Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/454A16AC6A2311EC8F39326FC4F9AE02.roa
File:                     454A16AC6A2311EC8F39326FC4F9AE02.roa (raw, json)
Hash identifier:          hPSDboznhn8keoJvUq3lrzXNuo4ZYErGNnXA2BbnO04=
Subject key identifier:   5E:1D:14:23:25:6E:43:5F:FE:47:00:0A:4F:AB:70:D5:57:62:61:A8
Certificate issuer:       /CN=A91D5606/serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
Certificate serial:       04FC
Authority key identifier: 1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/454A16AC6A2311EC8F39326FC4F9AE02.roa
Signing time:             Sun 05 Feb 2023 01:11:13 +0000
ROA not before:           Sun 05 Feb 2023 01:11:13 +0000
ROA not after:            Sun 31 Mar 2024 00:00:00 +0000
asID:                     59239
IP address blocks:        103.162.51.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1276 (0x4fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5606/serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
        Validity
            Not Before: Feb  5 01:11:13 2023 GMT
            Not After : Mar 31 00:00:00 2024 GMT
        Subject: CN=63df0231-7669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:72:06:0f:35:95:87:d4:72:8e:a5:93:62:90:
                    0a:4d:16:0c:11:2f:2c:e4:b3:a4:48:64:80:4c:6b:
                    2e:68:6c:13:7f:be:8d:19:ac:8a:f7:65:82:28:72:
                    0b:aa:17:f7:51:af:db:fe:ae:82:32:97:2c:b2:38:
                    b9:58:f8:00:92:c3:90:86:87:b2:2e:34:11:7f:50:
                    83:11:3b:2a:9b:48:1f:ee:91:ae:93:c8:f2:8e:85:
                    e3:ad:c7:bc:51:15:27:87:d8:ca:18:6b:0b:a4:66:
                    86:bb:ee:34:8f:47:f4:14:ba:4c:a7:c0:43:0a:c3:
                    5c:6b:f4:20:69:c6:a0:74:14:b9:19:a6:53:c2:e3:
                    da:c8:a1:82:67:f7:a6:2f:24:e2:5d:eb:c6:4f:05:
                    86:5f:31:bc:8a:67:be:55:cb:69:fc:f7:c1:5d:cb:
                    31:91:12:81:d4:72:ff:83:8e:f5:96:bf:ed:34:3e:
                    47:8e:19:24:29:01:2a:94:be:06:42:2b:87:dc:b2:
                    bf:f3:fa:fc:cf:94:f2:15:62:a9:90:7d:3d:e6:03:
                    8c:21:80:ae:a1:0c:75:1b:c0:a8:ac:cc:4b:99:57:
                    46:70:e1:bb:90:21:7c:8f:11:b2:03:bf:d4:f3:bd:
                    46:06:2d:05:cc:06:87:d7:fb:69:0a:45:c2:ac:4f:
                    72:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:1D:14:23:25:6E:43:5F:FE:47:00:0A:4F:AB:70:D5:57:62:61:A8
            X509v3 Authority Key Identifier:
                keyid:1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/454A16AC6A2311EC8F39326FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:53:dc:6a:54:e7:7d:07:95:5b:24:b5:8f:8e:51:30:d3:12:
         bb:c4:df:cf:4a:35:64:a9:69:c1:9a:9b:11:3b:45:b7:64:7b:
         bf:f1:f5:eb:6a:2e:15:39:9f:f5:5a:08:26:1d:f6:0e:a0:e2:
         e2:de:14:30:35:72:9a:2a:ba:cb:28:bd:e1:92:0b:45:d8:c8:
         ca:fc:33:6f:e3:41:f8:e0:3a:0b:20:a9:d9:95:bf:ec:85:73:
         3d:2b:44:57:2b:c5:e8:43:82:f3:20:bf:68:b3:83:0f:69:a6:
         39:7b:38:a1:06:36:57:59:8b:76:6d:e0:08:94:79:5e:29:21:
         ac:b6:1d:42:21:c2:ad:2e:c3:b6:0d:5d:a2:91:b6:22:ed:f5:
         71:9a:6f:9d:64:3c:f3:ca:a7:dc:0f:ad:22:4e:2a:d2:a0:93:
         9a:bd:64:26:67:c5:6a:38:82:d5:e4:15:53:90:3d:b6:ff:56:
         77:34:7b:30:f7:9e:bd:ea:d6:68:6f:01:e6:4f:ab:59:94:94:
         4e:fb:fa:4b:b3:26:54:5a:84:69:b6:84:98:78:c5:b0:40:62:
         5a:5b:99:bb:90:68:e6:cc:72:4c:6e:d2:83:f0:ef:20:e5:7a:
         96:58:39:b2:14:9b:26:c5:e7:17:70:ff:35:7b:01:21:ae:3c:
         4e:3f:58:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:29 2024 by rpki-client on console-ams.rpki-client.org