.15.255
                  103.224.49.0/24
                  103.224.52.0/23
                  103.248.16.0/22
                  111.118.192.0/21
                  114.129.184.0/21
                  116.255.0.0/18
                  119.15.72.0/21
                  119.40.104.0/21
                  122.199.0.0/18
                  123.176.119.0/24
                  125.63.0.0/19
                  125.253.0.0/18
                  125.253.96.0/20
                  163.47.68.0/22
                  202.63.64.0/20
                  202.65.64.0/19
                  202.70.129.0/24
                  202.80.144.0/21
                  202.86.112.0/24
                  202.86.119.0/24
                  202.90.206.0/23
                  202.130.192.0-202.130.194.255
                  202.130.196.0-202.130.202.255
                  202.130.204.0/24
                  202.130.207.0-202.130.213.255
                  202.130.215.0-202.130.216.255
                  202.130.218.0-202.130.223.255
                  202.137.160.0/20
                  202.144.160.0/20
                  202.171.160.0/19
                  202.177.40.0/22
                  203.14.230.0/24
                  203.24.182.0/24
                  203.25.102.0/24
                  203.32.82.0/24
                  203.33.254.0/24
                  203.123.96.0/19
                  203.132.64.0/19
                  203.153.16.0/22
                  210.5.32.0/21
                  223.27.64.0/22
                IPv6:
                  2401:d000::/28
                  2404:c600::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:c8:ab:6a:06:24:d3:16:5e:f4:68:8e:01:f0:3b:72:a4:33:
         17:7c:d9:da:ce:df:9f:a2:f4:7d:db:1f:7c:fe:b1:d0:59:bb:
         a9:77:fb:34:d2:ba:63:83:7e:ff:42:ca:a7:0c:94:e6:50:9b:
         77:ff:3e:db:69:11:6e:fb:27:1d:2d:9e:61:2c:49:89:82:97:
         a2:1b:8d:df:57:bf:b7:6b:42:65:1a:e3:45:9e:c8:b2:51:9c:
         98:41:da:a2:94:9c:42:47:7a:91:2e:05:0b:ab:94:fa:35:ea:
         b3:74:88:28:ce:aa:7f:21:d5:ae:4e:f0:96:b4:8a:2e:3d:8e:
         98:19:fb:b2:d8:36:f8:02:49:99:c4:b7:9d:3c:8d:cf:eb:a5:
         0f:3d:a1:bb:14:c0:da:0e:5b:a0:5b:59:8b:c2:f1:21:c7:8d:
         2f:99:0f:9e:49:57:66:ef:84:bf:f4:b7:20:fc:d8:a8:42:0c:
         db:41:0d:75:da:ba:7c:a0:80:cf:a0:08:b6:fb:0a:29:20:cc:
         a1:fc:42:37:80:6a:d4:cd:ad:e8:74:2c:95:10:35:79:fe:f4:
         f2:1a:e0:57:eb:ec:eb:60:ce:43:c6:3a:5e:1f:d7:69:93:79:
         71:27:86:09:39:f9:71:2d:dd:b0:ea:c3:42:51:0a:d3:f3:79:
         75:55:67:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:41 2023 by rpki-client on console-ams.rpki-client.org