Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/1E2C78F86B2511EEB5FD2521C4F9AE02.roa
File:                     1E2C78F86B2511EEB5FD2521C4F9AE02.roa (raw, json)
Hash identifier:          C82RRM4tZqtTql/at2ia1YIfTsrCjg+sCoPcWZgxtTM=
Subject key identifier:   09:60:AA:DC:D6:B3:C2:A0:E4:DE:5A:10:12:E0:F1:37:81:47:B0:99
Certificate issuer:       /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial:       0AAA
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/1E2C78F86B2511EEB5FD2521C4F9AE02.roa
Signing time:             Mon 16 Oct 2023 00:54:21 +0000
ROA not before:           Mon 16 Oct 2023 00:54:21 +0000
ROA not after:            Fri 01 Mar 2024 00:00:00 +0000
asID:                     4788
IP address blocks:        1.9.0.0/16 maxlen: 24
                          1.32.0.0/17 maxlen: 19
                          27.146.0.0/16 maxlen: 21
                          27.146.0.0/17 maxlen: 24
                          27.146.128.0/18 maxlen: 24
                          27.146.192.0/19 maxlen: 24
                          27.146.224.0/20 maxlen: 24
                          27.146.240.0/21 maxlen: 24
                          27.146.248.0/22 maxlen: 22
                          27.146.248.0/23 maxlen: 23
                          27.146.248.0/24 maxlen: 24
                          42.188.0.0/14 maxlen: 19
                          45.116.240.0/22 maxlen: 22
                          45.116.244.0/22 maxlen: 24
                          58.26.0.0/16 maxlen: 24
                          58.27.0.0/17 maxlen: 24
                          58.139.0.0/16 maxlen: 17
                          58.139.0.0/17 maxlen: 24
                          58.139.128.0/18 maxlen: 21
                          58.139.128.0/19 maxlen: 24
                          58.139.160.0/20 maxlen: 24
                          58.139.176.0/21 maxlen: 24
                          58.139.184.0/22 maxlen: 22
                          58.139.184.0/23 maxlen: 24
                          60.48.0.0/14 maxlen: 18
                          60.48.0.0/15 maxlen: 22
                          60.50.0.0/16 maxlen: 22
                          60.51.0.0/18 maxlen: 22
                          60.51.64.0/19 maxlen: 20
                          60.51.64.0/20 maxlen: 22
                          60.51.80.0/21 maxlen: 22
                          60.52.0.0/15 maxlen: 20
                          60.52.0.0/16 maxlen: 23
                          60.53.0.0/17 maxlen: 23
                          60.53.128.0/18 maxlen: 23
                          60.53.192.0/19 maxlen: 23
                          60.53.224.0/20 maxlen: 23
                          60.53.240.0/21 maxlen: 21
                          60.53.240.0/22 maxlen: 22
                          60.53.240.0/23 maxlen: 23
                          60.54.0.0/16 maxlen: 22
                          103.1.104.0/22 maxlen: 22
                          103.4.140.0/22 maxlen: 22
                          103.4.140.0/23 maxlen: 24
                          103.4.142.0/23 maxlen: 24
                          110.159.0.0/16 maxlen: 22
                          114.133.0.0/16 maxlen: 21
                          114.133.0.0/17 maxlen: 24
                          114.133.128.0/18 maxlen: 24
                          114.133.192.0/19 maxlen: 24
                          114.133.224.0/20 maxlen: 24
                          114.133.240.0/21 maxlen: 24
                          115.132.0.0/20 maxlen: 22
                          115.132.16.0/20 maxlen: 22
                          115.132.32.0/20 maxlen: 22
                          115.132.48.0/20 maxlen: 22
                          115.132.64.0/20 maxlen: 22
                          115.132.80.0/20 maxlen: 22
                          115.132.96.0/19 maxlen: 22
                          115.132.128.0/20 maxlen: 22
                          115.132.144.0/20 maxlen: 22
                          115.132.160.0/20 maxlen: 22
                          115.132.176.0/20 maxlen: 22
