Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/77470136C93411ECBABBF520C4F9AE02.roa
File:                     77470136C93411ECBABBF520C4F9AE02.roa (raw, json)
Hash identifier:          JpVJKKIT0Jym3AAtkCsxIeMnJKq/1gkiH7XrA2HFj7Q=
Subject key identifier:   3E:4C:3E:8C:55:62:6F:C3:62:D1:0C:B1:46:10:1C:5F:15:99:15:55
Certificate issuer:       /CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011
Certificate serial:       CC
Authority key identifier: 33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/77470136C93411ECBABBF520C4F9AE02.roa
Signing time:             Sun 01 May 2022 09:52:52 +0000
ROA not before:           Sun 01 May 2022 09:52:52 +0000
ROA not after:            Mon 01 May 2023 00:00:00 +0000
asID:                     134562
IP address blocks:        103.180.112.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011
        Validity
            Not Before: May  1 09:52:52 2022 GMT
            Not After : May  1 00:00:00 2023 GMT
        Subject: CN=626e5874-5c49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3d:19:29:e7:24:ff:b5:f3:41:53:dc:32:26:
                    3a:3c:55:b7:e4:4b:dd:c1:bd:2f:eb:1f:07:3a:b1:
                    a9:f0:a0:c5:2b:65:52:ad:a5:33:8d:2b:ef:58:8d:
                    81:c3:90:3f:ce:0a:dd:35:96:1c:f4:df:42:17:a7:
                    66:1b:b9:9a:63:52:29:7e:97:4c:1e:41:b7:1e:66:
                    07:5f:51:71:43:3b:e1:d1:89:5c:f4:05:24:64:8f:
                    75:76:8f:73:3a:92:69:a9:16:a4:99:14:5e:dd:c9:
                    97:30:8a:ed:43:16:ee:c1:4b:16:fd:10:bb:97:92:
                    cc:07:80:53:d7:22:f2:30:54:72:e7:ac:f8:0a:c7:
                    9b:f6:f0:32:e6:12:85:51:53:64:56:13:2e:9b:48:
                    4f:13:4e:2f:d7:74:56:7b:c1:2c:e4:2d:05:84:5b:
                    ec:20:9a:be:44:a0:6a:bc:4b:f2:4f:8b:77:b2:26:
                    6c:ad:20:2f:69:68:f5:9f:a6:26:03:5b:97:6f:6b:
                    03:bb:e7:21:2c:bf:41:56:e8:e9:df:16:f2:8a:96:
                    7f:31:23:99:71:a4:d5:59:39:af:69:57:81:2c:8b:
                    c6:b3:1e:ae:22:7c:f6:fc:87:d8:1c:52:52:e2:10:
                    9a:08:20:ad:cb:ce:c1:8b:eb:f5:43:aa:b7:a8:cb:
                    31:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:4C:3E:8C:55:62:6F:C3:62:D1:0C:B1:46:10:1C:5F:15:99:15:55
            X509v3 Authority Key Identifier:
                keyid:33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/77470136C93411ECBABBF520C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c6:17:c6:6d:54:54:44:b3:87:d3:ce:f9:8e:e2:ed:a7:eb:0b:
         ea:9b:6b:fa:98:b7:7c:ac:89:4d:35:58:9b:03:e1:be:25:4a:
         78:d4:67:78:0e:13:26:40:4b:7a:7b:dd:8c:92:c2:a7:74:71:
         ae:76:88:cc:48:1d:5a:eb:99:9d:17:37:67:c4:2d:02:78:54:
         d3:5a:10:68:cf:e5:c7:6a:5d:30:cc:c6:84:ae:5e:fc:49:34:
         30:34:29:cd:30:18:dd:51:21:d8:bc:64:8c:e0:a8:60:87:4c:
         f1:a9:3b:fd:b5:76:b8:fe:81:31:37:a0:16:78:a8:f2:0d:3a:
         cf:ef:53:83:be:65:99:3f:53:4a:f4:db:53:6a:3d:76:53:ec:
         ad:ca:44:f8:6d:f8:8e:ca:17:0c:d4:29:aa:4e:cc:8b:7c:c8:
         3c:f9:3c:1d:a7:ce:12:05:79:05:6f:ee:5d:4b:ad:53:08:ef:
         fd:59:31:f6:5e:44:e1:e3:1b:df:bb:2f:e3:b9:62:87:b0:a5:
         b1:04:7e:1b:b2:26:82:6c:aa:ee:ed:08:d2:05:4a:fc:6b:96:
         c8:88:97:3b:f7:92:c0:59:44:8c:d7:48:82:cb:9b:46:cc:43:
         58:dd:e7:68:4f:3e:9f:75:24:6e:5e:78:2e:0b:2d:f6:78:31:
         2e:c7:01:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:08 2024 by rpki-client on console-fra.rpki-client.org