Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/0CEC327C614011EC9102A00EC4F9AE02.roa
File:                     0CEC327C614011EC9102A00EC4F9AE02.roa (raw, json)
Hash identifier:          WECO5KEL1D4fEK2UseEExklWChddmVOprNgtptkrTeQ=
Subject key identifier:   88:ED:F3:82:B5:1F:AE:B7:6B:1B:C9:3B:5B:BA:35:DF:20:1A:61:18
Certificate issuer:       /CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E
Certificate serial:       1218
Authority key identifier: 36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/0CEC327C614011EC9102A00EC4F9AE02.roa
Signing time:             Mon 20 Dec 2021 02:53:47 +0000
ROA not before:           Mon 20 Dec 2021 02:53:47 +0000
ROA not after:            Tue 31 Jan 2023 00:00:00 +0000
asID:                     17639
IP address blocks:        136.158.0.0/17 maxlen: 17
                          136.158.0.0/22 maxlen: 23
                          136.158.4.0/22 maxlen: 23
                          136.158.7.0/24 maxlen: 24
                          136.158.8.0/22 maxlen: 23
                          136.158.8.0/24 maxlen: 24
                          136.158.10.0/24 maxlen: 24
                          136.158.11.0/24 maxlen: 24
                          136.158.12.0/22 maxlen: 23
                          136.158.16.0/22 maxlen: 23
                          136.158.20.0/22 maxlen: 23
                          136.158.24.0/22 maxlen: 23
                          136.158.28.0/22 maxlen: 23
                          136.158.32.0/22 maxlen: 23
                          136.158.36.0/22 maxlen: 23
                          136.158.40.0/22 maxlen: 23
                          136.158.44.0/22 maxlen: 23
                          136.158.44.0/24 maxlen: 24
                          136.158.46.0/24 maxlen: 24
                          136.158.48.0/22 maxlen: 23
                          136.158.52.0/22 maxlen: 23
                          136.158.56.0/22 maxlen: 23
                          136.158.60.0/22 maxlen: 23
                          136.158.64.0/22 maxlen: 23
                          136.158.68.0/22 maxlen: 23
                          136.158.70.0/24 maxlen: 24
                          136.158.71.0/24 maxlen: 24
                          136.158.72.0/22 maxlen: 23
                          136.158.76.0/22 maxlen: 23
                          136.158.80.0/22 maxlen: 23
                          136.158.84.0/22 maxlen: 23
                          136.158.88.0/22 maxlen: 23
                          136.158.92.0/22 maxlen: 23
                          136.158.96.0/22 maxlen: 23
                          136.158.100.0/22 maxlen: 23
                          136.158.104.0/22 maxlen: 23
                          136.158.108.0/22 maxlen: 23
                          136.158.112.0/22 maxlen: 23
                          136.158.116.0/22 maxlen: 23
                          136.158.120.0/22 maxlen: 23
                          136.158.124.0/22 maxlen: 23
                          136.239.128.0/17 maxlen: 17
                          139.135.128.0/22 maxlen: 22
                          143.44.128.0/17 maxlen: 17
                          143.44.128.0/22 maxlen: 22
                          143.44.130.0/23 maxlen: 23
                          143.44.132.0/22 maxlen: 23
                          143.44.136.0/22 maxlen: 23
                          143.44.140.0/22 maxlen: 23
                          143.44.144.0/22 maxlen: 23
                          143.44.148.0/22 maxlen: 23
                          143.44.152.0/22 maxlen: 23
                          143.44.156.0/22 maxlen: 23
                          143.44.160.0/22 maxlen: 23
                          143.44.164.0/22 maxlen: 23
                          143.44.168.0/22 maxlen: 23
