Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/1C6D4BD8A8C511EC8F560C42C4F9AE02.roa
File:                     1C6D4BD8A8C511EC8F560C42C4F9AE02.roa (raw, json)
Hash identifier:          X7v/MDpp+Zqxt52vFgEV2fQN15kWgGTd/OMHLHAfIpM=
Subject key identifier:   D7:6A:7D:DC:3A:9D:21:C0:21:B0:20:7F:A1:DC:9C:40:0D:51:46:C4
Certificate issuer:       /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Certificate serial:       031D
Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/1C6D4BD8A8C511EC8F560C42C4F9AE02.roa
Signing time:             Mon 21 Mar 2022 03:15:08 +0000
ROA not before:           Mon 21 Mar 2022 03:15:08 +0000
ROA not after:            Fri 31 Mar 2023 00:00:00 +0000
asID:                     0
IP address blocks:        166.81.0.0/24 maxlen: 24
                          166.81.1.0/24 maxlen: 24
                          166.81.3.0/24 maxlen: 24
                          166.81.4.0/24 maxlen: 24
                          166.81.7.0/24 maxlen: 24
                          166.81.8.0/24 maxlen: 24
                          166.81.31.0/24 maxlen: 24
                          166.81.36.0/24 maxlen: 24
                          166.81.37.0/24 maxlen: 24
                          166.81.41.0/24 maxlen: 24
                          166.81.42.0/24 maxlen: 24
                          166.81.43.0/24 maxlen: 24
                          166.81.44.0/24 maxlen: 24
                          166.81.45.0/24 maxlen: 24
                          166.81.46.0/24 maxlen: 24
                          166.81.47.0/24 maxlen: 24
                          166.81.48.0/24 maxlen: 24
                          166.81.49.0/24 maxlen: 24
                          166.81.50.0/24 maxlen: 24
                          166.81.60.0/24 maxlen: 24
                          166.81.61.0/24 maxlen: 24
                          166.81.62.0/24 maxlen: 24
                          166.81.63.0/24 maxlen: 24
                          166.81.65.0/24 maxlen: 24
                          166.81.66.0/24 maxlen: 24
                          166.81.67.0/24 maxlen: 24
                          166.81.68.0/24 maxlen: 24
                          166.81.69.0/24 maxlen: 24
                          166.81.70.0/24 maxlen: 24
                          166.81.71.0/24 maxlen: 24
                          166.81.72.0/24 maxlen: 24
                          166.81.73.0/24 maxlen: 24
                          166.81.74.0/24 maxlen: 24
                          166.81.75.0/24 maxlen: 24
                          166.81.76.0/24 maxlen: 24
                          166.81.77.0/24 maxlen: 24
                          166.81.78.0/24 maxlen: 24
                          166.81.79.0/24 maxlen: 24
                          166.81.80.0/24 maxlen: 24
                          166.81.81.0/24 maxlen: 24
                          166.81.82.0/24 maxlen: 24
                          166.81.83.0/24 maxlen: 24
                          166.81.84.0/24 maxlen: 24
                          166.81.85.0/24 maxlen: 24
                          166.81.86.0/24 maxlen: 24
                          166.81.87.0/24 maxlen: 24
                          166.81.88.0/24 maxlen: 24
                          166.81.89.0/24 maxlen: 24
                          166.81.90.0/24 maxlen: 24
                          166.81.91.0/24 maxlen: 24
                          166.81.92.0/24 maxlen: 24
                          166.81.93.0/24 maxlen: 24
                          166.81.94.0/24 maxlen: 24
                          166.81.95.0/24 maxlen: 24
                          166.81.96.0/24 maxlen: 24
                          166.81.97.0/24 maxlen: 24
                          166.81.98.0/24 maxlen: 24
                          166.81.99.0/24 maxlen: 24
                          166.81.100.0/24 maxlen: 24
                          166.81.101.0/24 maxlen: 24
                          166.81.102.0/24 maxlen: 24
                          166.81.103.0/24 maxlen: 24
                          166.81.104.0/24 maxlen: 24
                          166.81.105.0/24 maxlen: 24
                          166.81.106.0/24 maxlen: 24
                          166.81.107.0/24 maxlen: 24
                          166.81.108.0/24 maxlen: 24
                          166.81.109.0/24 maxlen: 24
                          166.81.110.0/24 maxlen: 24
                          166.81.111.0/24 maxlen: 24
                          166.81.112.0/24 maxlen: 24
                          166.81.113.0/24 maxlen: 24
                          166.81.114.0/24 maxlen: 24
                          166.81.115.0/24 maxlen: 24
                          166.81.116.0/24 maxlen: 24
                          166.81.117.0/24 maxlen: 24
                          166.81.118.0/24 maxlen: 24
                          166.81.119.0/24 maxlen: 24
                          166.81.120.0/24 maxlen: 24
