Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/F1695EAC6FC211ED8B959D32C4F9AE02.roa
File:                     F1695EAC6FC211ED8B959D32C4F9AE02.roa (raw, json)
Hash identifier:          bp1ojgCMFs8kXWnGXnHlWvgVIxpx8scv48k9VZDdSXc=
Subject key identifier:   D1:FF:03:0D:69:5A:69:4C:D3:EF:47:39:B7:B8:05:00:AE:05:59:C2
Certificate issuer:       /CN=A91E268B/serialNumber=462B16D327972EA771226A01588B5205EFEA4496
Certificate serial:       047C
Authority key identifier: 46:2B:16:D3:27:97:2E:A7:71:22:6A:01:58:8B:52:05:EF:EA:44:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/F1695EAC6FC211ED8B959D32C4F9AE02.roa
Signing time:             Tue 29 Nov 2022 08:50:58 +0000
ROA not before:           Tue 29 Nov 2022 08:50:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8075
IP address blocks:        103.164.237.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1148 (0x47c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E268B/serialNumber=462B16D327972EA771226A01588B5205EFEA4496
        Validity
            Not Before: Nov 29 08:50:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6385c7f2-038f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b8:dc:87:b3:d0:00:2e:39:3d:0f:36:3f:de:
                    4c:c7:ef:b3:79:16:0b:ca:95:66:5a:77:7d:00:8a:
                    ee:5a:5b:62:20:1e:8a:c0:24:d0:16:b5:1c:00:69:
                    ed:1e:dc:51:18:9f:44:34:b4:ff:cf:72:6f:9c:8b:
                    2c:48:38:91:cd:4b:97:b1:17:15:0a:d4:c2:9d:b3:
                    cb:0d:0c:0e:99:0e:d2:e8:70:c1:2e:b3:f5:64:d6:
                    e6:d9:08:54:74:34:76:82:f7:82:48:28:5c:42:e2:
                    27:37:bc:ed:3f:36:89:af:84:ee:be:e5:b3:9d:16:
                    b6:d1:af:f2:2d:7b:4b:7b:f6:38:6c:fe:76:4c:dc:
                    96:55:1b:84:d8:df:28:fe:d0:e2:3a:c6:a3:d7:7f:
                    b8:00:9d:41:d7:f3:87:1c:a1:a6:11:7d:26:bf:ec:
                    ee:a1:42:84:8a:e8:6c:8c:d6:7c:43:ee:f2:9a:46:
                    5c:bb:64:8f:c3:70:5d:0d:c4:1f:3a:1c:97:73:63:
                    bd:53:78:c9:1e:49:fd:09:dd:41:e1:0d:7d:9b:5d:
                    3a:b7:79:a9:f0:e2:e6:08:3e:72:2f:3b:5a:c9:40:
                    46:12:0c:10:ab:f0:3e:30:b7:5f:c0:45:c5:8c:20:
                    d4:b1:69:0e:84:db:27:46:b5:d8:b7:b4:ff:63:e3:
                    64:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:FF:03:0D:69:5A:69:4C:D3:EF:47:39:B7:B8:05:00:AE:05:59:C2
            X509v3 Authority Key Identifier:
                keyid:46:2B:16:D3:27:97:2E:A7:71:22:6A:01:58:8B:52:05:EF:EA:44:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/F1695EAC6FC211ED8B959D32C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:c9:43:24:a7:13:0a:02:bd:2c:32:16:bb:8d:ec:bf:74:84:
         73:bb:5f:85:18:e1:ad:dc:17:90:17:de:35:3e:6a:62:03:9e:
         ea:9a:52:70:6a:f6:29:b4:d9:d2:c9:f5:0b:5c:61:fa:c6:34:
         1b:6f:65:54:2f:af:42:db:f0:c4:ad:60:33:bf:92:da:9e:43:
         0c:cf:2f:31:07:37:94:84:f3:c2:85:b5:e9:a2:ff:9d:e4:17:
         d2:84:41:3b:14:c8:e8:b3:f3:65:30:6a:b1:83:79:a6:7c:de:
         70:4c:a8:7a:35:a2:33:66:d7:25:c5:fd:0e:63:4a:d5:14:eb:
         45:e9:2c:40:5b:75:70:b4:a6:39:59:cb:ae:1c:95:f0:58:54:
         7b:6c:8f:39:45:8a:a4:33:4f:3d:0d:3f:89:d0:1f:5b:12:e2:
         4b:76:0a:9a:d7:86:5d:32:18:0e:ef:53:25:a3:ea:06:85:50:
         42:06:ea:52:a2:41:72:c0:85:52:63:ce:72:be:c4:2a:0b:66:
         0b:27:e1:af:a4:02:f8:f8:d3:1a:0c:a2:79:b0:31:95:a2:b6:
         4c:ee:93:b1:67:90:51:39:d5:47:09:b6:68:01:fd:42:e7:dc:
         c7:91:3d:27:11:23:2f:c4:c6:4f:c2:db:3a:95:ca:50:a3:10:
         09:fd:2f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:44 2024 by rpki-client on console-fra.rpki-client.org