Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/EAEE0B7479E911ECBBE87731C4F9AE02.roa
File:                     EAEE0B7479E911ECBBE87731C4F9AE02.roa (raw, json)
Hash identifier:          phNg3/XCKr3FqQsiOYOhUkBShLKruZtcbbAdpirR7xQ=
Subject key identifier:   3F:A3:06:C6:3D:71:FE:C7:3B:2F:9B:26:FC:A9:C2:8B:B3:7F:02:21
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       35AB
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/EAEE0B7479E911ECBBE87731C4F9AE02.roa
Signing time:             Tue 11 Oct 2022 09:20:13 +0000
ROA not before:           Tue 11 Oct 2022 09:20:13 +0000
ROA not after:            Sat 30 Sep 2023 00:00:00 +0000
asID:                     17552
IP address blocks:        27.145.0.0/17 maxlen: 24
                          27.145.128.0/18 maxlen: 24
                          27.145.192.0/18 maxlen: 24
                          58.8.0.0/17 maxlen: 24
                          58.8.128.0/17 maxlen: 24
                          58.9.0.0/17 maxlen: 24
                          58.9.128.0/17 maxlen: 24
                          58.10.0.0/17 maxlen: 24
                          58.10.128.0/17 maxlen: 24
                          58.11.0.0/17 maxlen: 24
                          58.11.128.0/17 maxlen: 24
                          61.90.0.0/17 maxlen: 24
                          61.91.128.0/21 maxlen: 24
                          61.91.144.0/21 maxlen: 24
                          61.91.190.0/24 maxlen: 24
                          61.91.191.0/24 maxlen: 24
                          61.91.192.0/24 maxlen: 24
                          61.91.193.0/24 maxlen: 24
                          61.91.201.0/24 maxlen: 24
                          61.91.214.0/24 maxlen: 24
                          110.168.0.0/18 maxlen: 24
                          110.168.64.0/18 maxlen: 24
                          110.168.128.0/18 maxlen: 24
                          110.168.192.0/18 maxlen: 24
                          110.169.0.0/18 maxlen: 24
                          110.169.64.0/18 maxlen: 24
                          110.169.128.0/18 maxlen: 24
                          110.169.192.0/18 maxlen: 24
                          110.171.0.0/18 maxlen: 24
                          110.171.64.0/18 maxlen: 24
                          110.171.128.0/18 maxlen: 24
                          110.171.192.0/18 maxlen: 24
                          114.109.0.0/18 maxlen: 24
                          114.109.64.0/18 maxlen: 24
                          114.109.128.0/18 maxlen: 24
                          114.109.192.0/18 maxlen: 24
                          115.87.0.0/18 maxlen: 24
                          115.87.64.0/18 maxlen: 24
                          115.87.128.0/18 maxlen: 24
                          115.87.192.0/18 maxlen: 24
                          119.76.0.0/17 maxlen: 24
                          119.76.128.0/18 maxlen: 24
                          119.76.192.0/18 maxlen: 24
                          124.120.0.0/18 maxlen: 24
                          124.120.64.0/18 maxlen: 24
                          124.120.128.0/18 maxlen: 24
                          124.120.192.0/18 maxlen: 24
                          124.121.0.0/18 maxlen: 24
                          124.121.64.0/18 maxlen: 24
                          124.121.128.0/18 maxlen: 24
                          124.121.192.0/18 maxlen: 24
                          124.122.0.0/18 maxlen: 24
                          124.122.64.0/18 maxlen: 24
                          124.122.128.0/18 maxlen: 24
                          124.122.192.0/18 maxlen: 24
                          171.96.0.0/18 maxlen: 24
                          171.96.64.0/18 maxlen: 24
                          171.96.128.0/18 maxlen: 24
                          171.96.192.0/18 maxlen: 24
                          171.97.0.0/18 maxlen: 24
                          171.97.64.0/18 maxlen: 24
                          171.97.128.0/18 maxlen: 24
                          171.97.192.0/18 maxlen: 24
                          171.98.0.0/18 maxlen: 24
                          171.98.64.0/18 maxlen: 24
                          171.98.128.0/18 maxlen: 24
                          171.98.192.0/18 maxlen: 24
                          171.99.0.0/18 maxlen: 24
                          171.99.64.0/18 maxlen: 24
                          171.99.128.0/18 maxlen: 24
                          171.99.192.0/18 maxlen: 24
                          171.100.0.0/18 maxlen: 24
                          171.100.64.0/18 maxlen: 24
                          171.100.128.0/18 maxlen: 24
                          171.100.192.0/18 maxlen: 24
                          171.101.0.0/18 maxlen: 24
                          171.101.64.0/18 maxlen: 24
                          171.101.128.0/18 maxlen: 24
                          171.101.192.0/18 maxlen: 24
                          171.102.0.0/24 maxlen: 24
                          182.17.0.0/18 maxlen: 24
                          182.17.64.0/18 maxlen: 24
                          182.17.128.0/18 maxlen: 24
                          182.17.192.0/18 maxlen: 24
                          202.176.64.0/18 maxlen: 18
                          202.176.64.0/19 maxlen: 24
