Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/74EDA6A0E26B11ED8FC97713C4F9AE02.roa
File:                     74EDA6A0E26B11ED8FC97713C4F9AE02.roa (raw, json)
Hash identifier:          CnHkTZAn9Jh4lVj++fwEFv/FP/pLjPQBReSqdRbdl0w=
Subject key identifier:   40:B5:1B:FE:54:95:14:EC:B7:2B:75:7A:E4:1C:BD:9E:F1:95:EF:88
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       01DE
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/74EDA6A0E26B11ED8FC97713C4F9AE02.roa
Signing time:             Mon 24 Apr 2023 06:44:27 +0000
ROA not before:           Mon 24 Apr 2023 06:44:27 +0000
ROA not after:            Thu 31 Aug 2023 00:00:00 +0000
asID:                     212219
IP address blocks:        203.32.7.0/24 maxlen: 24
                          203.32.26.0/24 maxlen: 24
                          203.32.38.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 478 (0x1de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Apr 24 06:44:27 2023 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=6446254b-22ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6f:73:b8:b6:c5:97:56:49:84:37:47:05:a8:
                    42:20:d5:f0:cb:32:e6:a5:9c:a0:35:4b:7d:20:45:
                    0f:eb:a8:d7:98:22:bc:f9:24:27:7f:25:c1:92:24:
                    d9:db:fb:07:44:90:0e:57:67:d3:f2:57:13:c0:ce:
                    d6:4a:d0:c1:9b:6e:a2:9d:da:20:7b:5c:1b:fd:68:
                    14:d9:c5:d6:ca:73:5c:06:31:00:cd:32:3f:30:d5:
                    1b:67:7c:f4:e9:cf:df:f9:cc:5b:69:89:4c:3d:53:
                    47:64:f3:1f:8e:97:c4:98:6e:71:de:0e:8c:91:20:
                    e4:bf:81:3b:9d:67:23:da:9b:e8:77:2e:da:8d:10:
                    0f:2e:11:3a:cb:48:f6:99:dd:60:b1:3a:c6:04:ef:
                    2d:f4:80:52:07:eb:07:2f:83:b2:f8:13:fa:a2:ed:
                    c0:02:2c:f7:19:68:99:83:2a:05:5f:93:9f:14:8a:
                    82:de:f2:11:6d:7a:d9:4a:87:16:f9:e2:e6:20:f1:
                    09:08:a0:77:70:4f:ae:db:cf:0e:b8:2d:80:38:c9:
                    e6:54:1b:f1:3e:79:b6:c6:04:1a:9b:1d:a1:d1:61:
                    16:04:e9:6b:a6:5a:39:04:15:54:b0:6f:0b:e9:14:
                    58:d0:29:4d:0f:94:26:2e:c4:b4:d2:41:0d:c2:90:
                    7a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B5:1B:FE:54:95:14:EC:B7:2B:75:7A:E4:1C:BD:9E:F1:95:EF:88
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/74EDA6A0E26B11ED8FC97713C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.32.7.0/24
                  203.32.26.0/24
                  203.32.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:2d:7e:db:48:73:54:d1:99:73:f9:8a:fe:a2:ec:b8:f3:bb:
         f2:2f:9d:04:97:72:2e:27:ef:1b:d3:c8:3f:99:93:07:e4:00:
         84:04:93:0e:2c:1c:da:48:be:cc:31:07:cb:10:11:ff:5c:33:
         2b:9c:35:f3:4d:4f:a6:fe:38:15:d2:dc:05:a5:30:bf:ae:a2:
         13:e1:c8:3e:4b:6a:83:29:14:72:b2:35:b1:d9:bd:37:8e:b8:
         08:e0:a8:01:11:a9:e5:af:e5:f4:01:ff:4a:3a:f0:46:fe:af:
         c1:dc:78:d7:41:86:01:0c:ea:be:ac:4a:af:84:9c:fa:56:3c:
         05:0d:95:f1:e6:b1:f9:7f:54:29:52:73:72:80:ee:97:76:6d:
         10:5a:c1:79:47:8a:c3:79:af:8b:9a:df:79:6d:50:c3:ab:0b:
         2f:8e:07:85:e1:5d:21:9c:19:e4:ac:ff:67:65:93:5c:d0:e0:
         27:36:b5:4a:bd:ae:c8:fb:79:c5:df:24:bc:91:93:e1:f7:62:
         90:00:bf:53:35:2d:35:61:62:b4:0e:82:05:86:2e:f1:eb:f0:
         49:d3:4e:df:75:c5:f8:9b:2d:64:4a:b8:fa:0c:32:ca:32:17:
         e8:93:82:c7:01:e0:43:39:26:dd:d9:90:af:7f:ca:1c:1d:27:
         32:6f:eb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:46 2024 by rpki-client on console-ams.rpki-client.org