Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/ACF2F0B2042E11ED9CD4D311C4F9AE02.roa
File:                     ACF2F0B2042E11ED9CD4D311C4F9AE02.roa (raw, json)
Hash identifier:          FRWWK2wJUdaGjHckQq8xr08J/V/E8neY7OCn8CP1b+M=
Subject key identifier:   7C:EF:8E:BA:5D:52:62:1E:9E:08:BA:2F:C0:7E:C9:3D:58:CD:97:C0
Certificate issuer:       /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Certificate serial:       059C
Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/ACF2F0B2042E11ED9CD4D311C4F9AE02.roa
Signing time:             Fri 29 Jul 2022 07:51:18 +0000
ROA not before:           Fri 29 Jul 2022 07:51:18 +0000
ROA not after:            Thu 31 Aug 2023 00:00:00 +0000
asID:                     139341
IP address blocks:        43.132.64.0/23 maxlen: 24
                          43.132.69.0/24 maxlen: 24
                          43.132.70.0/23 maxlen: 24
                          43.132.72.0/23 maxlen: 23
                          43.132.74.0/24 maxlen: 24
                          43.132.75.0/24 maxlen: 24
                          43.132.76.0/22 maxlen: 24
                          43.132.80.0/23 maxlen: 24
                          43.132.82.0/24 maxlen: 24
                          43.132.85.0/24 maxlen: 24
                          43.132.86.0/24 maxlen: 24
                          43.132.87.0/24 maxlen: 24
                          43.132.88.0/24 maxlen: 24
                          43.132.89.0/24 maxlen: 24
                          43.132.90.0/23 maxlen: 24
                          43.132.92.0/24 maxlen: 24
                          43.132.93.0/24 maxlen: 24
                          43.152.0.0/24 maxlen: 24
                          43.152.1.0/24 maxlen: 24
                          43.152.2.0/24 maxlen: 24
                          43.152.3.0/24 maxlen: 24
                          43.152.4.0/24 maxlen: 24
                          43.152.5.0/24 maxlen: 24
                          43.152.6.0/24 maxlen: 24
                          43.152.7.0/24 maxlen: 24
                          43.152.8.0/24 maxlen: 24
                          43.152.9.0/24 maxlen: 24
                          43.152.10.0/24 maxlen: 24
                          43.152.11.0/24 maxlen: 24
                          43.152.12.0/24 maxlen: 24
                          43.152.13.0/24 maxlen: 24
                          43.152.14.0/23 maxlen: 24
                          43.152.16.0/23 maxlen: 24
                          43.152.18.0/24 maxlen: 24
                          43.152.19.0/24 maxlen: 24
                          43.152.20.0/24 maxlen: 24
                          43.152.21.0/24 maxlen: 24
                          43.152.22.0/24 maxlen: 24
                          43.152.23.0/24 maxlen: 24
                          43.152.24.0/23 maxlen: 24
                          43.152.26.0/23 maxlen: 24
                          43.152.28.0/23 maxlen: 24
                          43.152.30.0/23 maxlen: 24
                          43.152.32.0/22 maxlen: 24
                          43.152.36.0/23 maxlen: 24
                          43.152.38.0/23 maxlen: 24
                          43.152.40.0/24 maxlen: 24
                          43.152.41.0/24 maxlen: 24
                          43.152.42.0/23 maxlen: 23
                          43.152.44.0/23 maxlen: 24
                          43.152.46.0/24 maxlen: 24
                          43.152.47.0/24 maxlen: 24
                          43.152.48.0/24 maxlen: 24
                          43.152.49.0/24 maxlen: 24
                          43.152.50.0/24 maxlen: 24
                          43.152.51.0/24 maxlen: 24
                          43.152.52.0/24 maxlen: 24
                          43.152.53.0/24 maxlen: 24
                          43.152.54.0/24 maxlen: 24
                          43.152.55.0/24 maxlen: 24
                          43.152.56.0/24 maxlen: 24
                          43.152.57.0/24 maxlen: 24
                          43.152.58.0/23 maxlen: 23
                          43.152.60.0/24 maxlen: 24
                          43.152.61.0/24 maxlen: 24
                          43.152.62.0/24 maxlen: 24
                          43.152.63.0/24 maxlen: 24
                          43.152.128.0/18 maxlen: 18
                          43.152.128.0/23 maxlen: 23
