Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/62DCFF88CC3211ECB2C4EA3CC4F9AE02.roa
File:                     62DCFF88CC3211ECB2C4EA3CC4F9AE02.roa (raw, json)
Hash identifier:          Rnvn+iQ19k3errRIYq+nkgXb7hUKDQ6JI4G/7GwnsuA=
Subject key identifier:   E6:04:23:75:6E:96:01:C1:CD:73:98:2F:5A:FB:24:95:7D:91:56:E6
Certificate issuer:       /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Certificate serial:       06
Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/62DCFF88CC3211ECB2C4EA3CC4F9AE02.roa
Signing time:             Fri 06 May 2022 05:35:37 +0000
ROA not before:           Fri 06 May 2022 05:35:37 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     139734
IP address blocks:        103.215.126.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
        Validity
            Not Before: May  6 05:35:37 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=6274b3a9-cedd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:21:bf:2a:eb:c8:1a:f8:5d:5a:ad:ed:21:b3:
                    27:fe:61:66:23:71:43:c6:70:54:6f:24:ef:9b:95:
                    84:81:8f:16:de:cb:f0:1a:39:63:cc:9b:66:6b:8f:
                    19:61:49:10:af:c2:4a:81:e2:eb:5e:16:52:54:11:
                    6a:bb:97:0b:00:9f:95:cc:17:89:83:1a:80:d4:c7:
                    a3:1f:c0:e3:0d:15:a2:93:39:d2:36:20:ee:c9:78:
                    ca:27:67:1b:ac:c1:43:50:bc:05:ca:90:e5:70:e9:
                    74:79:12:1d:41:42:e3:6c:a5:b8:11:59:78:97:3d:
                    59:49:30:1d:c7:a9:ed:65:77:3e:e9:98:2e:ac:79:
                    a1:a1:6e:49:7b:1c:63:c3:d8:23:e0:1b:d0:e2:a6:
                    67:6d:a7:16:03:c7:c0:aa:db:1c:f3:cf:21:36:c4:
                    4d:79:f8:49:65:6b:02:87:f7:3c:d1:b7:11:5e:d3:
                    3e:8e:ec:3d:04:6a:6f:35:08:7d:91:df:16:7d:a3:
                    c2:52:2f:98:b5:ab:27:df:75:8f:5c:a9:d8:fb:aa:
                    51:d4:8e:bf:34:8a:c1:73:cd:5e:12:89:7f:1b:1f:
                    ad:49:d8:7b:45:9a:44:aa:dd:57:65:c8:01:2a:83:
                    50:5b:13:6c:89:f6:84:8b:6e:ea:f8:fc:63:ad:fa:
                    cb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:04:23:75:6E:96:01:C1:CD:73:98:2F:5A:FB:24:95:7D:91:56:E6
            X509v3 Authority Key Identifier:
                keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/62DCFF88CC3211ECB2C4EA3CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:ab:f8:ab:4d:da:19:7a:8b:f6:fd:98:7a:20:e0:89:15:e8:
         84:14:eb:0f:1d:5d:93:45:2f:60:e6:ec:f7:19:b3:8e:65:cf:
         65:49:e0:8f:4d:a7:ba:ba:31:14:b2:48:62:3c:a2:48:f5:2e:
         98:76:b2:35:ad:e9:22:47:b8:d9:85:d2:37:87:ab:8b:b8:af:
         e2:46:05:00:c4:ff:76:d9:11:92:51:c9:4e:46:ce:82:46:23:
         ed:da:8f:26:a3:6e:a2:b3:36:8c:21:b7:e9:03:7b:71:fc:55:
         d6:17:cd:10:56:20:e3:f8:43:b1:70:6a:d9:d5:8a:05:21:68:
         9d:e5:b3:bc:92:04:a7:c7:f3:75:9e:a5:00:07:fe:60:3d:92:
         31:0f:82:8f:7e:a2:f1:97:d8:8b:be:c0:91:36:07:e9:fa:59:
         c9:2a:05:9c:39:81:9e:79:6d:b1:85:85:da:df:aa:6c:8c:a1:
         1e:e5:06:45:36:51:01:4a:7f:7a:83:95:fb:75:1d:21:4a:da:
         84:74:8d:ac:50:9c:42:d5:61:94:2c:97:29:cd:71:51:3a:89:
         28:11:57:2c:b3:ac:9d:f6:61:3b:ce:fd:d7:8f:ef:fb:22:8f:
         27:8a:3f:94:79:fc:29:68:56:f8:13:9b:0a:c2:e5:ba:b9:1e:
         50:46:65:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:04 2024 by rpki-client on console-fra.rpki-client.org