Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/54F553AAFEF811EB8AFE1316C4F9AE02.roa
File:                     54F553AAFEF811EB8AFE1316C4F9AE02.roa (raw, json)
Hash identifier:          zU/qbgtNDTtPGZOse52QPJoCtwm6h/Ku4r2PidG3VfU=
Subject key identifier:   CD:7E:B8:AB:21:ED:F6:49:82:00:39:00:18:BB:01:DE:5C:23:86:07
Certificate issuer:       /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial:       1C28
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/54F553AAFEF811EB8AFE1316C4F9AE02.roa
Signing time:             Fri 05 May 2023 03:53:54 +0000
ROA not before:           Fri 05 May 2023 03:53:54 +0000
ROA not after:            Fri 01 Dec 2023 00:00:00 +0000
asID:                     4134
IP address blocks:        1.1.4.0/22 maxlen: 22
                          1.1.16.0/20 maxlen: 20
                          1.2.9.0/24 maxlen: 24
                          1.2.10.0/24 maxlen: 24
                          1.2.11.0/24 maxlen: 24
                          1.2.12.0/22 maxlen: 22
                          1.3.0.0/16 maxlen: 16
                          1.10.64.0/18 maxlen: 18
                          1.180.0.0/14 maxlen: 14
                          27.54.72.0/21 maxlen: 21
                          39.0.64.0/18 maxlen: 18
                          39.0.128.0/17 maxlen: 17
                          42.0.16.0/21 maxlen: 21
                          42.99.64.0/19 maxlen: 19
                          42.123.0.0/19 maxlen: 19
                          42.187.0.0/18 maxlen: 18
                          42.194.64.0/18 maxlen: 18
                          101.99.96.0/19 maxlen: 19
                          101.102.64.0/19 maxlen: 19
                          101.102.104.0/21 maxlen: 21
                          101.128.16.0/20 maxlen: 20
                          101.128.32.0/19 maxlen: 19
                          101.234.96.0/19 maxlen: 19
                          101.251.32.0/19 maxlen: 19
                          106.0.64.0/18 maxlen: 18
                          110.94.0.0/15 maxlen: 15
                          114.79.64.0/18 maxlen: 18
                          115.166.64.0/19 maxlen: 19
                          120.88.8.0/21 maxlen: 21
                          121.56.0.0/15 maxlen: 15
                          121.59.0.0/23 maxlen: 23
                          124.74.0.0/15 maxlen: 15
                          124.76.0.0/14 maxlen: 14
                          124.112.0.0/15 maxlen: 15
                          124.117.0.0/16 maxlen: 16
                          124.224.0.0/16 maxlen: 16
                          124.225.0.0/16 maxlen: 16
                          124.234.0.0/15 maxlen: 15
                          125.76.128.0/17 maxlen: 17
                          125.80.0.0/13 maxlen: 13
                          125.104.0.0/13 maxlen: 13
                          150.121.0.0/16 maxlen: 16
                          202.67.0.0/22 maxlen: 24
                          202.73.128.0/22 maxlen: 24
                          202.86.252.0/22 maxlen: 22
                          202.96.112.0/20 maxlen: 20
                          202.98.128.0/19 maxlen: 19
                          202.150.224.0/19 maxlen: 19
                          202.166.224.0/19 maxlen: 19
                          202.191.72.0/21 maxlen: 24
                          203.22.78.0/24 maxlen: 24
                          203.24.186.0/23 maxlen: 23
                          203.33.67.0/24 maxlen: 24
                          203.33.68.0/24 maxlen: 24
                          203.33.73.0/24 maxlen: 24
                          203.33.79.0/24 maxlen: 24
                          203.33.100.0/24 maxlen: 24
                          203.33.122.0/24 maxlen: 24
                          203.33.129.0/24 maxlen: 24
                          203.33.131.0/24 maxlen: 24
                          203.86.96.0/19 maxlen: 19
                          203.144.96.0/19 maxlen: 19
                          218.0.0.0/16 maxlen: 16