                          43.152.130.0/23 maxlen: 23
                          43.152.132.0/23 maxlen: 23
                          43.152.134.0/23 maxlen: 23
                          43.152.136.0/24 maxlen: 24
                          43.152.137.0/24 maxlen: 24
                          43.152.138.0/24 maxlen: 24
                          43.152.139.0/24 maxlen: 24
                          43.152.140.0/23 maxlen: 24
                          43.152.142.0/23 maxlen: 24
                          43.152.144.0/24 maxlen: 24
                          43.152.145.0/24 maxlen: 24
                          43.152.146.0/24 maxlen: 24
                          43.152.147.0/24 maxlen: 24
                          43.152.148.0/24 maxlen: 24
                          43.152.149.0/24 maxlen: 24
                          43.152.150.0/23 maxlen: 24
                          43.152.152.0/23 maxlen: 24
                          43.152.154.0/23 maxlen: 24
                          43.152.156.0/22 maxlen: 24
                          43.152.160.0/21 maxlen: 24
                          43.152.168.0/23 maxlen: 24
                          43.152.170.0/23 maxlen: 24
                          43.152.172.0/23 maxlen: 24
                          43.152.174.0/24 maxlen: 24
                          43.152.175.0/24 maxlen: 24
                          43.152.176.0/23 maxlen: 24
                          43.152.178.0/23 maxlen: 24
                          43.152.180.0/22 maxlen: 24
                          43.152.184.0/23 maxlen: 24
                          43.152.186.0/23 maxlen: 24
                          43.152.188.0/23 maxlen: 24
                          43.152.190.0/23 maxlen: 24
                          43.159.64.0/24 maxlen: 24
                          43.159.65.0/24 maxlen: 24
                          43.159.66.0/23 maxlen: 24
                          43.159.68.0/23 maxlen: 24
                          43.159.70.0/23 maxlen: 24
                          43.159.72.0/23 maxlen: 24
                          43.159.74.0/24 maxlen: 24
                          43.159.75.0/24 maxlen: 24
                          43.159.91.0/24 maxlen: 24
                          43.159.92.0/24 maxlen: 24
                          43.159.93.0/24 maxlen: 24
                          43.159.94.0/24 maxlen: 24
                          43.159.95.0/24 maxlen: 24
                          43.159.96.0/20 maxlen: 24
                          43.159.112.0/21 maxlen: 24
                          43.159.120.0/24 maxlen: 24
                          43.159.121.0/24 maxlen: 24
                          43.159.122.0/24 maxlen: 24
                          43.159.123.0/24 maxlen: 24
                          43.159.124.0/24 maxlen: 24
                          43.159.125.0/24 maxlen: 24
                          43.159.126.0/24 maxlen: 24
                          43.159.127.0/24 maxlen: 24
                          43.175.0.0/16 maxlen: 16
                          101.33.6.0/23 maxlen: 24
                          240d:c010:18::/48 maxlen: 48
                          240d:c010:19::/48 maxlen: 48
                          240d:c010:1a::/48 maxlen: 48
                          240d:c010:1c::/48 maxlen: 48
                          240d:c010:41::/48 maxlen: 48
                          240d:c010:42::/48 maxlen: 48
                          240d:c010:54::/47 maxlen: 48
                          240d:c010:56::/48 maxlen: 48
                          240d:c010:5a::/48 maxlen: 48
                          240d:c010:61::/48 maxlen: 48
                          240d:c010:62::/47 maxlen: 48
                          240d:c010:64::/47 maxlen: 48
                          240d:c010:69::/48 maxlen: 48
                          240d:c010:6b::/48 maxlen: 48
                          240d:c010:6f::/48 maxlen: 48
                          240d:c010:70::/44 maxlen: 48
                          240d:c010:80::/44 maxlen: 48
                          240d:c010:ab::/48 maxlen: 48
                          240d:c010:b2::/48 maxlen: 48
                          240d:c010:bf::/48 maxlen: 48
                          240d:c010:c8::/48 maxlen: 48
                          240d:c010:cf::/48 maxlen: 48
                          240d:c010:d2::/48 maxlen: 48
