Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/DF428866012111EE9BBB0A1FC4F9AE02.roa
File:                     DF428866012111EE9BBB0A1FC4F9AE02.roa (raw, json)
Hash identifier:          dz7HuJJeM1AB94aMrsyUNJfAec9JXilGKj3fb27Gn5k=
Subject key identifier:   94:A0:22:DA:6E:0A:09:B6:D6:28:92:F8:33:6D:5C:13:34:E5:66:71
Certificate issuer:       /CN=A9143CB3/serialNumber=CBA197C04CAA9BD295F5788472A6A10AA3FBEF70
Certificate serial:       1983
Authority key identifier: CB:A1:97:C0:4C:AA:9B:D2:95:F5:78:84:72:A6:A1:0A:A3:FB:EF:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/DF428866012111EE9BBB0A1FC4F9AE02.roa
Signing time:             Wed 07 Jun 2023 01:55:29 +0000
ROA not before:           Wed 07 Jun 2023 01:55:29 +0000
ROA not after:            Wed 31 Jan 2024 00:00:00 +0000
asID:                     9929
IP address blocks:        1.28.41.0/24 maxlen: 24
                          1.28.42.0/24 maxlen: 24
                          42.84.176.0/21 maxlen: 21
                          43.243.88.0/22 maxlen: 22
                          43.250.128.0/22 maxlen: 22
                          58.254.216.0/22 maxlen: 22
                          61.48.164.0/22 maxlen: 22
                          103.3.156.0/22 maxlen: 22
                          103.250.180.0/22 maxlen: 22
                          113.200.230.0/23 maxlen: 23
                          113.207.132.0/23 maxlen: 23
                          113.207.240.0/20 maxlen: 20
                          114.254.4.0/23 maxlen: 23
                          120.86.8.0/23 maxlen: 23
                          122.97.0.0/18 maxlen: 18
                          124.130.192.0/20 maxlen: 20
                          125.46.122.0/23 maxlen: 23
                          203.93.64.0/20 maxlen: 20
                          203.93.82.0/24 maxlen: 24
                          203.93.83.0/24 maxlen: 24
                          203.93.96.0/20 maxlen: 20
                          203.93.156.0/22 maxlen: 22
                          203.93.208.0/20 maxlen: 20
                          203.93.224.0/20 maxlen: 20
                          210.13.96.0/20 maxlen: 20
                          210.13.98.0/24 maxlen: 24
                          210.13.112.0/20 maxlen: 20
                          210.13.113.0/24 maxlen: 24
                          210.13.192.0/19 maxlen: 19
                          210.15.64.0/19 maxlen: 19
                          210.21.191.0/24 maxlen: 24
                          210.22.116.0/24 maxlen: 24
                          210.22.117.0/24 maxlen: 24
                          210.22.192.0/18 maxlen: 18
                          210.22.193.0/24 maxlen: 24
                          210.22.194.0/24 maxlen: 24
                          210.22.195.0/24 maxlen: 24
                          210.22.199.0/24 maxlen: 24
                          210.22.200.0/24 maxlen: 24
                          210.22.206.0/24 maxlen: 24
                          210.22.209.0/24 maxlen: 24
                          210.22.253.0/24 maxlen: 24
                          210.51.21.0/24 maxlen: 24
                          210.51.22.0/24 maxlen: 24
                          210.51.29.0/24 maxlen: 24
                          210.51.30.0/23 maxlen: 23
                          210.51.33.0/24 maxlen: 24
                          210.51.39.0/24 maxlen: 24
                          210.51.43.0/24 maxlen: 24
                          210.51.45.0/24 maxlen: 24
                          210.51.48.0/24 maxlen: 24
                          210.51.192.0/18 maxlen: 18
                          210.51.192.0/24 maxlen: 24
                          210.51.193.0/24 maxlen: 24
                          210.51.197.0/24 maxlen: 24
                          210.51.201.0/24 maxlen: 24
                          210.51.202.0/24 maxlen: 24
                          210.51.203.0/24 maxlen: 24
                          210.51.204.0/22 maxlen: 22
                          210.51.208.0/22 maxlen: 22
                          210.51.224.0/23 maxlen: 23
                          210.51.226.0/24 maxlen: 24
                          210.51.227.0/24 maxlen: 24
                          210.51.228.0/24 maxlen: 24
                          210.51.229.0/24 maxlen: 24
                          210.51.230.0/23 maxlen: 23
                          210.51.232.0/23 maxlen: 23
                          210.51.235.0/24 maxlen: 24
                          210.51.240.0/24 maxlen: 24
                          210.51.243.0/24 maxlen: 24
                          210.51.250.0/24 maxlen: 24
                          218.24.22.0/24 maxlen: 24
                          218.24.23.0/24 maxlen: 24
                          218.104.32.0/20 maxlen: 20
                          218.107.224.0/19 maxlen: 19
                          220.248.59.0/24 maxlen: 24