                          218.2.0.0/16 maxlen: 16
                          218.6.0.0/17 maxlen: 17
                          218.6.128.0/17 maxlen: 17
                          218.14.0.0/15 maxlen: 15
                          218.20.0.0/16 maxlen: 16
                          218.21.0.0/19 maxlen: 19
                          218.21.32.0/20 maxlen: 20
                          218.21.48.0/20 maxlen: 20
                          218.21.64.0/18 maxlen: 18
                          218.62.128.0/17 maxlen: 19
                          218.64.0.0/16 maxlen: 16
                          218.92.0.0/16 maxlen: 16
                          218.100.128.0/17 maxlen: 17
                          240e:108:4020::/43 maxlen: 48
                          240e:108:4200::/43 maxlen: 48
                          240e:108:4220::/43 maxlen: 48
                          240e:108:4240::/43 maxlen: 48
                          240e:108:4260::/43 maxlen: 48
                          240e:108:4280::/43 maxlen: 48
                          240e:108:42a0::/43 maxlen: 48
                          240e:108:42c0::/43 maxlen: 48
                          240e:108:42e0::/43 maxlen: 48
                          240e:108:4300::/43 maxlen: 48
                          240e:108:4320::/43 maxlen: 48
                          240e:108:4380::/43 maxlen: 48
                          240e:108:43a0::/43 maxlen: 48
                          240e:108:4800::/43 maxlen: 48
                          240e:108:4880::/43 maxlen: 48
                          240e:108:48a0::/43 maxlen: 48
                          240e:108:48c0::/43 maxlen: 48
                          240e:108:48e0::/43 maxlen: 48
                          240e:108:4900::/43 maxlen: 48
                          240e:108:4940::/43 maxlen: 48
                          240e:108:4980::/43 maxlen: 48
                          240e:108:49a0::/43 maxlen: 48
                          240e:108:49c0::/43 maxlen: 48
                          240e:108:49e0::/43 maxlen: 48
                          240e:108:4a00::/43 maxlen: 48
                          240e:108:4a20::/43 maxlen: 48
                          240e:108:4a40::/43 maxlen: 48
                          240e:108:4a60::/43 maxlen: 48
                          240e:108:4a80::/43 maxlen: 48
                          240e:108:4aa0::/43 maxlen: 48
                          240e:108:4ac0::/43 maxlen: 48
                          240e:108:4ae0::/43 maxlen: 48
                          240e:108:4b00::/43 maxlen: 48
                          240e:108:4b20::/43 maxlen: 48
                          240e:108:4b80::/43 maxlen: 48
                          240e:108:4ba0::/43 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7208 (0x1c28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
        Validity
            Not Before: May  5 03:53:54 2023 GMT
            Not After : Dec  1 00:00:00 2023 GMT
        Subject: CN=64547dd2-62d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:79:d8:a8:69:33:f1:cc:cf:aa:5d:04:cf:bf:
                    00:39:83:5f:7b:a6:ad:ee:25:31:36:50:4d:71:df:
                    bb:49:dd:11:b3:7a:01:1d:02:10:53:0a:2b:f1:24:
                    83:bd:7a:27:79:b8:9d:6a:d5:ed:f7:40:8c:dd:69:
                    55:86:e2:bf:23:6d:e9:a5:d8:b7:bd:e7:4f:bf:6c:
                    e3:46:df:54:a0:5c:32:80:66:20:ed:20:6c:9a:7c:
                    bd:cb:e2:72:4e:ef:64:56:f4:b2:55:35:78:18:79:
                    d4:93:7a:fe:5a:88:30:6f:a4:d2:4e:60:4b:62:ac:
                    36:ed:8e:ba:09:3c:30:ad:8d:f3:e6:cb:03:7c:ba:
                    05:6c:32:07:c6:59:28:ca:99:a3:52:7a:ac:8a:83:
                    f2:bf:82:20:cd:4b:21:e7:42:7f:e7:ec:5c:05:0d:
                    b4:51:0d:d5:0b:19:c0:7c:fe:08:3b:82:ab:64:6a:
                    e6:cd:bd:ce:9a:95:8e:da:5f:42:37:99:3e:cd:91:
                    9f:85:f4:94:cc:c9:fa:14:e3:38:03:74:fd:17:42:
                    c7:ed:83:0f:cf:b6:23:e4:1a:24:da:b0:99:e6:74:
                    1f:44:c1:f2:06:64:8c:db:41:3b:e1:4f:80:f6:43:
