Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/B80EB13687EF11EC824BB625C4F9AE02.roa
File:                     B80EB13687EF11EC824BB625C4F9AE02.roa (raw, json)
Hash identifier:          8VB2t5bHplLANKXdCu1nt2TnVHxWIBqAbMu3nDRp13I=
Subject key identifier:   A4:30:A5:DC:3B:CE:97:B3:BD:98:D2:07:FB:44:C4:D9:E3:F9:26:04
Certificate issuer:       /CN=A91A8405/serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
Certificate serial:       0794
Authority key identifier: 2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/B80EB13687EF11EC824BB625C4F9AE02.roa
Signing time:             Mon 07 Feb 2022 08:27:00 +0000
ROA not before:           Mon 07 Feb 2022 08:27:00 +0000
ROA not after:            Sat 30 Jul 2022 00:00:00 +0000
asID:                     139841
IP address blocks:        103.112.205.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1940 (0x794)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8405/serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
        Validity
            Not Before: Feb  7 08:27:00 2022 GMT
            Not After : Jul 30 00:00:00 2022 GMT
        Subject: CN=6200d7d4-e081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:da:7c:2e:dc:d8:be:40:fe:13:15:8a:e9:1d:
                    8f:66:68:d4:8c:17:4c:b7:0b:35:43:aa:06:01:7b:
                    14:45:7a:ea:bf:72:31:46:ff:40:d3:a2:b3:3d:ad:
                    98:d5:9c:b4:f9:74:30:61:4a:32:bd:8f:5c:f5:30:
                    e7:1a:ec:5d:47:4b:33:49:03:02:65:b0:18:92:61:
                    8f:eb:33:9a:a3:76:f0:21:96:9f:0c:44:71:af:a0:
                    99:02:b9:32:5a:78:74:a9:bf:5c:55:6c:db:dc:a5:
                    6d:67:3a:02:5c:5d:5c:e1:9e:f3:76:1d:e2:02:d7:
                    a7:19:75:35:e3:b3:c8:19:9d:31:e5:1d:fc:f3:09:
                    d9:4e:25:70:73:56:ab:6b:b3:af:11:15:1f:d2:96:
                    ed:19:dc:e8:ff:0e:24:1d:26:36:eb:ef:73:62:45:
                    03:c8:e2:87:7f:a2:e1:0b:50:b4:e5:30:5f:f9:f1:
                    8c:32:26:c9:e6:94:9a:8a:76:a6:46:0b:03:e4:2f:
                    1f:c3:4a:c6:43:7a:f6:c3:2e:34:b4:f1:92:45:01:
                    12:12:71:c5:83:36:60:6f:f5:d1:53:66:1f:82:f8:
                    47:1a:a1:5c:91:58:71:a2:63:23:fc:e4:a5:2c:26:
                    fb:f1:9f:c4:51:92:5f:c1:7d:1f:58:97:d2:60:a3:
                    c7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:30:A5:DC:3B:CE:97:B3:BD:98:D2:07:FB:44:C4:D9:E3:F9:26:04
            X509v3 Authority Key Identifier:
                keyid:2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/B80EB13687EF11EC824BB625C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:ca:d3:fa:e9:2c:47:86:93:48:97:20:d7:03:23:65:a1:b4:
         52:2a:f2:91:b7:04:f6:22:8b:57:9a:e5:bf:35:f0:c5:e8:21:
         68:23:1f:1d:8e:b9:77:9c:56:1a:00:61:b9:b3:c2:50:35:14:
         6b:89:f6:72:8a:07:e5:8d:5a:e4:e3:46:d0:f3:4f:d3:11:4a:
         7b:8f:aa:5f:35:45:74:f0:8b:e5:0b:97:a3:b9:1e:19:d1:64:
         48:6e:2f:64:61:e1:9c:46:56:2a:f1:de:93:c3:4b:b5:0a:4e:
         1c:c6:bb:6a:3d:e9:8e:f7:f9:31:db:05:04:92:61:49:6f:45:
         be:db:f2:a2:aa:eb:6d:ac:6a:fd:af:b4:06:3e:08:9f:ba:75:
         c7:74:95:77:63:db:b9:f9:14:30:4d:e3:24:4a:d0:ed:7c:79:
         13:dd:9d:8c:f6:c1:87:03:e2:dd:ff:e9:67:f6:31:13:64:42:
         14:0a:67:14:bf:40:50:53:8b:e0:04:fa:0b:e2:cb:66:b5:64:
         ae:1d:64:44:53:ae:c2:72:3f:9f:bc:c4:2b:4e:95:c0:0f:3f:
         56:e3:95:7f:21:2a:a1:94:ca:fd:18:f9:90:21:3c:39:25:34:
         86:1f:2b:5a:4f:d8:28:66:88:a6:01:9b:c4:26:58:75:c4:cd:
         6e:9a:72:90
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTg0MDUxMTAvBgNVBAUTKDJEOUVEM0QyNkU2MzVGN0NGRkU0QkJGNTIwODcxNTBC
N0E0MjE4OEYwHhcNMjIwMjA3MDgyNzAwWhcNMjIwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjAwZDdkNC1lMDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvtp8LtzYvkD+ExWK6R2PZmjUjBdMtws1Q6oGAXsURXrqv3IxRv9A06KzPa2Y
1Zy0+XQwYUoyvY9c9TDnGuxdR0szSQMCZbAYkmGP6zOao3bwIZafDERxr6CZArky
Wnh0qb9cVWzb3KVtZzoCXF1c4Z7zdh3iAtenGXU147PIGZ0x5R388wnZTiVwc1ar
a7OvERUf0pbtGdzo/w4kHSY26+9zYkUDyOKHf6LhC1C05TBf+fGMMibJ5pSainam
RgsD5C8fw0rGQ3r2wy40tPGSRQESEnHFgzZgb/XRU2YfgvhHGqFckVhxomMj/OSl
LCb78Z/EUZJfwX0fWJfSYKPHgwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKQwpdw7
zpezvZjSB/tExNnj+SYEMB8GA1UdIwQYMBaAFC2e09JuY198/+S79SCHFQt6QhiP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODQwNS9GOUMxOTY5NjMy
MTIxMUVBOTM2MzNBNTlDNEY5QUUwMi9MWjdUMG01algzel81THYxSUljVkMzcENH
STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xaN1QwbTVqWDN6XzVMdjFJSWNWQzNwQ0dJOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTg0MDUvRjlDMTk2OTYzMjEyMTFFQTkzNjMzQTU5QzRGOUFFMDIvQjgwRUIxMzY4
N0VGMTFFQzgyNEJCNjI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABncM0wDQYJKoZIhvcNAQELBQADggEBAGHK0/rpLEeGk0iX
INcDI2WhtFIq8pG3BPYii1ea5b818MXoIWgjHx2OuXecVhoAYbmzwlA1FGuJ9nKK
B+WNWuTjRtDzT9MRSnuPql81RXTwi+ULl6O5HhnRZEhuL2Rh4ZxGVirx3pPDS7UK
ThzGu2o96Y73+THbBQSSYUlvRb7b8qKq622sav2vtAY+CJ+6dcd0lXdj27n5FDBN
4yRK0O18eRPdnYz2wYcD4t3/6Wf2MRNkQhQKZxS/QFBTi+AE+gviy2a1ZK4dZERT
rsJyP5+8xCtOlcAPP1bjlX8hKqGUyv0Y+ZAhPDklNIYfK1pP2ChmiKYBm8QmWHXE
zW6acpA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:00 2023 by rpki-client on console-ams.rpki-client.org