Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/B0DEFBDE188911ED9319027DC4F9AE02.roa
File:                     B0DEFBDE188911ED9319027DC4F9AE02.roa (raw, json)
Hash identifier:          EfdaUkmW0Lkh5BSJxV4McELZkE6gVa2n2XKCSz98t+A=
Subject key identifier:   DE:D6:A2:BE:FF:BF:F8:28:D9:68:B7:28:40:E9:22:B5:D8:CA:B8:86
Certificate issuer:       /CN=A91B9BC6/serialNumber=EF5B497FFD8B259EE9EA157B0222B110266CF59F
Certificate serial:       027B
Authority key identifier: EF:5B:49:7F:FD:8B:25:9E:E9:EA:15:7B:02:22:B1:10:26:6C:F5:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71tJf_2LJZ7p6hV7AiKxECZs9Z8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/B0DEFBDE188911ED9319027DC4F9AE02.roa
Signing time:             Wed 10 Aug 2022 08:51:58 +0000
ROA not before:           Wed 10 Aug 2022 08:51:58 +0000
ROA not after:            Fri 30 Dec 2022 00:00:00 +0000
asID:                     147050
IP address blocks:        103.174.47.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 635 (0x27b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9BC6/serialNumber=EF5B497FFD8B259EE9EA157B0222B110266CF59F
        Validity
            Not Before: Aug 10 08:51:58 2022 GMT
            Not After : Dec 30 00:00:00 2022 GMT
        Subject: CN=62f371ad-f0c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e3:47:e3:a8:f4:ec:3f:6b:b9:48:99:66:d5:
                    ee:81:26:3a:7c:3a:9a:2f:67:8b:a8:54:4e:83:52:
                    93:fa:95:ad:95:7f:d7:87:e2:3e:98:58:6b:84:5e:
                    48:b4:ad:7b:bf:6c:75:f3:71:4c:c8:86:6e:ab:57:
                    a2:84:b8:7f:8d:76:e2:ab:eb:e8:1c:9a:9f:38:de:
                    fc:9d:32:09:f2:2a:ff:3f:f4:55:e2:74:fc:97:e3:
                    c1:41:a2:ac:e1:a4:72:d4:90:ec:66:99:8f:17:22:
                    70:b6:ae:2b:38:4a:96:8c:2c:ca:0e:52:90:c5:da:
                    c7:66:d6:55:7f:dd:a6:8d:62:c1:ba:14:7d:6d:65:
                    0d:e6:0c:19:30:f3:21:4d:a6:42:06:65:f3:f8:33:
                    ae:42:50:30:96:ac:b9:a5:b2:45:98:20:fb:ab:52:
                    33:0d:94:1d:2c:98:24:e6:64:19:ee:13:8b:ef:44:
                    d2:b9:e0:25:fb:45:8c:d5:5b:9a:77:f3:70:37:bd:
                    02:48:71:1e:1d:22:7c:44:c7:3f:98:57:b9:7f:0d:
                    a3:25:be:ac:b5:9c:f5:d2:12:ba:cd:8b:95:eb:b2:
                    0b:85:d0:46:98:20:d2:62:71:dc:93:4a:c1:f2:ae:
                    f8:21:1a:79:93:09:e2:1e:fe:85:a2:02:b9:a7:ac:
                    96:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D6:A2:BE:FF:BF:F8:28:D9:68:B7:28:40:E9:22:B5:D8:CA:B8:86
            X509v3 Authority Key Identifier:
                keyid:EF:5B:49:7F:FD:8B:25:9E:E9:EA:15:7B:02:22:B1:10:26:6C:F5:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/71tJf_2LJZ7p6hV7AiKxECZs9Z8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71tJf_2LJZ7p6hV7AiKxECZs9Z8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/B0DEFBDE188911ED9319027DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:68:9f:6c:1e:6b:76:8d:13:79:13:e3:95:a3:f7:23:c2:72:
         ec:59:16:6a:cb:6d:05:06:45:8e:84:76:de:7f:77:5b:19:ee:
         cc:e9:bf:35:16:7d:74:37:77:bb:f2:d9:08:83:07:21:a5:f1:
         60:82:b2:be:c9:a9:35:0b:7a:05:4e:8b:50:77:4f:96:6a:21:
         a2:52:9f:dd:d9:49:c6:68:38:fa:42:38:58:37:04:58:b8:c3:
         5a:3f:4f:21:d9:66:63:03:1a:f8:0c:f2:fb:83:b5:e6:b6:77:
         b3:81:00:3f:40:29:e2:7c:a5:90:93:51:60:5a:e4:85:ef:69:
         63:36:f3:69:9f:6a:e3:07:2d:e9:65:cf:a7:08:d8:f8:6f:1a:
         ad:fa:71:4a:a9:52:80:f4:d3:81:d3:19:e6:0c:7f:ad:7b:da:
         39:61:b4:30:92:e8:ed:8a:52:51:ad:a0:ef:66:98:0f:da:55:
         18:c7:47:0a:c0:d7:2b:8d:52:7a:3b:3b:50:1d:0e:dd:24:54:
         bf:21:06:33:28:f1:ae:05:60:f7:fa:d9:b9:36:ab:0b:b1:9d:
         be:3f:1f:df:79:e7:3a:b8:38:10:52:ea:56:ab:cb:86:fc:6c:
         7d:a0:0c:79:1c:03:5e:84:f8:ba:50:60:40:9c:6f:a3:c4:84:
         a8:26:70:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:58 2024 by rpki-client on console-ams.rpki-client.org