Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/69A7B940A99611EA92259418C4F9AE02.roa
File:                     69A7B940A99611EA92259418C4F9AE02.roa (raw, json)
Hash identifier:          Nbn5OUeEgCChelaPzhMC4tzjd3/3P/R2gfgpPF4Pg50=
Subject key identifier:   9B:FB:02:3C:62:94:E8:11:12:9F:1F:79:CD:53:69:6B:E6:9E:3A:E3
Certificate issuer:       /CN=A917A608/serialNumber=211C550B53EB20475185BABCDE7E70DF674448B7
Certificate serial:       067C
Authority key identifier: 21:1C:55:0B:53:EB:20:47:51:85:BA:BC:DE:7E:70:DF:67:44:48:B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/69A7B940A99611EA92259418C4F9AE02.roa
Signing time:             Fri 21 May 2021 20:24:30 +0000
ROA not before:           Fri 21 May 2021 20:24:30 +0000
ROA not after:            Fri 01 Jul 2022 00:00:00 +0000
asID:                     138954
IP address blocks:        103.137.162.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1660 (0x67c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A608/serialNumber=211C550B53EB20475185BABCDE7E70DF674448B7
        Validity
            Not Before: May 21 20:24:30 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=60a816fe-962a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:eb:e7:41:96:34:77:23:a3:bb:d1:80:e3:8a:
                    0c:fe:ba:70:64:5d:d1:cf:3f:46:06:8f:70:12:7b:
                    76:56:12:33:95:cb:32:69:c9:84:c4:f7:78:d6:58:
                    f1:0e:ea:cd:96:74:b1:46:f9:14:92:51:36:b0:e2:
                    c9:f0:7b:bd:c8:f2:c7:2a:aa:c3:b7:d7:f1:3d:b4:
                    5a:bd:19:ac:de:b3:21:7b:7e:60:51:dc:f6:e9:12:
                    d7:eb:d8:19:5a:f9:24:3e:c3:a2:b6:35:31:8b:87:
                    48:b1:d3:df:a5:b7:12:59:fd:01:99:e9:96:0b:6d:
                    ca:2b:64:f1:ae:4a:da:11:f5:94:db:ab:1e:f2:ba:
                    8d:4b:f1:96:5c:99:af:5a:52:b0:1e:75:d7:a2:c0:
                    c3:3a:26:e1:20:22:11:a0:c0:34:c7:a0:c5:0b:b3:
                    2b:00:7d:2c:f0:ed:be:f8:1d:89:52:29:48:fe:db:
                    a0:46:df:0b:46:1b:7a:f0:06:39:e2:ed:35:76:8a:
                    11:30:da:b6:9f:ec:b6:7b:44:8d:16:93:41:92:bb:
                    74:15:c1:a7:7a:d1:26:b0:da:3e:a9:9f:33:2e:e8:
                    70:4f:34:d6:ba:bd:70:84:e8:38:b6:fb:8d:fa:19:
                    91:55:9c:bd:0f:f0:82:fd:fe:91:69:0d:33:64:29:
                    66:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:FB:02:3C:62:94:E8:11:12:9F:1F:79:CD:53:69:6B:E6:9E:3A:E3
            X509v3 Authority Key Identifier:
                keyid:21:1C:55:0B:53:EB:20:47:51:85:BA:BC:DE:7E:70:DF:67:44:48:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/69A7B940A99611EA92259418C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:46:ae:aa:b9:66:2d:fb:32:9d:62:27:a3:fb:cd:10:00:6c:
         49:9c:04:b5:8f:b5:45:61:c0:e2:f1:04:57:f9:36:ef:18:7d:
         65:3c:2f:e5:1f:51:5b:f6:96:29:de:55:5f:6a:b7:07:0a:8d:
         5d:8f:60:78:73:04:10:61:7a:a6:a1:a1:8c:ec:ae:a9:92:25:
         d2:01:b2:21:1a:23:ae:5b:35:90:d1:6e:40:fc:1f:33:22:a6:
         65:54:2b:12:b0:e0:f5:14:50:33:8a:bd:34:c1:ac:6d:fa:06:
         f8:20:c2:7c:b2:af:1e:88:80:a6:f8:2a:10:6f:04:af:c6:49:
         0b:e4:04:3d:45:4a:43:15:5f:a0:87:ef:80:d2:28:8a:9e:cf:
         cd:59:d1:2d:62:4e:c6:fa:89:db:be:0f:46:75:3e:ac:b4:77:
         bd:fd:6a:27:be:16:ef:4c:87:98:9f:8d:22:6d:e6:f6:d8:26:
         f6:77:03:e4:29:cd:e3:87:26:f9:e3:2b:e8:8a:cd:04:c3:fb:
         22:9f:de:c2:0b:67:1e:26:1a:52:30:a5:c4:1f:01:ca:c4:27:
         c3:fc:e6:47:e6:81:64:5e:5c:df:1e:2c:94:aa:b1:f7:91:f3:
         8e:18:f3:c9:4c:5d:6b:e8:96:ea:09:f7:33:6d:61:a9:dc:60:
         9a:7e:79:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-ams.rpki-client.org