Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/DFF6401E282D11EC86A35B3CC4F9AE02.roa
File:                     DFF6401E282D11EC86A35B3CC4F9AE02.roa (raw, json)
Hash identifier:          HEEDut3cr09VQF/qBvvm/ig/DNmxaqlJv71CCt7wc2Y=
Subject key identifier:   F9:3D:2B:99:95:E9:E3:23:48:5D:5A:AC:C9:02:88:C1:96:C6:85:72
Certificate issuer:       /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Certificate serial:       01C2
Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/DFF6401E282D11EC86A35B3CC4F9AE02.roa
Signing time:             Fri 08 Oct 2021 11:50:04 +0000
ROA not before:           Fri 08 Oct 2021 11:50:04 +0000
ROA not after:            Thu 31 Mar 2022 00:00:00 +0000
asID:                     0
IP address blocks:        166.81.0.0/24 maxlen: 24
                          166.81.1.0/24 maxlen: 24
                          166.81.3.0/24 maxlen: 24
                          166.81.4.0/24 maxlen: 24
                          166.81.7.0/24 maxlen: 24
                          166.81.8.0/24 maxlen: 24
                          166.81.31.0/24 maxlen: 24
                          166.81.36.0/24 maxlen: 24
                          166.81.37.0/24 maxlen: 24
                          166.81.39.0/24 maxlen: 24
                          166.81.40.0/24 maxlen: 24
                          166.81.41.0/24 maxlen: 24
                          166.81.42.0/24 maxlen: 24
                          166.81.43.0/24 maxlen: 24
                          166.81.44.0/24 maxlen: 24
                          166.81.45.0/24 maxlen: 24
                          166.81.46.0/24 maxlen: 24
                          166.81.47.0/24 maxlen: 24
                          166.81.48.0/24 maxlen: 24
                          166.81.49.0/24 maxlen: 24
                          166.81.50.0/24 maxlen: 24
                          166.81.58.0/24 maxlen: 24
                          166.81.59.0/24 maxlen: 24
                          166.81.60.0/24 maxlen: 24
                          166.81.61.0/24 maxlen: 24
                          166.81.62.0/24 maxlen: 24
                          166.81.63.0/24 maxlen: 24
                          166.81.65.0/24 maxlen: 24
                          166.81.66.0/24 maxlen: 24
                          166.81.67.0/24 maxlen: 24
                          166.81.68.0/24 maxlen: 24
                          166.81.69.0/24 maxlen: 24
                          166.81.70.0/24 maxlen: 24
                          166.81.71.0/24 maxlen: 24
                          166.81.72.0/24 maxlen: 24
                          166.81.73.0/24 maxlen: 24
                          166.81.74.0/24 maxlen: 24
                          166.81.75.0/24 maxlen: 24
                          166.81.76.0/24 maxlen: 24
                          166.81.77.0/24 maxlen: 24
                          166.81.78.0/24 maxlen: 24
                          166.81.79.0/24 maxlen: 24
                          166.81.80.0/24 maxlen: 24
                          166.81.81.0/24 maxlen: 24
                          166.81.82.0/24 maxlen: 24
                          166.81.83.0/24 maxlen: 24
                          166.81.84.0/24 maxlen: 24
                          166.81.85.0/24 maxlen: 24
                          166.81.86.0/24 maxlen: 24
                          166.81.87.0/24 maxlen: 24
                          166.81.88.0/24 maxlen: 24
                          166.81.89.0/24 maxlen: 24
                          166.81.90.0/24 maxlen: 24
                          166.81.91.0/24 maxlen: 24
                          166.81.92.0/24 maxlen: 24
                          166.81.93.0/24 maxlen: 24
                          166.81.94.0/24 maxlen: 24
                          166.81.95.0/24 maxlen: 24
                          166.81.96.0/24 maxlen: 24
                          166.81.97.0/24 maxlen: 24
                          166.81.98.0/24 maxlen: 24
                          166.81.99.0/24 maxlen: 24
                          166.81.100.0/24 maxlen: 24
                          166.81.101.0/24 maxlen: 24
                          166.81.102.0/24 maxlen: 24