                          240d:c010:d4::/48 maxlen: 48
                          240d:c010:d5::/48 maxlen: 48
                          240d:c010:f4::/48 maxlen: 48
                          240d:c010:f5::/48 maxlen: 48
                          240d:c010:fb::/48 maxlen: 48
                          240d:c010:ff00::/40 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1436 (0x59c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
        Validity
            Not Before: Jul 29 07:51:18 2022 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=62e39176-142e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:87:a2:fb:56:bd:33:a1:8b:e6:6c:5c:61:2e:
                    98:7b:e8:7c:8b:c9:65:3b:31:68:85:a3:9f:ef:92:
                    94:e6:35:1e:32:33:6d:99:f8:6c:7f:bc:a1:71:8c:
                    f7:a1:4b:d2:3e:bb:0e:20:7f:c6:81:12:8e:97:2d:
                    bb:e3:d3:6e:bb:3f:f1:18:e5:16:cd:ed:c3:cc:7b:
                    81:cb:12:d8:d6:5f:6b:05:8d:2e:ee:d4:d3:7a:c6:
                    a5:c9:e2:43:fe:86:35:f7:7e:71:bf:d2:b8:87:81:
                    bc:71:2d:6e:7d:d7:c9:0c:b1:cd:45:a2:1a:84:d5:
                    c1:46:9b:2e:f0:d3:ca:8e:47:50:bc:55:f8:9d:47:
                    68:58:6e:94:cd:0f:40:7a:bc:06:f1:ba:3e:db:27:
                    16:fb:32:f9:a6:3c:eb:bb:5c:ca:a7:95:26:56:fd:
                    0c:f5:53:b3:80:89:00:a8:16:16:a8:b2:f1:27:2c:
                    bb:c4:44:65:8c:e9:18:d4:8b:cb:f0:c5:5b:07:fe:
                    43:f8:01:10:7d:4b:87:56:33:da:95:30:58:47:ce:
                    19:15:c4:62:83:38:fb:4b:00:3f:63:46:53:03:be:
                    e9:17:d5:64:a9:4e:54:f4:23:09:f7:e0:95:f6:d3:
                    5d:28:b0:79:41:f2:b2:0e:59:7c:de:52:f1:0d:63:
                    06:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:EF:8E:BA:5D:52:62:1E:9E:08:BA:2F:C0:7E:C9:3D:58:CD:97:C0
            X509v3 Authority Key Identifier:
                keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/ACF2F0B2042E11ED9CD4D311C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.132.64.0/23
                  43.132.69.0-43.132.82.255
                  43.132.85.0-43.132.93.255
                  43.152.0.0/18
                  43.152.128.0/18
                  43.159.64.0-43.159.75.255
                  43.159.91.0-43.159.127.255
                  43.175.0.0/16
                  101.33.6.0/23
                IPv6:
                  240d:c010:18::-240d:c010:1a:ffff:ffff:ffff:ffff:ffff
                  240d:c010:1c::/48
                  240d:c010:41::-240d:c010:42:ffff:ffff:ffff:ffff:ffff
                  240d:c010:54::-240d:c010:56:ffff:ffff:ffff:ffff:ffff
                  240d:c010:5a::/48
                  240d:c010:61::-240d:c010:65:ffff:ffff:ffff:ffff:ffff
                  240d:c010:69::/48
                  240d:c010:6b::/48
                  240d:c010:6f::-240d:c010:8f:ffff:ffff:ffff:ffff:ffff
                  240d:c010:ab::/48
                  240d:c010:b2::/48
                  240d:c010:bf::/48
                  240d:c010:c8::/48
                  240d:c010:cf::/48
                  240d:c010:d2::/48
                  240d:c010:d4::/47
                  240d:c010:f4::/47
                  240d:c010:fb::/48
                  240d:c010:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         0e:d2:58:56:aa:aa:a3:50:ac:f1:84:a6:a8:21:52:70:01:2a:
         86:90:eb:a8:18:6d:4a:ec:fd:96:b8:de:12:3d:c7:91:b9:4c:
         65:51:ec:be:62:28:19:0d:d1:27:5a:6f:ae:8c:23:8f:4b:e6:
         42:e9:8f:71:fb:58:8a:85:61:bc:41:a1:0d:56:8f:90:09:34:
         b1:74:6b:37:53:7f:6f:de:e5:e7:0a:cd:a3:37:4f:67:cd:74:
         21:9d:44:15:03:80:00:38:24:8b:a1:c3:6f:28:cf:bf:3a:d6:
         d5:99:ad:31:5d:55:aa:9a:df:1f:55:64:15:ac:82:03:17:c2:
         ca:89:8c:dc:0d:7d:05:af:03:1f:74:e6:0d:26:4a:67:1a:b8:
         22:e7:a0:4b:a9:e1:8e:f7:78:04:0e:97:27:33:c9:93:a3:98:
         da:a7:78:33:e0:db:94:06:b8:96:7b:91:a5:ef:50:2b:28:86:
         09:f6:3d:62:4d:7d:21:83:1b:e5:83:13:c3:d9:da:bc:f7:c3:
         e4:b4:46:c0:df:f7:13:08:4e:80:00:be:63:ca:56:be:09:5c:
         e4:24:d4:45:8b:05:84:ab:d3:f3:0d:fd:c4:a5:bc:98:bf:9a:
         ab:4b:dc:35:6d:75:87:c6:d4:2c:52:46:2b:b9:59:29:c3:34:
         c2:ac:59:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-ams.rpki-client.org