Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/612163EC6C7D11ECB194383AC4F9AE02.roa
File:                     612163EC6C7D11ECB194383AC4F9AE02.roa (raw, json)
Hash identifier:          NsLJ3SC0aUTk4yTBOoD/JR4jqHd+4DN1Zckt92qX8Rc=
Subject key identifier:   EF:16:81:B0:32:46:BA:A1:E7:8C:26:D1:5C:9E:DD:EA:7D:79:34:E2
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       31EF
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/612163EC6C7D11ECB194383AC4F9AE02.roa
Signing time:             Fri 25 Mar 2022 08:00:34 +0000
ROA not before:           Fri 25 Mar 2022 08:00:34 +0000
ROA not after:            Fri 01 Jul 2022 00:00:00 +0000
asID:                     38710
IP address blocks:        111.88.0.0/18 maxlen: 19
                          111.88.76.0/24 maxlen: 24
                          111.88.77.0/24 maxlen: 24
                          111.88.79.0/24 maxlen: 24
                          111.88.139.0/24 maxlen: 24
                          111.88.164.0/22 maxlen: 22
                          111.88.164.0/24 maxlen: 24
                          111.88.165.0/24 maxlen: 24
                          111.88.166.0/24 maxlen: 24
                          111.88.167.0/24 maxlen: 24
                          111.88.168.0/22 maxlen: 24
                          111.88.184.0/22 maxlen: 22
                          111.88.232.0/24 maxlen: 24
                          111.88.233.0/24 maxlen: 24
                          111.88.234.0/24 maxlen: 24
                          111.88.235.0/24 maxlen: 24
                          111.88.236.0/24 maxlen: 24
                          111.88.237.0/24 maxlen: 24
                          111.88.238.0/24 maxlen: 24
                          111.88.239.0/24 maxlen: 24
                          111.88.240.0/22 maxlen: 22
                          111.88.240.0/24 maxlen: 24
                          111.88.241.0/24 maxlen: 24
                          111.88.242.0/24 maxlen: 24
                          111.88.243.0/24 maxlen: 24
                          111.88.244.0/22 maxlen: 22
                          111.88.244.0/24 maxlen: 24
                          111.88.245.0/24 maxlen: 24
                          111.88.246.0/24 maxlen: 24
                          111.88.247.0/24 maxlen: 24
                          111.88.248.0/21 maxlen: 22
                          111.88.248.0/23 maxlen: 24
                          111.88.250.0/24 maxlen: 24
                          111.88.251.0/24 maxlen: 24
                          111.88.252.0/24 maxlen: 24
                          111.88.253.0/24 maxlen: 24
                          111.88.254.0/24 maxlen: 24
                          111.88.255.0/24 maxlen: 24
                          115.186.1.0/24 maxlen: 24
                          115.186.10.0/23 maxlen: 24
                          115.186.12.0/23 maxlen: 24
                          115.186.14.0/24 maxlen: 24
                          115.186.16.0/24 maxlen: 24
                          115.186.17.0/24 maxlen: 24
                          115.186.21.0/24 maxlen: 24
                          115.186.23.0/24 maxlen: 24
                          115.186.24.0/23 maxlen: 23
                          115.186.25.0/24 maxlen: 24
                          115.186.30.0/23 maxlen: 24
                          115.186.32.0/20 maxlen: 22
                          115.186.32.0/24 maxlen: 24
                          115.186.33.0/24 maxlen: 24
                          115.186.34.0/24 maxlen: 24
                          115.186.35.0/24 maxlen: 24
                          115.186.36.0/22 maxlen: 23
                          115.186.36.0/23 maxlen: 24
                          115.186.40.0/24 maxlen: 24
                          115.186.41.0/24 maxlen: 24
                          115.186.42.0/24 maxlen: 24
                          115.186.43.0/24 maxlen: 24
                          115.186.44.0/24 maxlen: 24
                          115.186.45.0/24 maxlen: 24
                          115.186.46.0/24 maxlen: 24
