Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/B0FD72422C9111EC8ADC384DC4F9AE02.roa
File:                     B0FD72422C9111EC8ADC384DC4F9AE02.roa (raw, json)
Hash identifier:          ELyQwBFtLlSkGsiPmp+QVeTKu2sX6UmzEe5hzNlv564=
Subject key identifier:   71:99:36:C2:36:C7:59:48:BC:FF:F8:63:99:5E:E0:E2:CF:21:8D:3E
Certificate issuer:       /CN=A9136DD6/serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8
Certificate serial:       0F28
Authority key identifier: 7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/B0FD72422C9111EC8ADC384DC4F9AE02.roa
Signing time:             Sat 22 Jul 2023 02:20:45 +0000
ROA not before:           Sat 22 Jul 2023 02:20:45 +0000
ROA not after:            Wed 31 Jan 2024 00:00:00 +0000
asID:                     17547
IP address blocks:        64.45.0.0/18 maxlen: 18
                          129.126.0.0/16 maxlen: 17
                          129.126.0.0/24 maxlen: 24
                          129.126.1.0/24 maxlen: 24
                          129.126.2.0/24 maxlen: 24
                          129.126.3.0/24 maxlen: 24
                          129.126.4.0/24 maxlen: 24
                          129.126.5.0/24 maxlen: 24
                          129.126.6.0/24 maxlen: 24
                          129.126.7.0/24 maxlen: 24
                          129.126.8.0/24 maxlen: 24
                          129.126.9.0/24 maxlen: 24
                          129.126.10.0/24 maxlen: 24
                          129.126.11.0/24 maxlen: 24
                          129.126.12.0/24 maxlen: 24
                          129.126.13.0/24 maxlen: 24
                          129.126.14.0/24 maxlen: 24
                          129.126.15.0/24 maxlen: 24
                          129.126.16.0/24 maxlen: 24
                          129.126.17.0/24 maxlen: 24
                          129.126.18.0/24 maxlen: 24
                          129.126.19.0/24 maxlen: 24
                          129.126.20.0/24 maxlen: 24
                          129.126.21.0/24 maxlen: 24
                          129.126.22.0/24 maxlen: 24
                          129.126.23.0/24 maxlen: 24
                          129.126.24.0/24 maxlen: 24
                          129.126.25.0/24 maxlen: 24
                          129.126.26.0/24 maxlen: 24
                          129.126.27.0/24 maxlen: 24
                          129.126.28.0/24 maxlen: 24
                          129.126.29.0/24 maxlen: 24
                          129.126.30.0/24 maxlen: 24
                          129.126.31.0/24 maxlen: 24
                          129.126.32.0/22 maxlen: 22
                          129.126.32.0/24 maxlen: 24
                          129.126.33.0/24 maxlen: 24
                          129.126.34.0/24 maxlen: 24
                          129.126.35.0/24 maxlen: 24
                          129.126.36.0/22 maxlen: 22
                          129.126.36.0/24 maxlen: 24
                          129.126.37.0/24 maxlen: 24
                          129.126.38.0/24 maxlen: 24
                          129.126.40.0/24 maxlen: 24
                          129.126.41.0/24 maxlen: 24
                          129.126.43.0/24 maxlen: 24
                          129.126.44.0/24 maxlen: 24
                          129.126.45.0/24 maxlen: 24
                          129.126.46.0/24 maxlen: 24
                          129.126.47.0/24 maxlen: 24
                          129.126.48.0/24 maxlen: 24
                          129.126.49.0/24 maxlen: 24
                          129.126.50.0/24 maxlen: 24
                          129.126.51.0/24 maxlen: 24
                          129.126.52.0/24 maxlen: 24
                          129.126.53.0/24 maxlen: 24
                          129.126.54.0/24 maxlen: 24
                          129.126.55.0/24 maxlen: 24
                          129.126.56.0/24 maxlen: 24
                          129.126.57.0/24 maxlen: 24
                          129.126.58.0/24 maxlen: 24
                          129.126.59.0/24 maxlen: 24
                          129.126.60.0/24 maxlen: 24
                          129.126.61.0/24 maxlen: 24
                          129.126.62.0/24 maxlen: 24
                          129.126.63.0/24 maxlen: 24
                          129.126.64.0/24 maxlen: 24
                          129.126.65.0/24 maxlen: 24
