Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0A681D8C4AB611EBAF606729C4F9AE02.roa
File:                     0A681D8C4AB611EBAF606729C4F9AE02.roa (raw, json)
Hash identifier:          LdVgzPsYBs3qux4u0YK+voI6U1ZZWoAqMYZRRviGBXM=
Subject key identifier:   8C:65:BA:72:7D:8E:91:D9:77:93:6E:4F:71:47:E6:35:77:3D:21:52
Certificate issuer:       /CN=A91998BE/serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2
Certificate serial:       0447
Authority key identifier: D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0A681D8C4AB611EBAF606729C4F9AE02.roa
Signing time:             Wed 29 Dec 2021 23:18:22 +0000
ROA not before:           Wed 29 Dec 2021 23:18:22 +0000
ROA not after:            Thu 02 Mar 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        103.125.144.0/24 maxlen: 24
                          103.125.145.0/24 maxlen: 24
                          103.125.146.0/24 maxlen: 24
                          103.125.147.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1095 (0x447)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91998BE/serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2
        Validity
            Not Before: Dec 29 23:18:22 2021 GMT
            Not After : Mar  2 00:00:00 2023 GMT
        Subject: CN=61ccecbe-e0ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:14:4f:45:4d:ea:d0:d1:9f:a2:d1:4b:b5:65:
                    b1:27:30:a9:51:63:da:40:de:b3:16:0a:f0:6c:15:
                    f7:74:f9:76:a7:98:8c:76:f8:86:2f:b9:dd:66:b7:
                    c9:52:7d:51:f5:50:8a:b0:d2:bb:f2:40:af:6c:a2:
                    00:b7:6d:0f:1c:cf:03:82:ad:f2:67:f8:05:37:d7:
                    30:7b:a6:77:e7:90:eb:43:40:e6:8b:1c:cc:69:77:
                    92:58:f3:c7:9f:a5:07:9f:72:2d:13:9b:11:15:26:
                    eb:8a:ad:0d:d0:ea:8a:41:d5:ff:89:12:72:b8:43:
                    32:4e:b0:95:df:a9:ee:e2:d3:b6:41:0a:5c:77:c0:
                    96:5d:d3:32:8c:51:bc:27:66:08:b6:86:39:12:d0:
                    c4:8f:b3:99:9f:73:cb:83:e3:2b:1d:36:5c:e3:d4:
                    da:fa:52:50:cd:e0:dc:5b:17:60:dd:1c:7d:ff:d9:
                    9f:69:4e:41:be:4a:59:a7:83:e0:ee:77:4c:53:34:
                    7e:9f:d0:0b:27:16:b6:ef:77:8a:9f:70:96:de:1a:
                    2b:5a:88:85:f9:8b:7d:10:57:0a:50:17:87:41:c5:
                    d4:8f:95:b6:e6:0f:37:2e:cd:50:62:84:78:6a:e2:
                    9a:83:0e:cc:db:cf:81:f5:57:31:d9:b0:d7:47:8c:
                    62:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:65:BA:72:7D:8E:91:D9:77:93:6E:4F:71:47:E6:35:77:3D:21:52
            X509v3 Authority Key Identifier:
                keyid:D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0A681D8C4AB611EBAF606729C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:b0:cb:84:d4:80:09:23:08:93:4d:52:3f:f9:86:80:c8:8f:
         f0:78:5d:83:f8:1e:e3:ea:eb:fb:6b:ab:ad:e2:ac:77:2e:e3:
         87:67:ed:a2:c5:bc:5f:77:40:91:ff:1b:be:91:8b:76:e0:b5:
         36:50:16:3d:7b:09:93:6c:4e:98:9f:12:75:75:f2:90:54:fc:
         56:7f:af:37:de:6e:fd:29:fe:17:a5:9c:f0:1a:42:19:f0:ce:
         3a:f1:5e:33:a0:13:4e:ce:6a:60:88:cb:fe:eb:c9:a2:98:52:
         11:76:a9:35:20:d0:16:0f:07:f0:98:5f:e2:67:57:d9:7c:61:
         1d:36:92:11:9b:a3:f5:1d:4f:05:43:29:9d:b2:a4:5c:e1:d9:
         12:cb:5b:2c:a2:2d:71:14:5a:c1:f8:d6:a2:a7:1f:bf:ff:59:
         3d:e4:4a:92:b7:54:7e:cd:70:9e:55:d4:b4:7d:71:94:00:90:
         3c:d0:d2:0a:1e:17:f7:05:a4:5a:00:8d:d1:b5:98:4f:70:45:
         31:c8:cf:b3:d6:b9:67:3a:82:2b:ba:85:b5:1d:66:5c:47:10:
         aa:77:10:90:06:6c:52:9a:a1:29:79:65:5b:26:49:db:fa:af:
         91:f0:6b:8c:1a:18:d6:46:4e:50:98:b7:77:2c:5f:c8:12:6b:
         ef:57:5a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:57 2023 by rpki-client on console-ams.rpki-client.org