                          115.186.47.0/24 maxlen: 24
                          115.186.56.0/21 maxlen: 24
                          115.186.88.0/24 maxlen: 24
                          115.186.90.0/24 maxlen: 24
                          115.186.91.0/24 maxlen: 24
                          115.186.93.0/24 maxlen: 24
                          115.186.96.0/24 maxlen: 24
                          115.186.98.0/24 maxlen: 24
                          115.186.101.0/24 maxlen: 24
                          115.186.102.0/24 maxlen: 24
                          115.186.103.0/24 maxlen: 24
                          115.186.106.0/23 maxlen: 24
                          115.186.108.0/22 maxlen: 24
                          115.186.112.0/24 maxlen: 24
                          115.186.113.0/24 maxlen: 24
                          115.186.115.0/24 maxlen: 24
                          115.186.117.0/24 maxlen: 24
                          115.186.118.0/24 maxlen: 24
                          115.186.119.0/24 maxlen: 24
                          115.186.120.0/24 maxlen: 24
                          115.186.121.0/24 maxlen: 24
                          115.186.122.0/24 maxlen: 24
                          115.186.123.0/24 maxlen: 24
                          115.186.125.0/24 maxlen: 24
                          115.186.126.0/24 maxlen: 24
                          117.102.0.0/21 maxlen: 21
                          117.102.0.0/22 maxlen: 22
                          117.102.0.0/23 maxlen: 24
                          117.102.2.0/24 maxlen: 24
                          117.102.3.0/24 maxlen: 24
                          117.102.4.0/24 maxlen: 24
                          117.102.5.0/24 maxlen: 24
                          117.102.6.0/24 maxlen: 24
                          117.102.7.0/24 maxlen: 24
                          117.102.8.0/24 maxlen: 24
                          117.102.9.0/24 maxlen: 24
                          117.102.10.0/24 maxlen: 24
                          117.102.12.0/23 maxlen: 24
                          117.102.16.0/24 maxlen: 24
                          117.102.17.0/24 maxlen: 24
                          117.102.18.0/23 maxlen: 24
                          117.102.20.0/22 maxlen: 22
                          117.102.21.0/24 maxlen: 24
                          117.102.24.0/22 maxlen: 22
                          117.102.24.0/23 maxlen: 24
                          117.102.26.0/24 maxlen: 24
                          117.102.27.0/24 maxlen: 24
                          117.102.28.0/24 maxlen: 24
                          117.102.30.0/24 maxlen: 24
                          117.102.31.0/24 maxlen: 24
                          117.102.32.0/24 maxlen: 24
                          117.102.33.0/24 maxlen: 24
                          117.102.34.0/24 maxlen: 24
                          117.102.35.0/24 maxlen: 24
                          117.102.36.0/24 maxlen: 24
                          117.102.37.0/24 maxlen: 24
                          117.102.38.0/24 maxlen: 24
                          117.102.39.0/24 maxlen: 24
                          117.102.40.0/24 maxlen: 24
                          117.102.41.0/24 maxlen: 24
                          117.102.42.0/24 maxlen: 24
                          117.102.43.0/24 maxlen: 24
                          117.102.44.0/24 maxlen: 24
                          117.102.45.0/24 maxlen: 24
                          117.102.46.0/24 maxlen: 24
                          117.102.47.0/24 maxlen: 24
                          203.81.192.0/21 maxlen: 22
                          203.81.192.0/24 maxlen: 24
                          203.81.193.0/24 maxlen: 24
                          203.81.194.0/24 maxlen: 24
                          203.81.195.0/24 maxlen: 24
                          203.81.196.0/24 maxlen: 24
                          203.81.197.0/24 maxlen: 24
                          203.81.198.0/23 maxlen: 24
                          203.81.208.0/21 maxlen: 24