                          166.81.121.0/24 maxlen: 24
                          166.81.122.0/24 maxlen: 24
                          166.81.123.0/24 maxlen: 24
                          166.81.124.0/24 maxlen: 24
                          166.81.125.0/24 maxlen: 24
                          166.81.126.0/24 maxlen: 24
                          166.81.127.0/24 maxlen: 24
                          166.81.128.0/24 maxlen: 24
                          166.81.129.0/24 maxlen: 24
                          166.81.130.0/24 maxlen: 24
                          166.81.131.0/24 maxlen: 24
                          166.81.132.0/24 maxlen: 24
                          166.81.133.0/24 maxlen: 24
                          166.81.134.0/24 maxlen: 24
                          166.81.135.0/24 maxlen: 24
                          166.81.136.0/24 maxlen: 24
                          166.81.137.0/24 maxlen: 24
                          166.81.138.0/24 maxlen: 24
                          166.81.139.0/24 maxlen: 24
                          166.81.140.0/24 maxlen: 24
                          166.81.141.0/24 maxlen: 24
                          166.81.142.0/24 maxlen: 24
                          166.81.143.0/24 maxlen: 24
                          166.81.144.0/24 maxlen: 24
                          166.81.145.0/24 maxlen: 24
                          166.81.146.0/24 maxlen: 24
                          166.81.147.0/24 maxlen: 24
                          166.81.148.0/24 maxlen: 24
                          166.81.149.0/24 maxlen: 24
                          166.81.150.0/24 maxlen: 24
                          166.81.151.0/24 maxlen: 24
                          166.81.152.0/24 maxlen: 24
                          166.81.153.0/24 maxlen: 24
                          166.81.154.0/24 maxlen: 24
                          166.81.155.0/24 maxlen: 24
                          166.81.156.0/24 maxlen: 24
                          166.81.157.0/24 maxlen: 24
                          166.81.158.0/24 maxlen: 24
                          166.81.159.0/24 maxlen: 24
                          166.81.160.0/24 maxlen: 24
                          166.81.161.0/24 maxlen: 24
                          166.81.162.0/24 maxlen: 24
                          166.81.163.0/24 maxlen: 24
                          166.81.164.0/24 maxlen: 24
                          166.81.165.0/24 maxlen: 24
                          166.81.166.0/24 maxlen: 24
                          166.81.167.0/24 maxlen: 24
                          166.81.168.0/24 maxlen: 24
                          166.81.169.0/24 maxlen: 24
                          166.81.170.0/24 maxlen: 24
                          166.81.171.0/24 maxlen: 24
                          166.81.172.0/24 maxlen: 24
                          166.81.173.0/24 maxlen: 24
                          166.81.174.0/24 maxlen: 24
                          166.81.175.0/24 maxlen: 24
                          166.81.176.0/24 maxlen: 24
                          166.81.177.0/24 maxlen: 24
                          166.81.178.0/24 maxlen: 24
                          166.81.179.0/24 maxlen: 24
                          166.81.180.0/24 maxlen: 24
                          166.81.181.0/24 maxlen: 24
                          166.81.182.0/24 maxlen: 24
                          166.81.183.0/24 maxlen: 24
                          166.81.184.0/24 maxlen: 24
                          166.81.185.0/24 maxlen: 24
                          166.81.186.0/24 maxlen: 24
                          166.81.187.0/24 maxlen: 24
                          166.81.188.0/24 maxlen: 24
                          166.81.189.0/24 maxlen: 24
                          166.81.190.0/24 maxlen: 24
                          166.81.191.0/24 maxlen: 24
                          166.81.192.0/24 maxlen: 24
                          166.81.193.0/24 maxlen: 24
                          166.81.194.0/24 maxlen: 24
                          166.81.195.0/24 maxlen: 24
                          166.81.196.0/24 maxlen: 24
                          166.81.197.0/24 maxlen: 24
                          166.81.198.0/24 maxlen: 24
                          166.81.199.0/24 maxlen: 24
                          166.81.200.0/24 maxlen: 24
                          166.81.201.0/24 maxlen: 24
                          166.81.202.0/24 maxlen: 24
                          166.81.203.0/24 maxlen: 24
                          166.81.204.0/24 maxlen: 24
                          166.81.205.0/24 maxlen: 24
                          166.81.206.0/24 maxlen: 24
                          166.81.207.0/24 maxlen: 24
                          166.81.208.0/24 maxlen: 24
                          166.81.209.0/24 maxlen: 24
                          166.81.210.0/24 maxlen: 24
                          166.81.211.0/24 maxlen: 24