                          129.126.66.0/24 maxlen: 24
                          129.126.67.0/24 maxlen: 24
                          129.126.68.0/24 maxlen: 24
                          129.126.69.0/24 maxlen: 24
                          129.126.70.0/24 maxlen: 24
                          129.126.71.0/24 maxlen: 24
                          129.126.72.0/24 maxlen: 24
                          129.126.73.0/24 maxlen: 24
                          129.126.74.0/24 maxlen: 24
                          129.126.75.0/24 maxlen: 24
                          129.126.76.0/24 maxlen: 24
                          129.126.77.0/24 maxlen: 24
                          129.126.78.0/24 maxlen: 24
                          129.126.79.0/24 maxlen: 24
                          129.126.80.0/24 maxlen: 24
                          129.126.81.0/24 maxlen: 24
                          129.126.82.0/24 maxlen: 24
                          129.126.83.0/24 maxlen: 24
                          129.126.84.0/24 maxlen: 24
                          129.126.85.0/24 maxlen: 24
                          129.126.86.0/24 maxlen: 24
                          129.126.87.0/24 maxlen: 24
                          129.126.88.0/24 maxlen: 24
                          129.126.89.0/24 maxlen: 24
                          129.126.90.0/24 maxlen: 24
                          129.126.91.0/24 maxlen: 24
                          129.126.92.0/24 maxlen: 24
                          129.126.93.0/24 maxlen: 24
                          129.126.94.0/24 maxlen: 24
                          129.126.95.0/24 maxlen: 24
                          129.126.96.0/24 maxlen: 24
                          129.126.97.0/24 maxlen: 24
                          129.126.98.0/24 maxlen: 24
                          129.126.99.0/24 maxlen: 24
                          129.126.100.0/24 maxlen: 24
                          129.126.101.0/24 maxlen: 24
                          129.126.102.0/24 maxlen: 24
                          129.126.103.0/24 maxlen: 24
                          129.126.104.0/24 maxlen: 24
                          129.126.105.0/24 maxlen: 24
                          129.126.106.0/24 maxlen: 24
                          129.126.107.0/24 maxlen: 24
                          129.126.108.0/24 maxlen: 24
                          129.126.109.0/24 maxlen: 24
                          129.126.110.0/24 maxlen: 24
                          129.126.111.0/24 maxlen: 24
                          129.126.112.0/24 maxlen: 24
                          129.126.113.0/24 maxlen: 24
                          129.126.114.0/24 maxlen: 24
                          129.126.115.0/24 maxlen: 24
                          129.126.116.0/24 maxlen: 24
                          129.126.117.0/24 maxlen: 24
                          129.126.118.0/24 maxlen: 24
                          129.126.119.0/24 maxlen: 24
                          129.126.120.0/24 maxlen: 24
                          129.126.121.0/24 maxlen: 24
                          129.126.122.0/24 maxlen: 24
                          129.126.123.0/24 maxlen: 24
                          129.126.124.0/24 maxlen: 24
                          129.126.125.0/24 maxlen: 24
                          129.126.126.0/24 maxlen: 24
                          129.126.127.0/24 maxlen: 24
                          129.126.128.0/20 maxlen: 20
                          129.126.128.0/24 maxlen: 24
                          129.126.129.0/24 maxlen: 24
                          129.126.130.0/24 maxlen: 24
                          129.126.131.0/24 maxlen: 24
                          129.126.132.0/24 maxlen: 24
                          129.126.134.0/24 maxlen: 24
                          129.126.135.0/24 maxlen: 24
                          129.126.136.0/24 maxlen: 24
                          129.126.137.0/24 maxlen: 24
                          129.126.138.0/24 maxlen: 24
                          129.126.139.0/24 maxlen: 24
                          129.126.140.0/24 maxlen: 24
                          129.126.141.0/24 maxlen: 24
                          129.126.142.0/24 maxlen: 24
                          129.126.143.0/24 maxlen: 24
                          129.126.144.0/24 maxlen: 24
                          129.126.145.0/24 maxlen: 24
                          129.126.146.0/24 maxlen: 24
