Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5A000B1879F211ECB16F7440C4F9AE02.roa
File:                     5A000B1879F211ECB16F7440C4F9AE02.roa (raw, json)
Hash identifier:          9WwOs/k73GeB57EGyjyCwi+GFxu7isGbMOvIR8JvPQg=
Subject key identifier:   89:C5:92:02:19:4C:0E:2E:54:FF:CB:9E:0D:FA:76:91:20:A1:EB:92
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       3950
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5A000B1879F211ECB16F7440C4F9AE02.roa
Signing time:             Fri 26 Aug 2022 14:52:07 +0000
ROA not before:           Fri 26 Aug 2022 14:52:07 +0000
ROA not after:            Tue 31 Oct 2023 00:00:00 +0000
asID:                     140812
IP address blocks:        103.164.36.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14672 (0x3950)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 26 14:52:07 2022 GMT
            Not After : Oct 31 00:00:00 2023 GMT
        Subject: CN=6308de16-8dd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:26:e4:a6:63:63:45:0d:5b:fa:e2:31:72:09:
                    aa:27:ac:68:b3:c6:f4:7e:a0:13:c8:1c:3d:a3:5b:
                    60:be:f4:cb:70:75:e5:e7:0d:8a:c1:9c:ec:e6:a5:
                    a8:72:ed:a8:35:89:fa:74:91:b0:19:92:a4:cd:49:
                    97:6e:e3:b0:e5:d6:39:7f:80:45:3d:71:fd:e2:ac:
                    59:d4:31:5b:78:0c:ce:0e:49:ef:28:db:8e:db:55:
                    eb:36:aa:f2:c3:8a:e5:ff:dc:ba:c5:7b:76:71:2a:
                    13:92:3e:2e:27:16:87:85:52:a2:99:46:51:2c:58:
                    22:44:87:38:7f:a6:58:07:63:98:fe:78:2a:12:54:
                    72:27:2a:37:99:d6:31:e2:8f:c4:c4:cd:91:e2:3d:
                    13:e7:e1:36:4c:2a:5d:f7:8c:ab:6e:0f:69:3b:cf:
                    49:a9:8e:c3:ce:d2:59:08:ab:57:41:3c:a6:3d:ec:
                    55:71:c1:4c:46:9f:35:f7:85:94:e3:9c:7c:d9:d4:
                    00:8d:d5:0d:5c:c6:4a:9b:3b:8f:17:37:28:25:6a:
                    dc:2b:00:ce:4c:52:80:8f:a6:d7:d4:cd:5a:56:63:
                    10:6f:d8:04:df:11:98:58:0c:56:86:00:77:43:b0:
                    92:4c:61:9f:02:76:02:ee:69:0e:ec:63:fb:00:e8:
                    e8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:C5:92:02:19:4C:0E:2E:54:FF:CB:9E:0D:FA:76:91:20:A1:EB:92
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5A000B1879F211ECB16F7440C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:1e:e3:9b:9c:ea:47:6d:d5:d6:df:47:f9:b5:32:c3:b4:b3:
         f1:e1:ab:34:c2:28:48:87:1c:a3:53:54:91:50:8d:c2:2a:12:
         f9:69:66:b3:eb:05:4e:27:99:8e:9a:2e:a3:9b:03:9d:30:6c:
         0e:7c:d2:28:86:a3:55:79:08:c4:76:d8:b0:ea:57:00:70:b6:
         35:10:08:80:03:c1:df:e1:0d:16:c2:20:a5:84:79:a1:b4:d0:
         80:be:91:a9:a0:bb:e8:cc:d3:ad:dc:3a:be:47:d4:e6:b7:e9:
         45:4c:63:99:cc:ae:73:7d:c4:46:9f:49:58:0a:29:16:ee:dd:
         20:e4:8e:81:d6:31:f4:aa:19:37:f4:c4:cd:27:1d:8d:66:1c:
         c8:12:d6:88:e5:22:e5:64:22:cc:7e:fa:98:76:a6:c5:46:6e:
         58:cc:ee:d1:a3:9e:e5:a6:e8:6b:5c:2b:8e:43:8b:74:6d:99:
         d6:a0:db:4d:92:90:36:84:7d:91:b1:f2:f0:a1:3c:fd:6a:9c:
         11:7a:6e:cd:72:c7:b9:ce:fd:27:f5:ce:2d:4e:f7:fa:a6:db:
         46:85:f3:11:f7:d1:bc:a2:0d:ab:2e:6c:e3:61:0c:2d:cf:4a:
         cc:f3:b2:83:21:91:8e:20:12:02:55:c3:9a:fa:48:b7:0e:bd:
         c5:81:48:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:53 2024 by rpki-client on console-ams.rpki-client.org