                          166.81.103.0/24 maxlen: 24
                          166.81.104.0/24 maxlen: 24
                          166.81.105.0/24 maxlen: 24
                          166.81.106.0/24 maxlen: 24
                          166.81.107.0/24 maxlen: 24
                          166.81.108.0/24 maxlen: 24
                          166.81.109.0/24 maxlen: 24
                          166.81.110.0/24 maxlen: 24
                          166.81.111.0/24 maxlen: 24
                          166.81.112.0/24 maxlen: 24
                          166.81.113.0/24 maxlen: 24
                          166.81.114.0/24 maxlen: 24
                          166.81.115.0/24 maxlen: 24
                          166.81.116.0/24 maxlen: 24
                          166.81.117.0/24 maxlen: 24
                          166.81.118.0/24 maxlen: 24
                          166.81.119.0/24 maxlen: 24
                          166.81.120.0/24 maxlen: 24
                          166.81.121.0/24 maxlen: 24
                          166.81.122.0/24 maxlen: 24
                          166.81.123.0/24 maxlen: 24
                          166.81.124.0/24 maxlen: 24
                          166.81.125.0/24 maxlen: 24
                          166.81.126.0/24 maxlen: 24
                          166.81.127.0/24 maxlen: 24
                          166.81.128.0/24 maxlen: 24
                          166.81.129.0/24 maxlen: 24
                          166.81.130.0/24 maxlen: 24
                          166.81.131.0/24 maxlen: 24
                          166.81.132.0/24 maxlen: 24
                          166.81.133.0/24 maxlen: 24
                          166.81.134.0/24 maxlen: 24
                          166.81.135.0/24 maxlen: 24
                          166.81.136.0/24 maxlen: 24
                          166.81.137.0/24 maxlen: 24
                          166.81.138.0/24 maxlen: 24
                          166.81.139.0/24 maxlen: 24
                          166.81.140.0/24 maxlen: 24
                          166.81.141.0/24 maxlen: 24
                          166.81.142.0/24 maxlen: 24
                          166.81.143.0/24 maxlen: 24
                          166.81.144.0/24 maxlen: 24
                          166.81.145.0/24 maxlen: 24
                          166.81.146.0/24 maxlen: 24
                          166.81.147.0/24 maxlen: 24
                          166.81.148.0/24 maxlen: 24
                          166.81.149.0/24 maxlen: 24
                          166.81.150.0/24 maxlen: 24
                          166.81.151.0/24 maxlen: 24
                          166.81.152.0/24 maxlen: 24
                          166.81.153.0/24 maxlen: 24
                          166.81.154.0/24 maxlen: 24
                          166.81.155.0/24 maxlen: 24
                          166.81.156.0/24 maxlen: 24
                          166.81.157.0/24 maxlen: 24
                          166.81.158.0/24 maxlen: 24
                          166.81.159.0/24 maxlen: 24
                          166.81.160.0/24 maxlen: 24
                          166.81.161.0/24 maxlen: 24
                          166.81.162.0/24 maxlen: 24
                          166.81.163.0/24 maxlen: 24
                          166.81.164.0/24 maxlen: 24
                          166.81.165.0/24 maxlen: 24
                          166.81.166.0/24 maxlen: 24
                          166.81.167.0/24 maxlen: 24
                          166.81.168.0/24 maxlen: 24
                          166.81.169.0/24 maxlen: 24
                          166.81.170.0/24 maxlen: 24
                          166.81.171.0/24 maxlen: 24
                          166.81.172.0/24 maxlen: 24
                          166.81.173.0/24 maxlen: 24
                          166.81.174.0/24 maxlen: 24
                          166.81.175.0/24 maxlen: 24
                          166.81.176.0/24 maxlen: 24
                          166.81.177.0/24 maxlen: 24
                          166.81.178.0/24 maxlen: 24
                          166.81.179.0/24 maxlen: 24
                          166.81.180.0/24 maxlen: 24