                          129.126.147.0/24 maxlen: 24
                          129.126.148.0/24 maxlen: 24
                          129.126.149.0/24 maxlen: 24
                          129.126.150.0/24 maxlen: 24
                          129.126.151.0/24 maxlen: 24
                          129.126.152.0/24 maxlen: 24
                          129.126.153.0/24 maxlen: 24
                          129.126.154.0/24 maxlen: 24
                          129.126.155.0/24 maxlen: 24
                          129.126.156.0/24 maxlen: 24
                          129.126.157.0/24 maxlen: 24
                          129.126.158.0/24 maxlen: 24
                          129.126.159.0/24 maxlen: 24
                          129.126.160.0/24 maxlen: 24
                          129.126.161.0/24 maxlen: 24
                          129.126.162.0/24 maxlen: 24
                          129.126.163.0/24 maxlen: 24
                          129.126.164.0/24 maxlen: 24
                          129.126.165.0/24 maxlen: 24
                          129.126.166.0/24 maxlen: 24
                          129.126.167.0/24 maxlen: 24
                          129.126.168.0/24 maxlen: 24
                          129.126.169.0/24 maxlen: 24
                          129.126.170.0/24 maxlen: 24
                          129.126.171.0/24 maxlen: 24
                          129.126.172.0/24 maxlen: 24
                          129.126.173.0/24 maxlen: 24
                          129.126.174.0/24 maxlen: 24
                          129.126.175.0/24 maxlen: 24
                          129.126.176.0/24 maxlen: 24
                          129.126.177.0/24 maxlen: 24
                          129.126.178.0/24 maxlen: 24
                          129.126.179.0/24 maxlen: 24
                          129.126.180.0/24 maxlen: 24
                          129.126.181.0/24 maxlen: 24
                          129.126.182.0/24 maxlen: 24
                          129.126.183.0/24 maxlen: 24
                          129.126.184.0/24 maxlen: 24
                          129.126.185.0/24 maxlen: 24
                          129.126.186.0/24 maxlen: 24
                          129.126.187.0/24 maxlen: 24
                          129.126.188.0/24 maxlen: 24
                          129.126.189.0/24 maxlen: 24
                          129.126.190.0/24 maxlen: 24
                          129.126.191.0/24 maxlen: 24
                          129.126.192.0/24 maxlen: 24
                          129.126.193.0/24 maxlen: 24
                          129.126.194.0/24 maxlen: 24
                          129.126.195.0/24 maxlen: 24
                          129.126.196.0/24 maxlen: 24
                          129.126.197.0/24 maxlen: 24
                          129.126.198.0/24 maxlen: 24
                          129.126.199.0/24 maxlen: 24
                          129.126.200.0/24 maxlen: 24
                          129.126.201.0/24 maxlen: 24
                          129.126.202.0/24 maxlen: 24
                          129.126.203.0/24 maxlen: 24
                          129.126.204.0/24 maxlen: 24
                          129.126.205.0/24 maxlen: 24
                          129.126.206.0/24 maxlen: 24
                          129.126.207.0/24 maxlen: 24
                          129.126.208.0/24 maxlen: 24
                          129.126.209.0/24 maxlen: 24
                          129.126.210.0/24 maxlen: 24
                          129.126.211.0/24 maxlen: 24
                          129.126.212.0/24 maxlen: 24
                          129.126.213.0/24 maxlen: 24
                          129.126.214.0/24 maxlen: 24
                          129.126.215.0/24 maxlen: 24
                          129.126.216.0/24 maxlen: 24
                          129.126.217.0/24 maxlen: 24
                          129.126.218.0/24 maxlen: 24
                          129.126.219.0/24 maxlen: 24
                          129.126.220.0/24 maxlen: 24
                          129.126.221.0/24 maxlen: 24
                          129.126.222.0/24 maxlen: 24
                          129.126.223.0/24 maxlen: 24
                          129.126.224.0/24 maxlen: 24
                          129.126.225.0/24 maxlen: 24
                          129.126.226.0/24 maxlen: 24
                          129.126.227.0/24 maxlen: 24