                          143.44.172.0/22 maxlen: 23
                          143.44.176.0/22 maxlen: 23
                          143.44.180.0/22 maxlen: 23
                          143.44.184.0/22 maxlen: 23
                          143.44.188.0/22 maxlen: 23
                          143.44.192.0/21 maxlen: 23
                          143.44.200.0/22 maxlen: 23
                          143.44.204.0/22 maxlen: 23
                          143.44.208.0/22 maxlen: 23
                          143.44.212.0/22 maxlen: 23
                          143.44.216.0/22 maxlen: 23
                          143.44.220.0/22 maxlen: 23
                          143.44.224.0/22 maxlen: 23
                          143.44.228.0/22 maxlen: 23
                          143.44.232.0/22 maxlen: 23
                          143.44.236.0/22 maxlen: 23
                          143.44.240.0/22 maxlen: 23
                          143.44.244.0/22 maxlen: 23
                          143.44.248.0/22 maxlen: 23
                          143.44.252.0/22 maxlen: 23
                          152.32.64.0/18 maxlen: 18
                          152.32.64.0/22 maxlen: 22
                          152.32.68.0/22 maxlen: 22
                          152.32.72.0/22 maxlen: 22
                          152.32.76.0/22 maxlen: 22
                          152.32.80.0/22 maxlen: 22
                          152.32.84.0/22 maxlen: 22
                          152.32.88.0/22 maxlen: 22
                          152.32.92.0/22 maxlen: 22
                          152.32.96.0/22 maxlen: 22
                          152.32.96.0/23 maxlen: 23
                          152.32.98.0/23 maxlen: 24
                          152.32.100.0/22 maxlen: 22
                          152.32.100.0/24 maxlen: 24
                          152.32.104.0/22 maxlen: 22
                          152.32.104.0/24 maxlen: 24
                          152.32.105.0/24 maxlen: 24
                          152.32.106.0/24 maxlen: 24
                          152.32.107.0/24 maxlen: 24
                          152.32.108.0/22 maxlen: 22
                          152.32.108.0/23 maxlen: 23
                          152.32.110.0/23 maxlen: 23
                          152.32.112.0/22 maxlen: 22
                          152.32.112.0/24 maxlen: 24
                          152.32.113.0/24 maxlen: 24
                          152.32.115.0/24 maxlen: 24
                          152.32.116.0/22 maxlen: 22
                          152.32.120.0/22 maxlen: 22
                          152.32.124.0/22 maxlen: 22
                          161.49.0.0/17 maxlen: 17
                          161.49.0.0/22 maxlen: 22
                          161.49.0.0/24 maxlen: 24
                          161.49.4.0/22 maxlen: 22
                          161.49.8.0/22 maxlen: 22
                          161.49.12.0/22 maxlen: 22
                          161.49.16.0/22 maxlen: 22
                          161.49.20.0/22 maxlen: 22
                          161.49.24.0/22 maxlen: 22
                          161.49.28.0/22 maxlen: 22
                          161.49.32.0/22 maxlen: 22
                          161.49.36.0/22 maxlen: 22
                          161.49.40.0/22 maxlen: 22
                          161.49.44.0/22 maxlen: 22
                          161.49.48.0/22 maxlen: 22
                          161.49.50.0/23 maxlen: 23
                          161.49.50.0/24 maxlen: 24
                          161.49.51.0/24 maxlen: 24
                          161.49.52.0/22 maxlen: 22
                          161.49.56.0/22 maxlen: 22
                          161.49.60.0/22 maxlen: 22
                          161.49.60.0/23 maxlen: 24