                          220.248.202.0/24 maxlen: 24
                          220.249.0.0/18 maxlen: 18
                          2408:8120:1::/48 maxlen: 48
                          2408:8120:2::/48 maxlen: 48
                          2408:8120:7000::/36 maxlen: 36
                          2408:8a00:c000::/36 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6531 (0x1983)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143CB3/serialNumber=CBA197C04CAA9BD295F5788472A6A10AA3FBEF70
        Validity
            Not Before: Jun  7 01:55:29 2023 GMT
            Not After : Jan 31 00:00:00 2024 GMT
        Subject: CN=647fe390-55b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cd:07:6b:c5:03:3b:69:24:70:2d:87:a2:a2:
                    0b:d3:02:f9:80:24:58:80:d9:70:e9:c0:e7:88:1c:
                    19:18:0f:90:ed:fb:98:a0:ab:6d:cd:74:3e:ea:2e:
                    18:62:79:f5:c7:52:96:67:b6:f6:24:fa:78:0d:4c:
                    31:0c:a8:bf:31:21:5a:7d:9c:a8:8c:39:ce:ea:a3:
                    07:d6:48:c3:86:ac:4c:56:60:a0:7e:68:d0:e5:c1:
                    60:ed:37:a0:36:d5:cb:dc:30:c1:a7:39:fd:eb:3a:
                    8d:35:b4:d4:a7:2d:fa:99:69:84:b9:6b:2f:bc:83:
                    3d:ad:a8:29:af:a4:07:d8:a3:f0:e5:da:aa:04:ac:
                    60:5c:0b:7a:f1:89:2f:40:90:46:ba:1b:3a:70:a4:
                    f4:a2:80:88:da:34:8c:db:1d:3f:44:2a:22:6d:9d:
                    62:b9:9d:4f:c0:ce:a7:40:d4:1f:48:82:d7:c2:a8:
                    7f:4c:0e:db:7f:fe:31:8b:0f:6d:5f:22:18:50:a5:
                    ae:41:2b:48:c3:34:a9:51:ed:3b:5f:39:4f:56:40:
                    80:c8:c9:3a:b2:9f:6b:24:dc:c5:7a:85:0b:9e:f6:
                    fd:68:b9:cd:c6:1c:5d:36:d6:fc:00:6e:dc:6b:12:
                    5f:c9:e4:f2:81:13:b7:ab:d7:c5:7a:67:0e:26:3a:
                    f1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A0:22:DA:6E:0A:09:B6:D6:28:92:F8:33:6D:5C:13:34:E5:66:71
            X509v3 Authority Key Identifier:
                keyid:CB:A1:97:C0:4C:AA:9B:D2:95:F5:78:84:72:A6:A1:0A:A3:FB:EF:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/DF428866012111EE9BBB0A1FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.28.41.0-1.28.42.255
                  42.84.176.0/21
                  43.243.88.0/22
                  43.250.128.0/22
                  58.254.216.0/22
                  61.48.164.0/22
                  103.3.156.0/22
                  103.250.180.0/22
                  113.200.230.0/23
                  113.207.132.0/23
                  113.207.240.0/20
                  114.254.4.0/23
                  120.86.8.0/23
                  122.97.0.0/18
                  124.130.192.0/20
                  125.46.122.0/23
                  203.93.64.0/20
                  203.93.82.0/23
                  203.93.96.0/20
                  203.93.156.0/22
                  203.93.208.0-203.93.239.255
                  210.13.96.0/19
                  210.13.192.0/19
                  210.15.64.0/19
                  210.21.191.0/24
                  210.22.116.0/23
                  210.22.192.0/18
                  210.51.21.0-210.51.22.255
                  210.51.29.0-210.51.31.255
                  210.51.33.0/24
                  210.51.39.0/24
                  210.51.43.0/24
                  210.51.45.0/24
                  210.51.48.0/24
                  210.51.192.0/18
                  218.24.22.0/23
                  218.104.32.0/20
                  218.107.224.0/19
                  220.248.59.0/24
                  220.248.202.0/24
                  220.249.0.0/18
                IPv6:
                  2408:8120:1::-2408:8120:2:ffff:ffff:ffff:ffff:ffff
                  2408:8120:7000::/36
                  2408:8a00:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6c:82:9a:8a:c7:2e:bb:a1:33:07:a6:11:c5:ae:42:1d:fe:fd:
         e3:e0:6c:4c:d4:97:70:de:f1:c2:c1:a4:92:05:76:b0:e8:af:
         fc:91:fa:87:b8:d8:25:1b:50:56:bb:3b:83:eb:08:da:9d:8a:
         81:7b:36:a5:44:ca:67:72:e9:ff:23:b9:66:59:c5:aa:46:33:
         2b:82:ed:1b:e9:c4:f8:cd:73:b2:53:62:94:41:62:b0:64:b7:
         2a:82:da:8f:c7:12:36:11:8b:4e:5c:28:ed:f3:1e:93:ca:27:
         04:e8:d6:9a:a6:71:c7:78:db:2f:97:e8:fe:1f:89:95:45:0e:
         db:f6:8b:6d:d4:34:3d:72:88:8d:fb:b3:72:ca:1b:ec:8d:77:
         c4:34:90:e5:35:4a:2b:51:d2:40:0d:31:d1:2f:45:32:0e:29:
         ab:78:98:b8:95:a3:14:63:3d:98:89:8f:7f:f5:3e:e9:e8:39:
         f2:db:48:25:67:ca:47:86:b8:db:a5:89:34:f7:67:0f:2a:0d:
         43:e9:b0:4d:5e:54:11:b9:21:2a:50:68:88:d1:b2:59:1a:ea:
         a3:d7:8c:a1:bc:6e:0e:ca:8a:57:3e:7f:24:85:8d:9b:0e:f9:
         a5:e4:d8:1a:64:dd:93:a1:4a:68:05:81:23:87:3e:98:c9:79:
         78:70:2c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:04 2024 by rpki-client on console-fra.rpki-client.org