                          129.126.228.0/24 maxlen: 24
                          129.126.229.0/24 maxlen: 24
                          129.126.230.0/24 maxlen: 24
                          129.126.231.0/24 maxlen: 24
                          129.126.232.0/24 maxlen: 24
                          129.126.233.0/24 maxlen: 24
                          129.126.234.0/24 maxlen: 24
                          129.126.235.0/24 maxlen: 24
                          129.126.236.0/24 maxlen: 24
                          129.126.237.0/24 maxlen: 24
                          129.126.238.0/24 maxlen: 24
                          129.126.239.0/24 maxlen: 24
                          129.126.240.0/24 maxlen: 24
                          129.126.241.0/24 maxlen: 24
                          129.126.242.0/24 maxlen: 24
                          129.126.243.0/24 maxlen: 24
                          129.126.244.0/24 maxlen: 24
                          129.126.245.0/24 maxlen: 24
                          129.126.246.0/24 maxlen: 24
                          129.126.247.0/24 maxlen: 24
                          129.126.248.0/24 maxlen: 24
                          129.126.249.0/24 maxlen: 24
                          129.126.250.0/24 maxlen: 24
                          129.126.251.0/24 maxlen: 24
                          129.126.252.0/24 maxlen: 24
                          129.126.253.0/24 maxlen: 24
                          129.126.254.0/24 maxlen: 24
                          129.126.255.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3880 (0xf28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136DD6/serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8
        Validity
            Not Before: Jul 22 02:20:45 2023 GMT
            Not After : Jan 31 00:00:00 2024 GMT
        Subject: CN=64bb3cfd-5f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cc:29:d2:33:5e:49:1b:bb:b5:a5:39:01:2b:
                    a7:7f:e5:f3:c8:8c:34:4d:6e:31:02:4e:e9:e7:dd:
                    ae:f4:48:65:89:67:05:ac:ba:87:09:ce:3f:fe:f5:
                    b2:58:bb:4e:4c:4e:f6:06:6e:52:ff:b9:30:68:59:
                    32:3c:a9:b6:cd:05:ad:16:fe:99:f7:71:fc:c3:93:
                    a8:2a:f4:9e:c7:ab:6d:7e:14:22:7d:cc:db:c9:c9:
                    2c:da:c0:03:50:ac:96:b3:79:07:d9:c8:37:4f:7a:
                    70:8c:ef:c3:bc:f2:7d:33:ff:8c:0e:5e:25:f8:b6:
                    39:80:6f:57:23:cb:0e:c5:81:d4:7c:85:ad:e2:fb:
                    03:85:da:1f:5c:66:3f:66:06:e2:35:ac:31:c3:a2:
                    16:d1:6e:13:11:45:c7:76:ba:37:b3:be:f1:10:87:
                    ab:d0:37:29:7b:93:5a:bf:64:3a:02:38:65:39:83:
                    6d:4c:e7:4a:5b:eb:b9:f5:4a:f3:4c:02:56:1c:12:
                    1f:b3:db:ec:c8:76:e4:2e:c0:56:a0:36:95:ce:ff:
                    e5:22:be:98:8a:a4:8a:91:37:52:97:25:bb:55:e9:
                    98:20:b0:fa:bc:7a:c3:8b:e5:35:c3:52:81:74:d6:
                    a5:ae:3a:91:08:5a:f7:9c:24:51:7e:39:9d:8b:b0:
                    24:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:99:36:C2:36:C7:59:48:BC:FF:F8:63:99:5E:E0:E2:CF:21:8D:3E
            X509v3 Authority Key Identifier:
                keyid:7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/B0FD72422C9111EC8ADC384DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.45.0.0/18
                  129.126.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7b:df:37:b6:4b:98:1c:1e:0a:15:02:14:d3:bd:5a:23:31:eb:
         cc:d6:05:6e:74:5e:3b:ed:a1:4e:aa:e7:97:eb:d6:c9:d5:47:
         4f:81:38:50:d5:46:44:74:16:b5:39:ff:5a:e1:9e:f7:c5:7a:
         36:b4:2d:16:5d:4d:10:3e:ed:e7:64:7a:1b:c0:bd:e0:71:d8:
         1d:33:3d:8c:c8:c1:ba:89:30:fe:59:22:3a:fb:73:b3:a4:c6:
         bd:b4:bd:32:e0:28:bf:0f:5d:77:9d:d5:d0:c8:04:5e:6b:5e:
         bc:5f:0c:49:91:d1:05:67:b1:07:9f:21:df:cf:a8:12:46:3f:
         d9:01:31:71:3d:c2:ed:15:18:74:63:8a:67:0d:8e:ee:e3:6f:
         46:b9:3d:5e:c4:f7:46:44:84:17:ae:19:e8:05:97:35:e7:7a:
         86:b7:ad:60:c0:e3:bc:ab:09:51:87:f8:e7:7d:25:34:21:d5:
         88:9a:d5:c7:0a:83:f4:14:26:b0:2a:dd:46:02:59:80:ef:52:
         bd:9d:f3:d6:df:1b:99:01:bd:80:09:bb:c4:66:09:ab:29:e9:
         99:f4:73:8f:a1:02:95:2d:21:77:6a:e6:1e:1b:d0:47:67:ad:
         cf:ac:8e:15:7d:5a:19:94:b4:40:85:1b:2d:cb:8f:dd:1f:bc:
         bb:92:e9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-ams.rpki-client.org