                          166.81.181.0/24 maxlen: 24
                          166.81.182.0/24 maxlen: 24
                          166.81.183.0/24 maxlen: 24
                          166.81.184.0/24 maxlen: 24
                          166.81.185.0/24 maxlen: 24
                          166.81.186.0/24 maxlen: 24
                          166.81.187.0/24 maxlen: 24
                          166.81.188.0/24 maxlen: 24
                          166.81.189.0/24 maxlen: 24
                          166.81.190.0/24 maxlen: 24
                          166.81.191.0/24 maxlen: 24
                          166.81.192.0/24 maxlen: 24
                          166.81.193.0/24 maxlen: 24
                          166.81.194.0/24 maxlen: 24
                          166.81.195.0/24 maxlen: 24
                          166.81.196.0/24 maxlen: 24
                          166.81.197.0/24 maxlen: 24
                          166.81.198.0/24 maxlen: 24
                          166.81.199.0/24 maxlen: 24
                          166.81.200.0/24 maxlen: 24
                          166.81.201.0/24 maxlen: 24
                          166.81.202.0/24 maxlen: 24
                          166.81.203.0/24 maxlen: 24
                          166.81.204.0/24 maxlen: 24
                          166.81.205.0/24 maxlen: 24
                          166.81.206.0/24 maxlen: 24
                          166.81.207.0/24 maxlen: 24
                          166.81.208.0/24 maxlen: 24
                          166.81.209.0/24 maxlen: 24
                          166.81.210.0/24 maxlen: 24
                          166.81.211.0/24 maxlen: 24
                          166.81.212.0/24 maxlen: 24
                          166.81.213.0/24 maxlen: 24
                          166.81.214.0/24 maxlen: 24
                          166.81.215.0/24 maxlen: 24
                          166.81.216.0/24 maxlen: 24
                          166.81.217.0/24 maxlen: 24
                          166.81.218.0/24 maxlen: 24
                          166.81.219.0/24 maxlen: 24
                          166.81.220.0/24 maxlen: 24
                          166.81.221.0/24 maxlen: 24
                          166.81.222.0/24 maxlen: 24
                          166.81.223.0/24 maxlen: 24
                          166.81.224.0/24 maxlen: 24
                          166.81.225.0/24 maxlen: 24
                          166.81.226.0/24 maxlen: 24
                          166.81.227.0/24 maxlen: 24
                          166.81.228.0/24 maxlen: 24
                          166.81.229.0/24 maxlen: 24
                          166.81.230.0/24 maxlen: 24
                          166.81.231.0/24 maxlen: 24
                          166.81.232.0/24 maxlen: 24
                          166.81.233.0/24 maxlen: 24
                          166.81.234.0/24 maxlen: 24
                          166.81.235.0/24 maxlen: 24
                          166.81.236.0/24 maxlen: 24
                          166.81.237.0/24 maxlen: 24
                          166.81.238.0/24 maxlen: 24
                          166.81.239.0/24 maxlen: 24
                          166.81.240.0/24 maxlen: 24
                          166.81.241.0/24 maxlen: 24
                          166.81.242.0/24 maxlen: 24
                          166.81.243.0/24 maxlen: 24
                          166.81.244.0/24 maxlen: 24
                          166.81.245.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 450 (0x1c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
        Validity
            Not Before: Oct  8 11:50:04 2021 GMT
            Not After : Mar 31 00:00:00 2022 GMT
        Subject: CN=6160306c-937d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:62:60:97:2c:51:3d:f5:89:d6:a1:17:b8:5a:
                    ac:ec:12:67:2a:5b:83:95:e9:64:3b:83:cb:49:81:
                    ee:20:ff:e4:87:5b:cc:49:6f:ed:9a:ca:2b:8e:ec:
                    f4:36:0b:b5:b9:50:7a:f3:fe:f0:55:51:d6:5e:bb:
                    59:31:97:6f:a3:ad:08:88:7d:73:d6:5a:20:e4:59:
                    2a:47:e7:4b:1a:8e:c1:3f:d5:cc:b9:73:9e:e5:e1:
                    c8:c2:b8:c7:02:7e:d7:d6:c3:2a:63:62:39:3d:17:
                    cf:f6:94:2c:41:40:e3:21:1c:a8:5a:b6:ba:85:59:
                    2e:af:3b:8f:7e:8d:4b:95:31:c7:08:a0:66:6a:c2:
                    2a:d3:21:c1:13:02:53:59:a3:5c:7b:81:da:3d:3d:
                    11:3e:bf:be:ff:e0:36:07:3a:c5:05:9e:89:99:42:
                    3a:3e:9b:28:2f:fe:76:4f:07:2d:1a:e9:ed:59:38:
                    08:8c:51:62:72:19:da:99:56:a8:a1:d5:81:79:f3:
                    ae:c2:dd:23:de:6b:8b:e6:3d:44:64:37:33:9f:f3:
                    c4:70:9d:e7:7f:99:67:41:14:0c:fa:92:59:33:b8:
                    ab:ba:c2:3a:44:8e:38:93:24:2a:d3:f1:35:37:91:
                    9d:75:d6:bb:94:a4:2c:fe:36:b0:82:df:0d:9c:b7:
                    54:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3D:2B:99:95:E9:E3:23:48:5D:5A:AC:C9:02:88:C1:96:C6:85:72
            X509v3 Authority Key Identifier:
                keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/DFF6401E282D11EC86A35B3CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.81.0.0/23
                  166.81.3.0-166.81.4.255
                  166.81.7.0-166.81.8.255
                  166.81.31.0/24
                  166.81.36.0/23
                  166.81.39.0-166.81.50.255
                  166.81.58.0-166.81.63.255
                  166.81.65.0-166.81.245.255

    Signature Algorithm: sha256WithRSAEncryption
         48:fd:06:70:96:2a:02:d7:29:29:8a:a3:d5:23:5d:78:df:e3:
         b8:82:a6:7e:82:eb:ab:87:6e:e9:c6:13:b0:a2:29:bd:74:8c:
         aa:c3:5b:dd:0f:33:8b:d0:c7:6e:81:3c:20:3b:b0:24:49:16:
         5b:1e:a4:ca:ab:d7:46:de:8e:5e:2f:0e:32:17:b3:84:5a:25:
         66:ac:87:d3:21:1e:2b:cb:21:75:19:81:c9:1f:ad:66:78:f8:
         9d:77:ee:80:5f:da:74:af:1c:01:56:8d:50:37:b6:d4:db:a5:
         f8:f8:6e:d0:ff:17:6a:8d:07:8c:9b:89:8b:f2:45:d9:78:0c:
         24:90:a3:e6:d2:fa:2a:8a:f6:cb:8f:ae:d9:1d:b7:5f:dd:80:
         98:5a:94:30:12:55:75:c2:67:6e:e6:43:4f:ab:86:3f:21:a2:
         cd:7c:37:5e:50:b9:4d:44:e9:c3:f0:11:85:d6:72:9c:aa:90:
         62:de:df:69:43:b5:37:02:08:b7:2e:51:17:50:13:f9:78:97:
         6f:70:5c:03:07:27:ee:62:fc:3f:ee:ed:66:14:2c:c7:36:5d:
         fa:38:27:59:ea:f9:5e:04:3c:92:59:d8:36:5a:16:01:33:57:
         b6:eb:2b:02:6a:92:d4:96:9b:5c:55:a1:9c:0f:bc:3d:57:9d:
         ce:42:b1:7d
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REMzMUIxMTAvBgNVBAUTKDhCOEFENUNBMUMzRThCOENGNDY4QjVGNDk2QTkxQUJC
MEU0OENGQTgwHhcNMjExMDA4MTE1MDA0WhcNMjIwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MTYwMzA2Yy05MzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6WJglyxRPfWJ1qEXuFqs7BJnKluDlelkO4PLSYHuIP/kh1vMSW/tmsorjuz0
Ngu1uVB68/7wVVHWXrtZMZdvo60IiH1z1log5FkqR+dLGo7BP9XMuXOe5eHIwrjH
An7X1sMqY2I5PRfP9pQsQUDjIRyoWra6hVkurzuPfo1LlTHHCKBmasIq0yHBEwJT
WaNce4HaPT0RPr++/+A2BzrFBZ6JmUI6PpsoL/52TwctGuntWTgIjFFichnamVao
odWBefOuwt0j3muL5j1EZDczn/PEcJ3nf5lnQRQM+pJZM7irusI6RI44kyQq0/E1
N5Gddda7lKQs/jawgt8NnLdUVQIDAQABo4IC5zCCAuMwHQYDVR0OBBYEFPk9K5mV
6eMjSF1arMkCiMGWxoVyMB8GA1UdIwQYMBaAFIuK1cocPouM9Gi19JapGrsOSM+o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMxQi9EMEVDQ0Q0ODg5
M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0ejBhTFgwbHFrYXV3NUl6
NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2k0clZ5aHctaTR6MGFMWDBscWthdXc1SXo2Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REMzMUIvRDBFQ0NENDg4OTNEMTFFQjkxNkRGMDIyQzRGOUFFMDIvREZGNjQwMUUy
ODJEMTFFQzg2QTM1QjNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwcQYIKwYBBQUHAQcBAf8E
YjBgMF4EAgABMFgDBAGmUQAwDAMEAKZRAwMEAKZRBDAMAwQAplEHAwQAplEIAwQA
plEfAwQBplEkMAwDBACmUScDBACmUTIwDAMEAaZROgMEBqZRADAMAwQAplFBAwQB
plH0MA0GCSqGSIb3DQEBCwUAA4IBAQBI/QZwlioC1ykpiqPVI1143+O4gqZ+guur
h27pxhOwoim9dIyqw1vdDzOL0MdugTwgO7AkSRZbHqTKq9dG3o5eLw4yF7OEWiVm
rIfTIR4ryyF1GYHJH61mePidd+6AX9p0rxwBVo1QN7bU26X4+G7Q/xdqjQeMm4mL
8kXZeAwkkKPm0voqivbLj67ZHbdf3YCYWpQwElV1wmdu5kNPq4Y/IaLNfDdeULlN
ROnD8BGF1nKcqpBi3t9pQ7U3Agi3LlEXUBP5eJdvcFwDByfuYvw/7u1mFCzHNl36
OCdZ6vleBDySWdg2WhYBM1e26ysCapLUlptcVaGcD7w9V53OQrF9
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:07 2023 by rpki-client on console-ams.rpki-client.org