Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/E95F681E29EE11EEBB67806FC4F9AE02.roa
File:                     E95F681E29EE11EEBB67806FC4F9AE02.roa (raw, json)
Hash identifier:          qiQgOxMsWQI6SFoWC85X1bFgHjD7iD1bws9W/3009qY=
Subject key identifier:   E4:57:E0:0E:E0:4A:73:B5:B4:3C:F7:C3:8B:D6:CD:D6:51:D9:05:CF
Certificate issuer:       /CN=A918A996/serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089
Certificate serial:       1A
Authority key identifier: 83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/E95F681E29EE11EEBB67806FC4F9AE02.roa
Signing time:             Mon 24 Jul 2023 06:54:19 +0000
ROA not before:           Mon 24 Jul 2023 06:54:19 +0000
ROA not after:            Sun 31 Mar 2024 00:00:00 +0000
asID:                     10118
IP address blocks:        117.103.144.0/20 maxlen: 20
                          117.103.144.0/20 maxlen: 24
                          117.103.152.0/23 maxlen: 23
                          117.103.156.0/24 maxlen: 24
                          117.103.157.0/24 maxlen: 24
                          117.103.158.0/24 maxlen: 24
                          117.103.159.0/24 maxlen: 24
                          124.217.128.0/18 maxlen: 18
                          124.217.128.0/24 maxlen: 24
                          124.217.129.0/24 maxlen: 24
                          124.217.130.0/24 maxlen: 24
                          124.217.131.0/24 maxlen: 24
                          124.217.132.0/23 maxlen: 23
                          124.217.136.0/23 maxlen: 24
                          124.217.138.0/24 maxlen: 24
                          124.217.139.0/24 maxlen: 24
                          124.217.140.0/24 maxlen: 24
                          124.217.141.0/24 maxlen: 24
                          124.217.142.0/24 maxlen: 24
                          124.217.143.0/24 maxlen: 24
                          124.217.144.0/20 maxlen: 20
                          124.217.160.0/20 maxlen: 20
                          124.217.178.0/24 maxlen: 24
                          124.217.179.0/24 maxlen: 24
                          124.217.180.0/22 maxlen: 22
                          124.217.184.0/24 maxlen: 24
                          124.217.185.0/24 maxlen: 24
                          124.217.186.0/24 maxlen: 24
                          124.217.187.0/24 maxlen: 24
                          124.217.188.0/22 maxlen: 22
                          124.217.188.0/24 maxlen: 24
                          124.217.189.0/24 maxlen: 24
                          124.217.190.0/24 maxlen: 24
                          124.217.191.0/24 maxlen: 24
                          180.188.128.0/18 maxlen: 24
                          180.188.144.0/20 maxlen: 20
                          180.188.188.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A996/serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089
        Validity
            Not Before: Jul 24 06:54:19 2023 GMT
            Not After : Mar 31 00:00:00 2024 GMT
        Subject: CN=64be201b-d5f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:86:79:fc:aa:bc:5b:65:1b:fa:83:ef:12:77:
                    5f:48:ff:5d:2e:0b:e0:0c:87:60:7b:82:32:59:5c:
                    4a:b1:0a:ac:93:28:f0:d3:93:c6:c5:50:c9:97:e4:
                    68:97:32:c6:a9:13:9f:09:43:f1:88:73:dd:86:33:
                    69:1b:cc:b5:72:41:65:a8:95:a6:ae:e0:c1:8b:8f:
                    10:97:cc:0a:5a:5b:8f:79:e8:f0:e2:45:35:a7:9d:
                    04:52:5b:0a:73:73:45:d2:78:60:3e:8f:a0:fa:af:
                    88:66:ac:12:51:54:f4:db:dc:66:a2:07:30:be:e1:
                    7a:65:71:be:4b:e0:24:72:eb:cb:53:d9:ad:9d:bf:
                    07:78:b6:dc:bb:cc:da:04:8c:18:26:a0:bc:90:76:
                    77:06:ca:85:34:52:8a:8c:f5:50:41:b0:71:ab:e2:
                    93:8b:5e:9e:17:00:f8:f1:0e:c1:18:ca:17:74:65:
                    8e:ae:19:5a:da:3b:4f:31:26:f8:db:76:27:47:d7:
                    17:f4:41:8c:2c:87:0c:f7:83:c7:d8:f2:df:24:66:
                    10:1c:33:9e:df:f7:dd:dc:68:f7:00:13:ff:3f:b7:
                    5a:dc:c1:0f:2d:d3:8f:56:71:2b:8c:53:4e:36:60:
                    09:61:b0:48:ab:60:f0:07:f9:0a:fa:0b:aa:e0:36:
                    27:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:57:E0:0E:E0:4A:73:B5:B4:3C:F7:C3:8B:D6:CD:D6:51:D9:05:CF
            X509v3 Authority Key Identifier:
                keyid:83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/E95F681E29EE11EEBB67806FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.103.144.0/20
                  124.217.128.0/18
                  180.188.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6b:b8:8e:0a:82:6b:9e:a2:d1:2f:46:35:28:ec:53:2d:dc:51:
         1e:be:fb:e1:5a:0a:a2:2b:75:3f:29:ae:e3:cb:cb:0a:91:67:
         26:7f:35:2d:5e:36:72:7e:83:9e:9c:9c:47:57:b4:ed:11:fe:
         c7:57:6c:81:a4:18:6a:1a:b3:d7:15:6c:3c:e2:3a:c2:6e:b8:
         76:92:8f:7f:c8:fd:ea:f4:95:3e:45:b5:a4:3e:09:8b:94:e9:
         0e:f0:de:d9:50:ae:cd:78:90:94:00:2c:ff:f7:25:44:53:17:
         fd:77:f3:a4:9a:bd:bf:2b:3c:41:ab:53:83:e4:a2:ce:75:59:
         9e:0c:cc:93:75:c9:95:46:df:d3:54:b1:65:9f:4c:1e:38:9a:
         b1:69:e0:ce:4e:ce:2f:c9:17:51:08:ee:d3:b9:0d:36:13:2c:
         e2:3d:50:cf:71:51:b2:bf:87:8c:df:1f:bf:47:bc:87:91:04:
         37:1b:0d:ec:e2:82:2b:63:12:5b:c3:e1:d2:94:c7:42:34:2b:
         08:a7:96:62:5c:d2:a7:43:f8:ae:82:27:8a:7c:26:fd:0d:7e:
         27:19:a8:86:ea:cd:98:70:1d:87:3d:07:a7:73:69:05:a5:f0:
         d5:9a:48:bf:0b:37:5e:f4:7a:7b:a9:0b:cc:56:64:cb:e5:06:
         46:2a:cf:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:25 2024 by rpki-client on console-ams.rpki-client.org