                          202.176.96.0/19 maxlen: 24
                          202.176.128.0/18 maxlen: 18
                          202.176.128.0/19 maxlen: 19
                          202.176.183.0/24 maxlen: 24
                          202.176.184.0/24 maxlen: 24
                          2001:fb1::/32 maxlen: 32
                          2001:fb1::/44 maxlen: 48
                          2001:fb1:10::/44 maxlen: 48
                          2001:fb1:20::/44 maxlen: 48
                          2001:fb1:30::/44 maxlen: 48
                          2001:fb1:40::/44 maxlen: 48
                          2001:fb1:50::/44 maxlen: 48
                          2001:fb1:60::/44 maxlen: 48
                          2001:fb1:70::/44 maxlen: 48
                          2001:fb1:80::/44 maxlen: 48
                          2001:fb1:90::/44 maxlen: 48
                          2001:fb1:a0::/44 maxlen: 48
                          2001:fb1:b0::/44 maxlen: 48
                          2001:fb1:c0::/44 maxlen: 48
                          2001:fb1:d0::/44 maxlen: 48
                          2001:fb1:e0::/44 maxlen: 48
                          2001:fb1:f0::/44 maxlen: 48
                          2001:fb1:100::/44 maxlen: 48
                          2001:fb1:110::/44 maxlen: 48
                          2001:fb1:120::/44 maxlen: 48
                          2001:fb1:130::/44 maxlen: 48
                          2001:fb1:140::/44 maxlen: 48
                          2001:fb1:150::/44 maxlen: 48
                          2001:fb1:160::/44 maxlen: 48
                          2001:fb1:170::/44 maxlen: 48
                          2001:fb1:180::/44 maxlen: 48
                          2001:fb1:fc0::/48 maxlen: 48
                          2001:fb1:fd0::/48 maxlen: 48
                          2001:fb1:fe0::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13739 (0x35ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Oct 11 09:20:13 2022 GMT
            Not After : Sep 30 00:00:00 2023 GMT
        Subject: CN=6345354c-044b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:03:fa:8c:79:cf:64:50:d4:96:a3:e7:0a:c3:
                    80:49:e0:a0:2f:23:7a:d7:e2:73:7c:4c:c7:74:aa:
                    9d:1f:79:4c:35:cd:da:cb:e2:e3:b2:de:dd:31:5a:
                    df:0f:b0:64:83:d6:4e:e8:97:28:31:5e:d0:e0:69:
                    5c:d7:dd:fc:4f:6e:a4:b5:f0:40:52:1e:9a:c2:f9:
                    ca:97:52:a0:ec:16:1e:61:88:96:4e:e7:0b:3c:85:
                    aa:86:d2:f9:54:99:84:ef:23:df:16:13:ad:b4:a9:
                    a2:cf:57:ae:2d:da:1d:da:12:43:11:46:25:bb:8d:
                    2a:e6:7b:fe:70:fd:3a:17:85:89:62:dc:e5:0f:7f:
                    46:d6:6c:57:7b:8e:b2:74:0c:7d:38:fd:2a:d2:d2:
                    17:80:9d:0a:1d:73:2b:1c:f0:f2:56:08:48:92:55:
                    e5:4e:66:7f:73:0d:93:77:a1:57:64:4d:eb:d4:07:
                    a3:6a:63:a8:b0:c9:b8:8e:fa:d1:b4:eb:e7:c8:fe:
                    d4:f5:d8:fd:c3:0a:37:cf:aa:e0:ac:0d:a2:33:c8:
                    6f:53:2e:bc:1f:ca:d9:57:41:e0:40:1d:c1:78:8a:
                    1a:1b:60:7d:68:3d:22:67:27:80:42:10:0b:ca:34:
                    57:1c:02:43:18:51:1c:0f:b9:90:54:44:42:ef:fc:
                    76:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A3:06:C6:3D:71:FE:C7:3B:2F:9B:26:FC:A9:C2:8B:B3:7F:02:21
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/EAEE0B7479E911ECBBE87731C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.145.0.0/16
                  58.8.0.0/14
                  61.90.0.0/17
                  61.91.128.0/21
                  61.91.144.0/21
                  61.91.190.0-61.91.193.255
                  61.91.201.0/24
                  61.91.214.0/24
                  110.168.0.0/15
                  110.171.0.0/16
                  114.109.0.0/16
                  115.87.0.0/16
                  119.76.0.0/16
                  124.120.0.0-124.122.255.255
                  171.96.0.0-171.102.0.255
                  182.17.0.0/16
                  202.176.64.0-202.176.191.255
                IPv6:
                  2001:fb1::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:14:3f:0d:f7:4f:69:c4:a8:3c:18:f1:50:c6:04:0a:27:5c:
         66:f4:64:94:fb:b7:51:41:91:01:3c:bb:16:ed:23:26:4a:82:
         d8:85:3d:2a:6a:70:77:10:cb:83:9f:5f:21:b8:6a:76:89:87:
         cc:53:82:86:19:b8:8e:96:7c:69:9c:3d:d4:21:2b:ed:33:56:
         fd:91:63:64:e0:80:2a:43:83:ea:e0:ac:1d:1b:8a:5a:0e:46:
         ed:0e:db:bf:3d:b5:11:ae:25:41:c4:37:65:f8:75:80:33:c8:
         36:b8:77:ec:7b:2a:b5:cb:ab:36:bc:d9:d3:8b:de:68:5a:e1:
         1a:e1:e8:ca:13:80:b0:d5:8d:c0:17:05:65:e9:51:2f:19:36:
         6b:a7:55:bb:b8:ab:e1:2d:42:f8:79:5b:bd:51:95:80:8e:42:
         1a:21:6e:fa:67:33:74:1b:cc:ee:35:7c:b9:fa:f8:d9:3e:68:
         b7:b6:4e:5c:8c:db:bc:67:9a:d5:03:e3:40:a8:60:ca:5a:07:
         2f:83:2a:d1:f4:fb:b7:74:d8:53:c9:82:ec:49:cc:dd:b0:69:
         b4:83:45:43:37:7e:24:57:84:60:ad:64:f3:a9:bb:0c:23:b9:
         2b:da:7b:7a:65:5b:ad:e7:27:39:b0:24:f5:29:2d:79:12:a0:
         e7:6d:4c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:02 2024 by rpki-client on console-fra.rpki-client.org