Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/6A153E1427AE11EDAF8E166BC4F9AE02.roa
File:                     6A153E1427AE11EDAF8E166BC4F9AE02.roa (raw, json)
Hash identifier:          avaXQNk9U//n6hVC++h3uDTU0HmZbboFLuIHBiGLFwQ=
Subject key identifier:   87:3E:EB:48:74:D4:51:B4:BB:BD:93:FC:E0:AE:1F:68:0A:FE:8A:65
Certificate issuer:       /CN=A9113066/serialNumber=11BE935002F028C17CEFCB5F0A586839925B534A
Certificate serial:       02AB
Authority key identifier: 11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/6A153E1427AE11EDAF8E166BC4F9AE02.roa
Signing time:             Sun 25 Dec 2022 03:42:44 +0000
ROA not before:           Sun 25 Dec 2022 03:42:44 +0000
ROA not after:            Fri 01 Mar 2024 00:00:00 +0000
asID:                     7586
IP address blocks:        103.177.45.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 683 (0x2ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113066/serialNumber=11BE935002F028C17CEFCB5F0A586839925B534A
        Validity
            Not Before: Dec 25 03:42:44 2022 GMT
            Not After : Mar  1 00:00:00 2024 GMT
        Subject: CN=63a7c6b3-7098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:50:98:44:7c:66:9d:6d:0e:d5:eb:e6:70:45:
                    8d:7d:1b:99:8f:a5:f3:a6:f5:4c:17:f9:4d:95:fc:
                    fd:23:ed:ca:d1:ee:9b:78:2d:9f:eb:d2:b9:97:88:
                    74:51:36:1c:97:e3:76:ec:7e:c3:ac:49:9a:39:c4:
                    d0:d8:6c:ce:3a:13:bc:cc:43:24:b5:c7:c1:a2:4f:
                    a2:48:9a:d5:94:ed:f4:0a:cb:1d:92:3f:35:ab:e2:
                    c1:7c:f0:54:98:b4:4b:0b:0e:be:96:c5:04:96:4c:
                    a0:99:14:7a:bd:c6:d1:b9:46:89:9f:b2:b9:33:fc:
                    dc:8d:d0:bb:59:ed:0e:1e:9a:db:e7:65:df:2f:08:
                    44:b1:fa:66:39:aa:20:9d:b4:e5:a0:ca:9b:a2:4d:
                    3e:85:e6:b3:ff:e4:62:31:85:5c:75:99:df:0a:79:
                    0f:d0:e1:c1:86:ad:82:d4:65:eb:14:93:c7:99:61:
                    a4:e5:c3:af:74:ee:09:03:fd:d8:d8:28:71:ac:de:
                    45:14:3a:4b:7c:80:bc:77:b9:ed:ad:2c:c7:1e:6a:
                    5b:87:4a:99:b1:30:dc:ae:c1:19:09:8a:0c:26:95:
                    1d:fd:1b:df:1a:91:c9:f9:d3:12:88:1d:ba:d0:2b:
                    ad:e2:53:1a:82:c0:eb:ba:d7:c3:ff:3e:07:48:c2:
                    f9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:3E:EB:48:74:D4:51:B4:BB:BD:93:FC:E0:AE:1F:68:0A:FE:8A:65
            X509v3 Authority Key Identifier:
                keyid:11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/6A153E1427AE11EDAF8E166BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:0f:45:ae:ce:ad:51:7c:ba:94:7b:38:31:33:06:02:d3:b5:
         ba:e8:44:39:82:62:29:12:46:8e:3a:4f:7f:69:9f:79:15:a9:
         38:56:8e:1c:69:da:2c:49:38:6d:2e:ff:82:ac:a1:ca:fb:77:
         ea:ee:4e:19:ee:0c:d9:95:96:7a:74:42:1c:50:fc:a5:c9:29:
         00:50:9c:a8:48:4b:13:0e:0d:3e:44:b3:3b:ff:07:42:45:9c:
         77:fb:10:14:e7:21:55:9d:e2:03:3f:b0:ba:a0:aa:5a:20:82:
         91:11:9b:d0:91:c0:69:7a:0b:f5:c0:92:3d:82:30:12:c8:67:
         45:af:24:76:91:ce:66:12:d9:80:aa:67:40:45:a6:40:8a:b4:
         ae:0e:0d:6d:bf:ca:4c:ea:b8:0b:1a:a2:e9:4e:64:a4:16:b0:
         f4:fa:0b:30:14:87:33:a2:e0:df:67:fd:a6:36:42:7f:9d:b3:
         7b:ad:0a:93:6a:5a:74:ee:b1:7e:66:cf:a5:35:bc:a0:bd:8c:
         df:c3:16:12:9c:b7:36:93:c1:f0:e8:35:5f:f7:27:d5:cd:80:
         7b:ce:e6:44:ba:08:f0:0b:1e:f5:5d:89:db:88:69:00:9b:36:
         a7:bb:7a:83:20:ff:4b:67:6d:86:de:03:19:12:f7:04:57:7c:
         08:4d:ee:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org