Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/F2086DA4CBA711EC903FA165C4F9AE02.roa
File:                     F2086DA4CBA711EC903FA165C4F9AE02.roa (raw, json)
Hash identifier:          4IdG7cZ4RpTbUGo5jK6TPWSy4wNueImWfEyp7d8EG8U=
Subject key identifier:   2D:48:F4:B9:3A:63:F9:23:C0:4B:AF:2F:25:28:55:2B:20:DD:2B:C1
Certificate issuer:       /CN=A914E93F/serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
Certificate serial:       1077
Authority key identifier: B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/F2086DA4CBA711EC903FA165C4F9AE02.roa
Signing time:             Thu 05 May 2022 06:26:46 +0000
ROA not before:           Thu 05 May 2022 06:26:46 +0000
ROA not after:            Thu 31 Aug 2023 00:00:00 +0000
asID:                     149769
IP address blocks:        14.192.49.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4215 (0x1077)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E93F/serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
        Validity
            Not Before: May  5 06:26:46 2022 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=62736e26-4150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7c:83:ae:a5:5d:9f:41:e8:fd:65:3d:a3:5a:
                    e8:78:f1:0b:8e:e8:48:9b:4e:f4:64:77:09:8a:d1:
                    59:d3:dc:b9:88:45:82:cb:ac:2e:4d:01:48:11:af:
                    69:1f:dd:5e:59:79:06:be:4e:50:a0:df:15:97:cf:
                    95:0a:77:4f:75:5b:5c:c1:3a:0b:f5:67:c8:2e:74:
                    f3:dd:ad:84:e0:b5:59:7e:e3:da:c0:3a:99:5f:8a:
                    9c:a8:96:94:12:85:5f:d2:db:95:90:46:8e:7a:5c:
                    e2:b0:ee:7b:aa:91:91:59:b1:15:ad:86:7c:a3:3d:
                    56:12:8b:23:01:eb:7c:26:54:7a:46:a9:5d:b2:34:
                    28:3f:39:23:b1:f2:cc:1e:4b:1a:b6:b4:15:96:23:
                    53:bc:7a:8f:a2:31:57:ad:43:87:b0:39:6b:52:fd:
                    08:f7:62:6a:ec:13:ee:32:24:fd:86:f1:eb:02:67:
                    44:aa:d6:fc:fa:cb:bc:d4:64:7b:35:87:07:f6:c5:
                    7f:8d:68:bf:bd:fd:09:cf:db:ea:bf:7c:12:8a:51:
                    6d:75:4d:68:2e:b2:1a:8e:fd:8f:4a:e8:d9:ac:e8:
                    ac:04:74:26:80:a1:3c:87:b8:0d:1e:d3:5e:6e:1b:
                    18:dc:9e:c5:25:d8:4a:68:db:b7:a5:7f:ca:9c:c1:
                    ca:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:48:F4:B9:3A:63:F9:23:C0:4B:AF:2F:25:28:55:2B:20:DD:2B:C1
            X509v3 Authority Key Identifier:
                keyid:B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/F2086DA4CBA711EC903FA165C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.192.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:ed:c4:6c:4a:87:1f:ea:dc:97:76:43:37:03:e0:ec:9b:55:
         9d:f2:37:7f:7f:91:fb:9a:ec:43:20:a6:12:a2:58:4e:8f:13:
         1f:4e:5d:bd:46:21:d5:d6:13:f9:4a:91:b2:8e:e1:20:92:e5:
         e1:3f:89:3d:41:af:54:b2:9a:2b:4d:34:29:5a:55:bc:55:9e:
         32:5f:31:37:2d:83:dc:cc:1b:4f:a3:de:16:3a:3a:a9:ba:da:
         55:b5:9a:8c:e2:96:26:62:6e:2e:9e:a5:11:19:0c:f2:85:ab:
         26:45:c6:ba:45:46:15:87:23:f2:d1:c5:a8:0f:66:07:00:47:
         4c:eb:67:80:1d:42:dc:6e:25:88:49:87:c2:6b:eb:e1:7e:0c:
         6a:cb:05:43:67:6d:45:88:28:df:90:b9:c1:e7:3d:dd:01:ac:
         e2:fc:c7:7b:37:4e:79:8c:fb:08:d7:59:03:ab:73:56:27:be:
         49:66:98:1d:b1:5f:96:4f:48:d5:5a:aa:2d:dd:c9:51:da:56:
         9e:6b:61:23:22:d4:48:ae:2b:2c:59:21:40:d9:fa:e0:d0:59:
         6f:5f:38:6f:f0:31:38:a9:37:1c:d4:38:fa:dd:8d:46:00:1a:
         19:53:1d:98:9a:c7:d1:64:16:d2:b0:3c:a8:c5:dd:59:59:03:
         6e:d0:22:bb
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICEHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEU5M0YxMTAvBgNVBAUTKEIyRjhBQjAwRDU3NDY0REQ1RDA1QTQ1QTQ3QzQyMEY1
Rjg5NkI4RkMwHhcNMjIwNTA1MDYyNjQ2WhcNMjMwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjczNmUyNi00MTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3XyDrqVdn0Ho/WU9o1roePELjuhIm070ZHcJitFZ09y5iEWCy6wuTQFIEa9p
H91eWXkGvk5QoN8Vl8+VCndPdVtcwToL9WfILnTz3a2E4LVZfuPawDqZX4qcqJaU
EoVf0tuVkEaOelzisO57qpGRWbEVrYZ8oz1WEosjAet8JlR6RqldsjQoPzkjsfLM
HksatrQVliNTvHqPojFXrUOHsDlrUv0I92Jq7BPuMiT9hvHrAmdEqtb8+su81GR7
NYcH9sV/jWi/vf0Jz9vqv3wSilFtdU1oLrIajv2PSujZrOisBHQmgKE8h7gNHtNe
bhsY3J7FJdhKaNu3pX/KnMHKyQIDAQABo4IClTCCApEwHQYDVR0OBBYEFC1I9Lk6
Y/kjwEuvLyUoVSsg3SvBMB8GA1UdIwQYMBaAFLL4qwDVdGTdXQWkWkfEIPX4lrj8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTkzRi8yRUQ3NzVEQUEz
NkMxMUU4OTE0MDU5MjZDNEY5QUUwMi9zdmlyQU5WMFpOMWRCYVJhUjhRZzlmaVd1
UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3N2aXJBTlYwWk4xZEJhUmFSOFFnOWZpV3VQdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEU5M0YvMkVENzc1REFBMzZDMTFFODkxNDA1OTI2QzRGOUFFMDIvRjIwODZEQTRD
QkE3MTFFQzkwM0ZBMTY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAOwDEwDQYJKoZIhvcNAQELBQADggEBADftxGxKhx/q3Jd2
QzcD4OybVZ3yN39/kfua7EMgphKiWE6PEx9OXb1GIdXWE/lKkbKO4SCS5eE/iT1B
r1SymitNNClaVbxVnjJfMTctg9zMG0+j3hY6Oqm62lW1moziliZibi6epREZDPKF
qyZFxrpFRhWHI/LRxagPZgcAR0zrZ4AdQtxuJYhJh8Jr6+F+DGrLBUNnbUWIKN+Q
ucHnPd0BrOL8x3s3TnmM+wjXWQOrc1YnvklmmB2xX5ZPSNVaqi3dyVHaVp5rYSMi
1EiuKyxZIUDZ+uDQWW9fOG/wMTipNxzUOPrdjUYAGhlTHZiax9FkFtKwPKjF3VlZ
A27QIrs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-ams.rpki-client.org