                          203.81.230.0/24 maxlen: 24
                          203.81.232.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12783 (0x31ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
        Validity
            Not Before: Mar 25 08:00:34 2022 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=623d76a2-2c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0d:19:b3:c9:1a:79:12:06:80:71:cf:d8:d5:
                    97:a8:b9:c4:17:f6:4e:29:5b:c9:63:d6:ce:76:06:
                    37:c2:a2:0f:f6:f7:a6:ed:94:d7:98:90:2f:8f:13:
                    51:88:ac:0b:0f:21:32:e1:a6:40:f0:d7:99:5e:e6:
                    ae:e3:3e:8a:c3:ec:8d:f6:59:47:19:46:ec:14:84:
                    c8:79:f1:2b:72:c2:e5:83:09:26:9e:89:75:a8:47:
                    dc:24:3c:1a:fc:93:eb:c2:75:2b:00:bf:45:f5:96:
                    4a:d5:bc:8e:04:ee:e6:d7:10:06:36:de:dc:39:8f:
                    ab:42:51:2d:6f:7b:7a:e3:b1:94:3f:3a:c8:87:64:
                    41:5c:30:47:04:bf:f0:9c:76:4f:17:e0:3c:11:bf:
                    58:91:dd:92:84:bc:3c:da:5a:88:f5:b4:90:36:c0:
                    be:58:20:33:0e:a0:ff:5d:c7:fd:b5:06:b6:86:56:
                    6e:d7:f8:18:e6:2b:3d:c9:21:a0:d8:d1:2e:32:b9:
                    57:ff:38:55:d0:c5:e9:27:9e:68:16:76:81:f3:cc:
                    7f:d4:97:0e:1b:54:b9:10:ca:e4:cb:20:40:9c:92:
                    be:e1:cb:af:be:e6:b1:1c:e8:5d:9e:25:09:2e:08:
                    66:56:14:32:ec:69:93:a5:d9:65:34:4a:28:74:e6:
                    9d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:16:81:B0:32:46:BA:A1:E7:8C:26:D1:5C:9E:DD:EA:7D:79:34:E2
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/612163EC6C7D11ECB194383AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.88.0.0/18
                  111.88.76.0/23
                  111.88.79.0/24
                  111.88.139.0/24
                  111.88.164.0-111.88.171.255
                  111.88.184.0/22
                  111.88.232.0-111.88.255.255
                  115.186.1.0/24
                  115.186.10.0-115.186.14.255
                  115.186.16.0/23
                  115.186.21.0/24
                  115.186.23.0-115.186.25.255
                  115.186.30.0-115.186.47.255
                  115.186.56.0/21
                  115.186.88.0/24
                  115.186.90.0/23
                  115.186.93.0/24
                  115.186.96.0/24
                  115.186.98.0/24
                  115.186.101.0-115.186.103.255
                  115.186.106.0-115.186.113.255
                  115.186.115.0/24
                  115.186.117.0-115.186.123.255
                  115.186.125.0-115.186.126.255
                  117.102.0.0-117.102.10.255
                  117.102.12.0/23
                  117.102.16.0-117.102.28.255
                  117.102.30.0-117.102.47.255
                  203.81.192.0/21
                  203.81.208.0/21
                  203.81.230.0/24
                  203.81.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2d:31:b1:de:ee:5a:d5:f2:eb:54:bb:0e:ba:45:93:b0:12:73:
         7c:3e:b9:6e:63:d9:1a:d1:d6:13:8e:97:aa:e9:ab:61:32:71:
         63:41:06:32:26:9f:25:ab:2d:2b:be:88:f1:85:93:b9:7d:b7:
         b9:4b:7f:6f:12:80:ec:19:31:82:d5:2d:39:ef:9e:10:5b:af:
         76:47:80:d0:5f:cc:4e:d1:fa:3a:30:97:e0:d1:46:ed:4e:61:
         10:c1:48:65:fc:6b:e3:0e:94:b8:81:d4:63:5a:0b:d4:a7:45:
         15:7b:ef:bc:57:12:a7:92:49:ed:e1:8b:73:35:8b:16:38:1a:
         d1:24:e8:e7:82:c6:e4:30:c2:a9:6e:04:ce:56:ee:df:df:46:
         9b:0c:d7:dc:bb:5f:58:c2:f6:76:db:0e:16:37:68:8f:06:b2:
         dc:94:58:1a:fe:2a:78:4b:ff:96:5f:6c:c4:a6:b8:d7:33:f9:
         61:a3:a8:27:5e:75:15:13:9a:03:9a:a6:28:ff:42:85:e0:53:
         a8:96:a7:9a:4f:36:a7:dd:3a:96:43:62:fa:f3:d3:5b:e1:f8:
         c1:11:79:b7:d5:a1:8c:1c:50:d5:9f:b7:c8:e3:7a:89:5f:3d:
         d0:15:5d:28:44:a9:dd:53:e2:89:f6:3a:b0:26:3e:3d:cf:f5:
         e6:3e:e4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:10 2024 by rpki-client on console-fra.rpki-client.org