Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/BF916230CB9411EC87C24075C4F9AE02.roa
File:                     BF916230CB9411EC87C24075C4F9AE02.roa (raw, json)
Hash identifier:          hgNvA6YE7+vjnt92rcscjeRxGK/h/OnD2wnChhDdn9Y=
Subject key identifier:   7E:BE:DA:23:32:76:5E:8A:20:4B:2A:E4:29:FB:FA:1C:2C:40:F8:EA
Certificate issuer:       /CN=A914E93F/serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
Certificate serial:       106A
Authority key identifier: B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/BF916230CB9411EC87C24075C4F9AE02.roa
Signing time:             Wed 04 May 2022 10:27:07 +0000
ROA not before:           Wed 04 May 2022 10:27:07 +0000
ROA not after:            Wed 31 Aug 2022 00:00:00 +0000
asID:                     149769
IP address blocks:        14.192.51.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4202 (0x106a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E93F/serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
        Validity
            Not Before: May  4 10:27:07 2022 GMT
            Not After : Aug 31 00:00:00 2022 GMT
        Subject: CN=627254fb-679f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0e:5b:80:53:e3:13:cd:1a:ce:a0:d8:80:b2:
                    08:4f:3e:60:d3:57:bc:8a:fc:fb:78:8e:0f:14:bc:
                    2c:0d:3a:37:84:c9:da:17:52:7b:9c:25:7a:ce:4f:
                    f7:04:ad:fc:97:6b:8e:c9:a0:41:a1:00:02:5f:08:
                    a8:1d:0e:6a:25:54:9b:30:f5:ee:30:a1:e6:e9:13:
                    8e:6b:8c:e8:de:d4:91:09:4b:22:0d:85:e1:df:b9:
                    dd:b1:3b:38:54:00:83:38:92:73:c9:83:8f:fa:33:
                    2d:84:09:06:38:88:8a:6f:33:ba:93:e6:02:b8:a9:
                    7e:57:31:d6:bd:2a:e6:d7:46:f4:19:27:fb:7f:5f:
                    15:73:02:91:8c:c1:84:38:45:c9:36:8d:25:4a:b1:
                    a0:96:9e:49:0c:af:14:13:1a:5b:76:a0:10:09:ef:
                    36:b7:21:c6:9d:93:1f:48:10:31:f1:85:7e:ac:44:
                    a7:8e:30:8a:d9:03:97:3b:b3:04:6a:dd:7d:99:a9:
                    d4:44:ee:6b:dc:58:33:e3:9e:16:77:db:bc:a8:9d:
                    48:b9:be:c7:3d:a1:3b:fe:fe:30:a4:13:bb:57:11:
                    ff:0f:8d:12:9b:96:2f:64:51:53:0f:fb:38:6c:35:
                    47:d1:8c:1a:f8:86:cc:7e:5d:18:1b:36:cb:1e:b8:
                    1f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:BE:DA:23:32:76:5E:8A:20:4B:2A:E4:29:FB:FA:1C:2C:40:F8:EA
            X509v3 Authority Key Identifier:
                keyid:B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/BF916230CB9411EC87C24075C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.192.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:d2:99:3f:65:0e:ac:fb:c1:f1:47:a3:d6:c0:40:98:5b:e5:
         f8:bb:26:00:ef:a1:e4:6c:d9:3c:08:e2:ad:59:4e:84:4b:ed:
         ba:55:35:13:57:6f:a6:5b:a7:5e:c6:c9:f9:aa:e7:7c:53:73:
         af:8d:65:85:f2:53:59:45:e1:2e:4f:1f:ac:c4:26:bc:b5:7e:
         c6:81:ec:f0:2d:25:41:c7:2c:c6:7d:3a:2e:5e:00:90:32:c1:
         8e:a2:4d:65:f0:6a:6b:36:8a:eb:9e:4f:31:22:f4:c9:98:4f:
         73:02:50:a3:83:de:7c:79:1f:1e:40:d3:37:4a:18:5a:22:2b:
         db:5c:f2:8c:b3:ee:75:05:97:24:00:07:10:2b:f1:9c:e3:8f:
         75:1f:94:5e:dc:b4:53:d9:7d:5f:95:8a:52:e9:89:2b:f7:41:
         8b:4e:de:95:82:d6:38:84:67:02:23:d9:e9:96:86:b2:00:3c:
         af:42:af:36:c7:45:2f:8c:20:25:fb:c1:af:e3:c5:d4:83:25:
         b7:1d:d1:5d:a2:f1:6a:c7:40:2f:19:52:7b:1b:6c:00:63:03:
         e8:86:8b:c3:d2:5c:d3:4c:e4:bc:6c:1b:1b:4f:4c:a4:86:88:
         36:c7:71:1f:1b:27:b2:3b:b9:3e:4b:01:ee:24:d6:b6:50:50:
         f5:63:60:f0
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICEGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEU5M0YxMTAvBgNVBAUTKEIyRjhBQjAwRDU3NDY0REQ1RDA1QTQ1QTQ3QzQyMEY1
Rjg5NkI4RkMwHhcNMjIwNTA0MTAyNzA3WhcNMjIwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjcyNTRmYi02NzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsw5bgFPjE80azqDYgLIITz5g01e8ivz7eI4PFLwsDTo3hMnaF1J7nCV6zk/3
BK38l2uOyaBBoQACXwioHQ5qJVSbMPXuMKHm6ROOa4zo3tSRCUsiDYXh37ndsTs4
VACDOJJzyYOP+jMthAkGOIiKbzO6k+YCuKl+VzHWvSrm10b0GSf7f18VcwKRjMGE
OEXJNo0lSrGglp5JDK8UExpbdqAQCe82tyHGnZMfSBAx8YV+rESnjjCK2QOXO7ME
at19manURO5r3Fgz454Wd9u8qJ1Iub7HPaE7/v4wpBO7VxH/D40Sm5YvZFFTD/s4
bDVH0Ywa+IbMfl0YGzbLHrgfaQIDAQABo4IClTCCApEwHQYDVR0OBBYEFH6+2iMy
dl6KIEsq5Cn7+hwsQPjqMB8GA1UdIwQYMBaAFLL4qwDVdGTdXQWkWkfEIPX4lrj8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTkzRi8yRUQ3NzVEQUEz
NkMxMUU4OTE0MDU5MjZDNEY5QUUwMi9zdmlyQU5WMFpOMWRCYVJhUjhRZzlmaVd1
UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3N2aXJBTlYwWk4xZEJhUmFSOFFnOWZpV3VQdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEU5M0YvMkVENzc1REFBMzZDMTFFODkxNDA1OTI2QzRGOUFFMDIvQkY5MTYyMzBD
Qjk0MTFFQzg3QzI0MDc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAOwDMwDQYJKoZIhvcNAQELBQADggEBABHSmT9lDqz7wfFH
o9bAQJhb5fi7JgDvoeRs2TwI4q1ZToRL7bpVNRNXb6Zbp17Gyfmq53xTc6+NZYXy
U1lF4S5PH6zEJry1fsaB7PAtJUHHLMZ9Oi5eAJAywY6iTWXwams2iuueTzEi9MmY
T3MCUKOD3nx5Hx5A0zdKGFoiK9tc8oyz7nUFlyQABxAr8Zzjj3UflF7ctFPZfV+V
ilLpiSv3QYtO3pWC1jiEZwIj2emWhrIAPK9CrzbHRS+MICX7wa/jxdSDJbcd0V2i
8WrHQC8ZUnsbbABjA+iGi8PSXNNM5LxsGxtPTKSGiDbHcR8bJ7I7uT5LAe4k1rZQ
UPVjYPA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:41 2023 by rpki-client on console-fra.rpki-client.org