                          161.49.62.0/23 maxlen: 24
                          161.49.64.0/22 maxlen: 22
                          161.49.65.0/24 maxlen: 24
                          161.49.66.0/24 maxlen: 24
                          161.49.67.0/24 maxlen: 24
                          161.49.68.0/22 maxlen: 22
                          161.49.72.0/22 maxlen: 22
                          161.49.76.0/22 maxlen: 22
                          161.49.79.0/24 maxlen: 24
                          161.49.80.0/22 maxlen: 22
                          161.49.80.0/24 maxlen: 24
                          161.49.81.0/24 maxlen: 24
                          161.49.82.0/23 maxlen: 23
                          161.49.84.0/22 maxlen: 22
                          161.49.88.0/22 maxlen: 22
                          161.49.92.0/22 maxlen: 22
                          161.49.96.0/22 maxlen: 22
                          161.49.100.0/22 maxlen: 22
                          161.49.104.0/22 maxlen: 22
                          161.49.108.0/22 maxlen: 22
                          161.49.112.0/22 maxlen: 22
                          161.49.112.0/24 maxlen: 24
                          161.49.113.0/24 maxlen: 24
                          161.49.114.0/24 maxlen: 24
                          161.49.115.0/24 maxlen: 24
                          161.49.116.0/22 maxlen: 22
                          161.49.120.0/22 maxlen: 22
                          161.49.124.0/22 maxlen: 22
                          161.49.128.0/19 maxlen: 19
                          161.49.128.0/22 maxlen: 22
                          161.49.128.0/24 maxlen: 24
                          161.49.132.0/22 maxlen: 22
                          161.49.136.0/22 maxlen: 22
                          161.49.140.0/22 maxlen: 22
                          161.49.144.0/22 maxlen: 22
                          161.49.148.0/22 maxlen: 22
                          161.49.148.0/24 maxlen: 24
                          161.49.152.0/22 maxlen: 22
                          161.49.156.0/22 maxlen: 22
                          161.49.159.0/24 maxlen: 24
                          161.49.160.0/20 maxlen: 20
                          161.49.160.0/22 maxlen: 22
                          161.49.164.0/22 maxlen: 22
                          161.49.168.0/22 maxlen: 22
                          161.49.172.0/22 maxlen: 22
                          161.49.176.0/21 maxlen: 22
                          161.49.184.0/22 maxlen: 22
                          161.49.192.0/19 maxlen: 19
                          161.49.192.0/22 maxlen: 22
                          161.49.196.0/22 maxlen: 22
                          161.49.196.0/24 maxlen: 24
                          161.49.197.0/24 maxlen: 24
                          161.49.200.0/22 maxlen: 22
                          161.49.204.0/22 maxlen: 22
                          161.49.208.0/22 maxlen: 22
                          161.49.211.0/24 maxlen: 24
                          161.49.212.0/22 maxlen: 22
                          161.49.212.0/24 maxlen: 24
                          161.49.213.0/24 maxlen: 24
                          161.49.214.0/24 maxlen: 24
                          161.49.215.0/24 maxlen: 24
                          161.49.216.0/22 maxlen: 22
                          161.49.216.0/24 maxlen: 24
                          161.49.217.0/24 maxlen: 24
                          161.49.218.0/24 maxlen: 24
                          161.49.219.0/24 maxlen: 24
                          161.49.220.0/22 maxlen: 22
                          161.49.224.0/21 maxlen: 22
                          204.145.0.0/24 maxlen: 24
                          204.145.2.0/23 maxlen: 23