                          115.132.192.0/20 maxlen: 22
                          115.132.208.0/20 maxlen: 22
                          115.132.224.0/20 maxlen: 22
                          115.132.240.0/20 maxlen: 22
                          115.133.0.0/20 maxlen: 20
                          115.133.0.0/21 maxlen: 21
                          118.100.0.0/16 maxlen: 22
                          118.101.0.0/16 maxlen: 22
                          120.140.0.0/19 maxlen: 19
                          120.140.32.0/19 maxlen: 19
                          120.140.66.0/24 maxlen: 24
                          120.140.67.0/24 maxlen: 24
                          124.13.0.0/16 maxlen: 22
                          124.82.0.0/16 maxlen: 21
                          175.136.0.0/13 maxlen: 21
                          175.142.248.0/22 maxlen: 22
                          180.72.0.0/14 maxlen: 22
                          202.171.192.0/20 maxlen: 24
                          202.178.0.0/19 maxlen: 19
                          202.178.32.0/19 maxlen: 24
                          202.178.64.0/20 maxlen: 24
                          202.188.0.0/16 maxlen: 24
                          202.188.0.0/17 maxlen: 24
                          202.188.0.0/18 maxlen: 24
                          202.188.64.0/18 maxlen: 24
                          202.188.68.0/22 maxlen: 24
                          202.188.72.0/24 maxlen: 24
                          202.188.76.0/22 maxlen: 24
                          202.188.80.0/23 maxlen: 24
                          202.188.84.0/23 maxlen: 24
                          202.188.86.0/23 maxlen: 24
                          202.188.88.0/23 maxlen: 24
                          202.188.128.0/17 maxlen: 24
                          202.188.128.0/18 maxlen: 24
                          202.188.192.0/18 maxlen: 24
                          202.188.192.0/19 maxlen: 24
                          202.188.224.0/19 maxlen: 24
                          203.106.0.0/16 maxlen: 24
                          203.106.0.0/17 maxlen: 24
                          203.106.0.0/18 maxlen: 24
                          203.106.32.0/19 maxlen: 24
                          203.106.64.0/18 maxlen: 24
                          203.106.64.0/22 maxlen: 22
                          203.106.68.0/22 maxlen: 24
                          203.106.72.0/22 maxlen: 24
                          203.106.85.0/24 maxlen: 24
                          203.106.96.0/23 maxlen: 24
                          203.106.98.0/24 maxlen: 24
                          203.106.99.0/24 maxlen: 24
                          203.106.100.0/23 maxlen: 24
                          203.106.112.0/23 maxlen: 24
                          203.106.114.0/23 maxlen: 24
                          203.106.116.0/23 maxlen: 24
                          203.106.128.0/17 maxlen: 17
                          203.106.128.0/17 maxlen: 24
                          203.106.128.0/18 maxlen: 24
                          203.106.192.0/18 maxlen: 24
                          203.106.192.0/19 maxlen: 24
                          210.186.0.0/16 maxlen: 24
                          210.186.16.0/24 maxlen: 24
                          210.186.17.0/24 maxlen: 24
                          210.186.18.0/24 maxlen: 24
                          210.186.20.0/24 maxlen: 24
                          210.186.21.0/24 maxlen: 24
                          210.186.27.0/24 maxlen: 24
                          210.186.30.0/24 maxlen: 24
                          210.186.33.0/24 maxlen: 24
                          210.186.100.0/22 maxlen: 24
                          210.186.104.0/22 maxlen: 24
                          210.186.108.0/22 maxlen: 24
                          210.186.112.0/22 maxlen: 24
                          210.186.116.0/22 maxlen: 24
                          210.186.120.0/22 maxlen: 24
                          210.186.124.0/22 maxlen: 24
                          210.186.192.0/21 maxlen: 24
                          210.186.200.0/21 maxlen: 24