                          166.81.212.0/24 maxlen: 24
                          166.81.213.0/24 maxlen: 24
                          166.81.214.0/24 maxlen: 24
                          166.81.215.0/24 maxlen: 24
                          166.81.216.0/24 maxlen: 24
                          166.81.217.0/24 maxlen: 24
                          166.81.218.0/24 maxlen: 24
                          166.81.219.0/24 maxlen: 24
                          166.81.220.0/24 maxlen: 24
                          166.81.221.0/24 maxlen: 24
                          166.81.222.0/24 maxlen: 24
                          166.81.223.0/24 maxlen: 24
                          166.81.224.0/24 maxlen: 24
                          166.81.225.0/24 maxlen: 24
                          166.81.226.0/24 maxlen: 24
                          166.81.227.0/24 maxlen: 24
                          166.81.228.0/24 maxlen: 24
                          166.81.229.0/24 maxlen: 24
                          166.81.230.0/24 maxlen: 24
                          166.81.231.0/24 maxlen: 24
                          166.81.232.0/24 maxlen: 24
                          166.81.233.0/24 maxlen: 24
                          166.81.234.0/24 maxlen: 24
                          166.81.235.0/24 maxlen: 24
                          166.81.236.0/24 maxlen: 24
                          166.81.237.0/24 maxlen: 24
                          166.81.238.0/24 maxlen: 24
                          166.81.239.0/24 maxlen: 24
                          166.81.240.0/24 maxlen: 24
                          166.81.241.0/24 maxlen: 24
                          166.81.242.0/24 maxlen: 24
                          166.81.243.0/24 maxlen: 24
                          166.81.244.0/24 maxlen: 24
                          166.81.245.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 797 (0x31d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
        Validity
            Not Before: Mar 21 03:15:08 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=6237edbc-18ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:96:c1:0a:4d:bf:c2:fc:42:4e:38:71:5e:2b:
                    45:9d:0e:47:dc:ba:62:79:69:86:48:73:0b:21:48:
                    a4:8c:b0:95:04:b3:c4:78:29:5b:17:8f:22:9b:1b:
                    41:46:ea:d4:20:b2:23:af:f2:90:45:2d:07:9a:23:
                    49:a2:ea:7d:41:a2:f9:43:d0:59:a6:9c:1c:1c:5f:
                    ac:6b:47:ed:1e:d8:02:8d:74:43:66:3d:45:8e:20:
                    5f:fc:67:10:02:7e:9c:27:90:a4:d7:fd:11:99:03:
                    36:72:8a:c4:fb:d4:f8:0c:3b:d0:67:52:1f:7b:12:
                    87:1e:b5:b0:a1:60:7d:e1:49:78:2d:72:e8:33:3e:
                    db:90:39:ee:92:a1:db:41:5e:13:78:b6:2a:73:1a:
                    10:70:97:a0:87:d8:93:ca:b9:e6:4d:43:c3:88:d6:
                    ca:87:21:1a:0a:68:be:95:79:70:9b:0b:92:ce:d7:
                    f8:5c:c6:5f:0c:5f:f1:82:0e:1f:3d:f0:35:42:5e:
                    cb:f2:07:67:1d:25:25:3e:18:70:27:d6:59:65:8a:
                    9b:b1:c3:fe:d8:65:9d:f2:82:72:94:b1:db:2e:c2:
                    14:f1:12:1d:a6:6d:59:5b:31:cd:3b:ae:8b:da:c3:
                    5a:7e:78:dc:ce:a9:bf:74:ec:83:b0:cf:df:5d:68:
                    8c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6A:7D:DC:3A:9D:21:C0:21:B0:20:7F:A1:DC:9C:40:0D:51:46:C4
            X509v3 Authority Key Identifier:
                keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/1C6D4BD8A8C511EC8F560C42C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.81.0.0/23
                  166.81.3.0-166.81.4.255
                  166.81.7.0-166.81.8.255
                  166.81.31.0/24
                  166.81.36.0/23
                  166.81.41.0-166.81.50.255
                  166.81.60.0/22
                  166.81.65.0-166.81.245.255

    Signature Algorithm: sha256WithRSAEncryption
         31:a1:b7:f6:b7:47:15:e4:60:9d:49:4d:df:e7:82:93:3b:a6:
         3b:f4:cf:be:c1:16:b7:0d:de:2f:9c:9f:a8:94:5e:2c:b7:48:
         0e:39:bb:a5:bf:73:9c:81:58:7c:18:59:f4:41:51:09:0e:cd:
         0f:3d:a5:82:32:14:96:04:af:da:87:17:a8:07:ad:4a:b4:71:
         d0:81:0b:56:24:db:83:e4:cd:76:55:22:d9:54:3d:3f:99:54:
         49:12:10:80:7c:7c:66:e7:f7:77:c7:14:1a:fc:3c:3e:0a:c0:
         d4:e7:d9:56:98:f6:67:31:1d:cd:eb:97:8a:7b:87:83:be:12:
         0a:77:01:13:c3:91:cd:fd:4b:82:ac:a9:0e:22:66:e1:46:20:
         63:83:7d:ec:1b:8e:52:f7:fc:72:08:13:8e:78:2c:37:f5:56:
         48:4c:c5:a8:ab:2f:b8:5f:f5:7e:df:9a:93:13:11:d2:8d:07:
         11:44:c1:0d:f1:e8:66:2a:76:d9:2b:92:19:05:ed:95:f2:cf:
         10:ad:0f:1c:32:d8:7d:4a:09:35:c1:e7:be:2f:b8:a0:d7:22:
         2e:de:98:5e:c9:fd:ad:9c:27:7a:2d:d0:83:47:0f:44:9c:9b:
         39:00:d5:26:48:61:ad:1c:2c:62:57:db:a4:eb:3f:ea:ba:ee:
         c3:45:65:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:10 2023 by rpki-client on console-fra.rpki-client.org