Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/6B3E275400B911ED9C55F27BC4F9AE02.roa
File:                     6B3E275400B911ED9C55F27BC4F9AE02.roa (raw, json)
Hash identifier:          3H18vMFpO+29vsWGqBKSumIVnNFDbP2d/KLWdSU2OS8=
Subject key identifier:   C7:EC:76:26:FB:16:45:5A:1E:AB:C5:64:CC:58:5A:02:51:3C:69:09
Certificate issuer:       /CN=A918EB49/serialNumber=F836DD30B604263620D061D10584C8F301160087
Certificate serial:       06
Authority key identifier: F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/6B3E275400B911ED9C55F27BC4F9AE02.roa
Signing time:             Mon 11 Jul 2022 01:33:09 +0000
ROA not before:           Mon 11 Jul 2022 01:33:09 +0000
ROA not after:            Sat 30 Sep 2023 00:00:00 +0000
asID:                     140616
IP address blocks:        103.190.227.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EB49/serialNumber=F836DD30B604263620D061D10584C8F301160087
        Validity
            Not Before: Jul 11 01:33:09 2022 GMT
            Not After : Sep 30 00:00:00 2023 GMT
        Subject: CN=62cb7dd4-7655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ee:88:de:5d:cb:31:99:a6:68:42:aa:43:0b:
                    b6:b6:6f:57:2a:d4:ce:f8:ed:de:7c:e8:ec:e3:9a:
                    23:ea:83:fd:99:fa:38:c2:a3:4f:7e:eb:ad:56:06:
                    f8:e4:54:db:00:7b:10:47:07:64:6e:89:9e:3f:74:
                    b6:47:dc:10:40:16:87:84:bd:dd:4b:9c:a5:f3:82:
                    0d:c4:21:4c:82:cd:f0:50:de:a4:d8:d9:47:e0:19:
                    71:8e:f5:36:1e:4b:ca:2f:8c:1c:e3:b9:b7:bd:6b:
                    71:51:e7:64:9b:25:d8:35:f4:b3:f7:98:b1:98:5e:
                    09:9f:ce:80:0d:39:1c:05:73:36:dd:82:39:2a:63:
                    88:a3:ec:d2:3a:c2:9f:3c:e1:11:34:56:53:1e:90:
                    c0:83:80:97:c6:80:29:3e:74:39:b0:e9:14:af:33:
                    01:58:31:47:2e:0c:d7:b7:db:23:2a:ec:ee:d3:fb:
                    eb:e3:1e:54:70:15:51:5d:36:fd:c0:44:a9:68:57:
                    15:93:ce:c0:ee:8d:ac:84:da:23:9d:f1:5f:e5:6b:
                    0a:0c:56:c1:2c:3b:36:df:33:5a:4f:4c:61:aa:15:
                    76:c9:41:67:e3:0d:00:59:69:94:da:5f:32:d2:5d:
                    04:ad:82:d2:16:4f:ac:5e:bd:37:93:b9:ae:27:91:
                    5a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:EC:76:26:FB:16:45:5A:1E:AB:C5:64:CC:58:5A:02:51:3C:69:09
            X509v3 Authority Key Identifier:
                keyid:F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/6B3E275400B911ED9C55F27BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:83:49:df:e0:a9:b2:92:1e:a7:85:9c:19:5e:5d:d8:f1:5a:
         aa:46:62:9e:c6:85:1d:7c:3a:1e:66:06:cb:51:08:6c:4a:24:
         5e:af:0a:55:a8:17:e4:01:a8:b2:7c:86:8a:0e:d2:b6:74:cf:
         4f:18:d8:07:b5:09:9f:f3:66:62:09:67:22:ce:71:e4:6a:54:
         ca:6d:13:66:4a:f8:99:1e:38:07:14:86:9c:56:12:00:30:79:
         75:8b:2b:0c:9d:4d:85:c4:62:a9:90:3f:43:2b:1c:b8:87:9b:
         64:50:9c:45:b1:f4:81:f1:15:29:9e:fb:eb:5a:44:f8:60:ef:
         88:d3:d8:c3:b3:91:5d:7a:de:43:ec:ac:3e:88:4e:ee:06:a0:
         47:d8:d6:9a:41:a3:6a:a8:f6:06:a5:08:cf:df:9e:67:a0:15:
         98:6a:10:eb:ab:9f:f2:71:0e:06:bb:09:e1:51:04:c4:6d:46:
         3e:bc:28:b9:7d:15:32:8f:1b:17:95:48:4c:0a:5f:1c:7c:7c:
         e3:58:24:dc:74:1a:23:b4:eb:5c:fc:f2:d2:c5:50:d9:5e:a0:
         91:e6:ef:3b:4a:32:55:3f:8a:75:3c:9a:38:a3:c5:e1:08:47:
         a6:55:cf:69:46:9e:3a:0f:13:5d:60:a0:55:e0:e3:e2:db:c1:
         db:37:d4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:15 2024 by rpki-client on console-fra.rpki-client.org