                          210.186.208.0/21 maxlen: 24
                          210.186.216.0/22 maxlen: 24
                          210.186.220.0/22 maxlen: 24
                          210.186.224.0/21 maxlen: 24
                          210.186.232.0/21 maxlen: 24
                          210.186.240.0/21 maxlen: 24
                          210.186.248.0/22 maxlen: 24
                          210.187.0.0/16 maxlen: 24
                          210.187.42.0/24 maxlen: 24
                          210.187.54.0/24 maxlen: 24
                          210.187.64.0/18 maxlen: 24
                          210.187.208.0/21 maxlen: 21
                          210.187.216.0/21 maxlen: 21
                          210.187.224.0/21 maxlen: 21
                          210.187.232.0/21 maxlen: 21
                          210.187.240.0/21 maxlen: 21
                          210.187.248.0/21 maxlen: 21
                          210.195.0.0/16 maxlen: 21
                          218.111.0.0/16 maxlen: 18
                          218.208.0.0/16 maxlen: 24
                          219.92.0.0/16 maxlen: 24
                          219.93.0.0/16 maxlen: 24
                          219.94.0.0/17 maxlen: 18
                          219.94.0.0/18 maxlen: 24
                          219.95.0.0/16 maxlen: 21
                          2001:e68::/32 maxlen: 64
                          2001:e68::/35 maxlen: 35
                          2001:e68:2::/56 maxlen: 56
                          2001:e68:2000::/48 maxlen: 48
                          2001:e68:2001::/64 maxlen: 64
                          2001:e68:2001:1::/64 maxlen: 64
                          2001:e68:2001:2::/63 maxlen: 63
                          2001:e68:2001:4::/62 maxlen: 62
                          2001:e68:2001:8::/61 maxlen: 61
                          2001:e68:2001:10::/60 maxlen: 60
                          2001:e68:2001:20::/59 maxlen: 59
                          2001:e68:2001:40::/58 maxlen: 58
                          2001:e68:2001:80::/57 maxlen: 57
                          2001:e68:2001:100::/56 maxlen: 56
                          2001:e68:2001:200::/55 maxlen: 55
                          2001:e68:2001:400::/54 maxlen: 54
                          2001:e68:2001:800::/53 maxlen: 53
                          2001:e68:2001:1000::/52 maxlen: 52
                          2001:e68:2001:2000::/51 maxlen: 51
                          2001:e68:2001:4000::/50 maxlen: 50
                          2001:e68:2001:8000::/49 maxlen: 49
                          2001:e68:2002::/47 maxlen: 47
                          2001:e68:2004::/46 maxlen: 46
                          2001:e68:2008::/45 maxlen: 45
                          2001:e68:2010::/44 maxlen: 44
                          2001:e68:2020::/43 maxlen: 43
                          2001:e68:2040::/42 maxlen: 42
                          2001:e68:2080::/41 maxlen: 41
                          2001:e68:2100::/40 maxlen: 40
                          2001:e68:2200::/39 maxlen: 39
                          2001:e68:2400::/38 maxlen: 38
                          2001:e68:2800::/37 maxlen: 37
                          2001:e68:3000::/36 maxlen: 36
                          2001:e68:4000::/34 maxlen: 34
                          2001:e68:8000::/33 maxlen: 33
                          2001:4470::/32 maxlen: 32
                          2401:3c00:202::/47 maxlen: 47
                          2401:3c00:204::/47 maxlen: 47
                          2401:3c00:206::/47 maxlen: 47
                          2401:3c00:208::/47 maxlen: 47
                          2401:3c00:20a::/47 maxlen: 47
                          2401:3c00:20c::/47 maxlen: 47
                          2401:3c00:20e::/47 maxlen: 47
                          2401:3c00:210::/47 maxlen: 47
                          2401:3c00:212::/47 maxlen: 47
                          2401:3c00:214::/47 maxlen: 47
                          2401:3c00:216::/47 maxlen: 47