                    03:43:b5:e6:69:90:4f:9a:fc:cf:ee:ed:b6:9a:ba:
                    96:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7E:B8:AB:21:ED:F6:49:82:00:39:00:18:BB:01:DE:5C:23:86:07
            X509v3 Authority Key Identifier:
                keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/54F553AAFEF811EB8AFE1316C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.1.4.0/22
                  1.1.16.0/20
                  1.2.9.0-1.2.15.255
                  1.3.0.0/16
                  1.10.64.0/18
                  1.180.0.0/14
                  27.54.72.0/21
                  39.0.64.0-39.0.255.255
                  42.0.16.0/21
                  42.99.64.0/19
                  42.123.0.0/19
                  42.187.0.0/18
                  42.194.64.0/18
                  101.99.96.0/19
                  101.102.64.0/19
                  101.102.104.0/21
                  101.128.16.0-101.128.63.255
                  101.234.96.0/19
                  101.251.32.0/19
                  106.0.64.0/18
                  110.94.0.0/15
                  114.79.64.0/18
                  115.166.64.0/19
                  120.88.8.0/21
                  121.56.0.0/15
                  121.59.0.0/23
                  124.74.0.0-124.79.255.255
                  124.112.0.0/15
                  124.117.0.0/16
                  124.224.0.0/15
                  124.234.0.0/15
                  125.76.128.0/17
                  125.80.0.0/13
                  125.104.0.0/13
                  150.121.0.0/16
                  202.67.0.0/22
                  202.73.128.0/22
                  202.86.252.0/22
                  202.96.112.0/20
                  202.98.128.0/19
                  202.150.224.0/19
                  202.166.224.0/19
                  202.191.72.0/21
                  203.22.78.0/24
                  203.24.186.0/23
                  203.33.67.0-203.33.68.255
                  203.33.73.0/24
                  203.33.79.0/24
                  203.33.100.0/24
                  203.33.122.0/24
                  203.33.129.0/24
                  203.33.131.0/24
                  203.86.96.0/19
                  203.144.96.0/19
                  218.0.0.0/16
                  218.2.0.0/16
                  218.6.0.0/16
                  218.14.0.0/15
                  218.20.0.0-218.21.127.255
                  218.62.128.0/17
                  218.64.0.0/16
                  218.92.0.0/16
                  218.100.128.0/17
                IPv6:
                  240e:108:4020::/43
                  240e:108:4200::-240e:108:433f:ffff:ffff:ffff:ffff:ffff
                  240e:108:4380::/42
                  240e:108:4800::/43
                  240e:108:4880::-240e:108:491f:ffff:ffff:ffff:ffff:ffff
                  240e:108:4940::/43
                  240e:108:4980::-240e:108:4b3f:ffff:ffff:ffff:ffff:ffff
                  240e:108:4b80::/42

    Signature Algorithm: sha256WithRSAEncryption
         8b:e6:3d:c8:98:7a:de:00:c5:77:16:b7:34:0e:41:ac:60:2b:
         54:07:89:e9:94:c5:9a:e5:41:a2:a8:09:6c:be:25:6d:26:a5:
         64:11:e2:ff:89:42:05:00:15:39:3c:08:26:eb:70:ed:f0:b6:
         c2:21:2d:70:56:42:2d:17:0d:51:f3:b7:e9:2d:1c:e3:4d:ea:
         5a:e7:84:5e:66:d8:79:ef:ff:0c:64:7f:b4:f2:2e:76:d6:55:
         b1:1e:c3:aa:52:fe:ea:7e:73:b0:45:c0:ec:ee:40:d2:da:a3:
         67:b6:16:82:f2:f1:33:f9:27:6b:23:d0:c8:2c:c8:c9:48:1d:
         0e:0a:08:96:0f:3c:3d:0f:e7:52:79:2c:79:a9:9d:b9:bd:ed:
         cb:01:bd:49:f4:58:38:79:dc:23:1c:2a:78:26:44:df:41:2c:
         42:2e:25:11:c9:7f:3a:03:53:8b:64:44:52:1e:59:af:bd:e2:
         b5:81:f2:cc:39:10:98:98:2b:77:98:78:f0:47:47:2a:f4:c1:
         fc:a8:de:39:29:9c:60:cf:cb:4d:0c:95:40:4e:07:49:8e:d2:
         9f:1e:f4:db:88:58:17:ae:05:af:77:41:4f:99:de:c9:aa:c8:
         5a:9f:3a:0a:22:b4:23:8c:49:64:63:86:57:ce:7b:7d:71:87:
         9f:2c:3d:4a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-ams.rpki-client.org