Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/F78E11F8FD5811EAA593FD4EC4F9AE02.roa
File:                     F78E11F8FD5811EAA593FD4EC4F9AE02.roa (raw, json)
Hash identifier:          nNVLa7MbKq4iCnDfr731gdG7kfMOnnS99gwRoFb7uE4=
Subject key identifier:   64:25:7A:7B:7D:F0:E8:D5:8C:57:35:76:58:7B:88:5F:4D:83:11:EB
Certificate issuer:       /CN=A91CE39F/serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4
Certificate serial:       0262
Authority key identifier: 4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/F78E11F8FD5811EAA593FD4EC4F9AE02.roa
Signing time:             Wed 21 Jul 2021 11:38:46 +0000
ROA not before:           Wed 21 Jul 2021 11:38:46 +0000
ROA not after:            Fri 01 Jul 2022 00:00:00 +0000
asID:                     14618
IP address blocks:        103.151.192.0/24 maxlen: 24
                          103.151.193.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 610 (0x262)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE39F/serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4
        Validity
            Not Before: Jul 21 11:38:46 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=60f80746-8135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:47:13:90:7c:ca:37:8a:c9:f6:98:d3:9e:c6:
                    93:4e:41:e7:0b:d2:6c:29:79:f8:0f:b1:76:85:1a:
                    0b:55:80:11:ce:66:ae:32:a4:6a:97:43:c5:d1:24:
                    60:00:73:9c:b8:ea:4c:e8:9b:0f:27:4f:7c:fa:17:
                    dc:75:2e:f7:bb:2b:64:04:84:83:dc:a6:c3:6e:e0:
                    0a:df:5b:e7:4d:81:ae:18:78:6a:a9:a9:7d:bf:80:
                    84:ee:e7:6a:cd:ca:d9:18:1c:b0:18:9b:db:ab:dc:
                    9b:74:78:26:1d:eb:36:11:dd:b4:31:0f:07:ca:e8:
                    d8:19:50:cc:c8:54:6e:25:bd:b1:99:5d:05:39:64:
                    bf:6c:38:35:08:db:38:5b:b4:ea:50:29:f4:74:82:
                    bc:2a:40:e5:31:d9:21:80:1a:b2:d5:d2:bf:1a:bf:
                    2d:9a:75:30:f4:c3:0a:9b:fc:a7:28:21:f0:87:49:
                    1c:96:2f:97:db:69:71:ee:57:90:66:22:91:e1:7e:
                    fc:51:c5:80:84:ed:f4:8c:82:d1:cf:9b:06:b1:f8:
                    e3:8a:1d:e8:18:4c:3a:d4:51:55:d6:e2:b0:e1:93:
                    49:9c:a2:59:31:c2:5e:4b:d4:a5:5f:c2:a1:a0:64:
                    a2:17:65:d6:2a:06:35:2a:e0:77:23:03:18:ba:38:
                    30:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:25:7A:7B:7D:F0:E8:D5:8C:57:35:76:58:7B:88:5F:4D:83:11:EB
            X509v3 Authority Key Identifier:
                keyid:4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/F78E11F8FD5811EAA593FD4EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cf:28:5b:be:6f:98:6e:cf:2d:6a:e5:73:b4:17:02:19:46:85:
         73:0a:82:21:e9:bf:da:e4:90:b7:86:60:50:b2:2a:14:c7:f7:
         f9:8a:06:64:96:57:08:37:ae:47:00:b2:26:69:1a:d8:ec:a4:
         5b:a2:55:f3:26:a3:34:97:f3:6c:c5:5d:5c:b9:84:24:3b:27:
         b6:47:39:8e:3c:29:c9:7a:08:3e:2b:f1:32:78:1b:0b:0a:bc:
         18:ad:3d:4a:00:66:4d:f8:c0:7f:4a:55:e4:32:82:80:fb:8f:
         87:96:71:26:58:5c:35:c0:5b:8f:e4:77:53:9e:65:06:a7:d0:
         f4:25:d0:ef:0c:4b:45:15:74:74:1e:18:92:de:0c:22:c2:0e:
         35:9c:84:e3:cb:b6:a5:a9:dc:e8:86:f9:ea:08:ca:9d:c1:62:
         cb:b1:72:5f:af:98:4e:28:b4:ee:57:38:1b:9a:eb:ad:1b:98:
         9d:5e:db:82:f0:e1:ee:32:62:ac:a7:e5:3c:7a:45:2f:23:0a:
         f3:82:b7:9a:79:2c:e4:05:75:e0:43:18:02:82:6d:39:f4:4d:
         c8:58:e5:cb:41:23:71:a0:44:8a:33:ed:b4:23:e4:ef:43:a7:
         4e:12:98:8e:02:34:77:c9:f7:60:de:70:de:74:02:63:44:e1:
         a8:54:8b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:08 2023 by rpki-client on console-fra.rpki-client.org