                          2401:3c00:218::/47 maxlen: 47

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2730 (0xaaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
        Validity
            Not Before: Oct 16 00:54:21 2023 GMT
            Not After : Mar  1 00:00:00 2024 GMT
        Subject: CN=652c89bd-6706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:93:78:d3:c4:02:28:c9:c1:d9:f7:ec:9c:a6:
                    d2:1c:36:37:c3:a7:b4:e5:46:12:3d:e4:04:5a:b6:
                    4b:9c:ad:0a:da:10:da:65:26:3c:21:2c:ec:70:02:
                    be:3c:a0:d5:9f:87:2e:f1:31:82:76:2c:6b:35:ed:
                    f1:75:d9:be:f7:df:2d:36:a0:a8:85:af:45:c7:31:
                    a3:92:5e:a5:17:98:94:e6:f6:79:10:ff:f3:a7:49:
                    2d:b9:d6:90:a4:e3:92:e6:9a:ca:44:ad:d7:83:37:
                    e3:ad:a6:66:5b:b5:24:02:0c:09:7c:6c:70:0c:d8:
                    ba:40:a3:3e:a4:65:a6:71:5d:b3:17:01:60:c5:bd:
                    7d:22:84:0b:c2:e8:ac:7f:a2:3c:3a:b5:5c:c7:1c:
                    17:e4:f6:a2:dd:5d:82:26:4a:ea:62:8f:25:49:0f:
                    25:cb:a8:22:eb:c5:65:21:b2:1a:b0:81:2d:2a:62:
                    86:aa:6f:77:a2:d5:84:6f:6d:b5:d3:58:ca:c6:bf:
                    50:8e:f6:91:c7:3b:54:48:e9:35:0e:2a:0e:c4:74:
                    ea:2e:1d:29:01:2b:6e:ea:42:26:8c:c8:11:74:47:
                    e1:8b:70:d9:cc:f1:61:6e:1d:a3:5c:1c:b2:d1:68:
                    9d:64:91:37:b4:cd:cf:d6:71:7a:be:5a:f2:1c:aa:
                    20:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:60:AA:DC:D6:B3:C2:A0:E4:DE:5A:10:12:E0:F1:37:81:47:B0:99
            X509v3 Authority Key Identifier:
                keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/1E2C78F86B2511EEB5FD2521C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.9.0.0/16
                  1.32.0.0/17
                  27.146.0.0/16
                  42.188.0.0/14
                  45.116.240.0/21
                  58.26.0.0-58.27.127.255
                  58.139.0.0/16
                  60.48.0.0-60.54.255.255
                  103.1.104.0/22
                  103.4.140.0/22
                  110.159.0.0/16
                  114.133.0.0/16
                  115.132.0.0-115.133.15.255
                  118.100.0.0/15
                  120.140.0.0/18
                  120.140.66.0/23
                  124.13.0.0/16
                  124.82.0.0/16
                  175.136.0.0/13
                  180.72.0.0/14
                  202.171.192.0/20
                  202.178.0.0-202.178.79.255
                  202.188.0.0/16
                  203.106.0.0/16
                  210.186.0.0/15
                  210.195.0.0/16
                  218.111.0.0/16
                  218.208.0.0/16
                  219.92.0.0-219.94.127.255
                  219.95.0.0/16
                IPv6:
                  2001:e68::/32
                  2001:4470::/32
                  2401:3c00:202::-2401:3c00:219:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         42:1f:d2:35:0f:9a:e6:62:84:05:9e:9f:60:a0:07:76:b7:2f:
         bd:e3:eb:16:2d:54:54:80:8e:65:2b:4d:9b:e4:1b:aa:a6:28:
         53:72:23:10:13:de:2c:26:2f:41:70:0b:15:3d:88:08:1a:de:
         ad:d9:eb:93:8f:b4:8e:37:b1:8c:a9:80:2b:6b:ff:48:1e:6d:
         98:ee:15:fb:65:c6:38:18:a0:b4:c8:a7:76:b2:e8:47:93:4d:
         f6:2d:9b:d6:32:7c:e2:b7:88:66:ca:a3:97:9f:77:36:6b:52:
         bb:7c:5a:f8:5b:7e:6e:5d:3f:19:a9:7a:9a:05:b9:7a:e0:a6:
         60:5c:75:a3:de:52:d5:48:7f:1d:e0:a0:9a:7c:49:bd:26:a0:
         5f:40:0e:b1:bd:d1:06:0b:0e:35:98:a6:33:52:02:41:ee:1d:
         84:11:25:36:27:50:bc:dc:46:cd:95:13:2e:a7:e1:5e:44:e3:
         36:75:19:c9:a7:db:09:11:ff:47:93:8b:5a:33:26:e4:93:e4:
         14:5c:43:62:6e:4f:17:bb:91:d7:9b:0e:a2:11:71:3d:39:30:
         2b:98:49:e7:e6:21:a7:ab:cd:9a:53:da:af:e7:b2:0e:df:e2:
         aa:22:3b:27:88:a8:76:ac:e1:b1:7f:46:92:ea:eb:56:12:85:
         5d:b1:13:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:56 2024 by rpki-client on console-fra.rpki-client.org