                          204.145.4.0/22 maxlen: 22
                          206.201.0.0/20 maxlen: 20
                          206.201.0.0/22 maxlen: 24
                          206.201.4.0/22 maxlen: 24
                          206.201.8.0/22 maxlen: 24
                          206.201.12.0/23 maxlen: 24
                          206.201.14.0/23 maxlen: 24
                          208.71.224.0/21 maxlen: 22
                          208.71.225.0/24 maxlen: 24
                          208.71.226.0/24 maxlen: 24
                          208.71.227.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4632 (0x1218)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E
        Validity
            Not Before: Dec 20 02:53:47 2021 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=61bff03a-ae9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:a3:15:1c:d9:e8:2f:b1:db:3f:86:0a:36:fd:
                    75:2f:ba:fe:03:ad:3a:c7:b9:25:72:c4:2f:d4:3e:
                    95:14:bf:e5:5e:d1:a3:0c:ea:7c:6f:55:ab:95:a8:
                    63:57:8b:06:9c:6b:f6:0c:a7:b8:61:65:89:8d:e5:
                    3b:7c:a5:71:ea:06:4b:b8:fb:6e:20:48:a9:bd:c6:
                    ef:79:03:36:c4:e3:d3:80:20:d9:3b:bc:22:1a:a2:
                    45:c4:be:25:30:24:d5:7b:c7:23:99:d0:0f:df:75:
                    e5:04:61:77:f5:48:68:30:2a:fb:06:4b:38:d6:fc:
                    7b:c1:32:f3:a7:09:65:82:86:fc:6b:36:b8:da:6b:
                    71:54:fc:62:b8:d2:03:00:da:51:be:1b:ce:38:14:
                    55:c5:93:e6:8d:e7:a9:3e:a5:09:cc:7f:9c:9f:ff:
                    fb:18:8b:c5:79:57:b5:33:f9:e5:a1:77:f3:c0:ee:
                    ab:4a:04:ba:46:01:1e:a7:ed:9a:72:5f:d0:29:e8:
                    ed:bd:ca:ba:02:6c:c3:d4:6a:44:d3:69:05:1d:c7:
                    df:ff:e7:35:d3:90:59:f8:88:9c:12:29:f4:64:e6:
                    e8:23:a0:fb:62:4f:2f:37:55:3f:9a:4c:f1:a8:0a:
                    31:f2:cc:1d:08:23:48:67:9d:36:1b:88:7a:f6:5f:
                    07:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:ED:F3:82:B5:1F:AE:B7:6B:1B:C9:3B:5B:BA:35:DF:20:1A:61:18
            X509v3 Authority Key Identifier:
                keyid:36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/0CEC327C614011EC9102A00EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.158.0.0/17
                  136.239.128.0/17
                  139.135.128.0/22
                  143.44.128.0/17
                  152.32.64.0/18
                  161.49.0.0-161.49.187.255
                  161.49.192.0-161.49.231.255
                  204.145.0.0/24
                  204.145.2.0-204.145.7.255
                  206.201.0.0/20
                  208.71.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c3:e6:32:1f:43:03:9a:e6:bc:f0:8a:fd:f4:24:43:9b:3d:0f:
         2a:c8:c8:f7:38:e9:34:96:97:60:29:29:4a:f5:8c:55:57:b0:
         ac:84:96:de:04:77:9d:7f:f7:82:a2:df:d6:5e:31:01:34:3d:
         63:7f:fd:1d:b3:8c:a3:ee:a0:25:3c:09:db:3f:76:62:6d:92:
         69:34:e1:28:c5:8a:2b:33:6f:af:1c:74:83:c1:5f:37:17:74:
         04:ed:33:57:89:f5:42:0e:f1:f9:f9:4b:35:ab:48:b7:b7:cd:
         c9:ec:98:fb:22:60:bb:0a:c9:e3:65:bf:bc:c4:4f:4a:b0:af:
         c6:53:5a:63:78:56:bc:2b:eb:b0:8c:41:96:2a:d0:96:98:f0:
         17:47:9d:a9:20:8e:13:10:5d:9e:c2:91:dd:5a:f6:72:8e:b0:
         c4:5f:48:a7:6f:1e:67:36:c3:7c:28:cc:52:82:fe:fd:c6:96:
         8c:15:f3:2e:8e:ad:a5:56:e0:98:7e:79:4b:1e:16:92:99:9d:
         e3:ff:9f:4e:cf:c8:ad:ec:49:90:da:d2:1c:03:7a:3c:2b:13:
         17:1d:a0:74:f0:d6:59:e7:5f:c9:9d:40:96:a0:b8:d7:5e:2e:
         6a:4e:53:c8:f6:a6:d2:e9:e7:25:21:f7:29:0c:43:46:59:7a:
         61:32:9b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:10 2024 by rpki-client on console-fra.rpki-client.org