Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/A7B88034074F11ED8DF56060C4F9AE02.roa
File:                     A7B88034074F11ED8DF56060C4F9AE02.roa (raw, json)
Hash identifier:          5Zg7DqfDaIDj6Qq1ZmzTgTvljSeptKPMxcRYC2bOY3s=
Subject key identifier:   26:09:39:1C:4C:69:4F:C4:A8:E6:8E:D6:45:CB:92:0E:A4:A5:4D:F9
Certificate issuer:       /CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E
Certificate serial:       1404
Authority key identifier: 36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/A7B88034074F11ED8DF56060C4F9AE02.roa
Signing time:             Wed 17 Aug 2022 03:14:23 +0000
ROA not before:           Wed 17 Aug 2022 03:14:23 +0000
ROA not after:            Tue 31 Jan 2023 00:00:00 +0000
asID:                     17639
IP address blocks:        136.158.0.0/17 maxlen: 17
                          136.158.0.0/22 maxlen: 23
                          136.158.4.0/22 maxlen: 23
                          136.158.7.0/24 maxlen: 24
                          136.158.8.0/22 maxlen: 23
                          136.158.8.0/24 maxlen: 24
                          136.158.10.0/24 maxlen: 24
                          136.158.11.0/24 maxlen: 24
                          136.158.12.0/22 maxlen: 23
                          136.158.16.0/22 maxlen: 23
                          136.158.20.0/22 maxlen: 23
                          136.158.24.0/22 maxlen: 23
                          136.158.28.0/22 maxlen: 23
                          136.158.32.0/22 maxlen: 23
                          136.158.36.0/22 maxlen: 23
                          136.158.40.0/22 maxlen: 23
                          136.158.44.0/22 maxlen: 23
                          136.158.44.0/24 maxlen: 24
                          136.158.46.0/24 maxlen: 24
                          136.158.48.0/22 maxlen: 23
                          136.158.52.0/22 maxlen: 23
                          136.158.56.0/22 maxlen: 23
                          136.158.60.0/22 maxlen: 23
                          136.158.64.0/22 maxlen: 23
                          136.158.68.0/22 maxlen: 23
                          136.158.70.0/24 maxlen: 24
                          136.158.71.0/24 maxlen: 24
                          136.158.72.0/22 maxlen: 23
                          136.158.76.0/22 maxlen: 23
                          136.158.80.0/22 maxlen: 23
                          136.158.84.0/22 maxlen: 23
                          136.158.88.0/22 maxlen: 23
                          136.158.92.0/22 maxlen: 23
                          136.158.96.0/22 maxlen: 23
                          136.158.100.0/22 maxlen: 23
                          136.158.104.0/22 maxlen: 23
                          136.158.108.0/22 maxlen: 23
                          136.158.112.0/22 maxlen: 23
                          136.158.116.0/22 maxlen: 23
                          136.158.120.0/22 maxlen: 23
                          136.158.124.0/22 maxlen: 23
                          136.239.128.0/17 maxlen: 22
                          139.135.128.0/17 maxlen: 17
                          139.135.128.0/18 maxlen: 22
                          139.135.192.0/19 maxlen: 22
                          139.135.224.0/19 maxlen: 22
                          143.44.128.0/17 maxlen: 17
                          143.44.128.0/22 maxlen: 22
                          143.44.130.0/23 maxlen: 23
                          143.44.132.0/22 maxlen: 23
                          143.44.136.0/22 maxlen: 23
                          143.44.140.0/22 maxlen: 23
                          143.44.144.0/22 maxlen: 23
                          143.44.148.0/22 maxlen: 23
                          143.44.152.0/22 maxlen: 23
                          143.44.156.0/22 maxlen: 23
                          143.44.160.0/22 maxlen: 23
                          143.44.164.0/22 maxlen: 23
                          143.44.168.0/22 maxlen: 23
                          143.44.172.0/22 maxlen: 23
                          143.44.176.0/22 maxlen: 23
                          143.44.180.0/22 maxlen: 23
                          143.44.184.0/22 maxlen: 23
                          143.44.188.0/22 maxlen: 23
                          143.44.192.0/21 maxlen: 23
                          143.44.200.0/22 maxlen: 23
                          143.44.204.0/22 maxlen: 23
                          143.44.208.0/22 maxlen: 23
                          143.44.212.0/22 maxlen: 23
                          143.44.216.0/22 maxlen: 23
                          143.44.220.0/22 maxlen: 23
                          143.44.224.0/22 maxlen: 23
                          143.44.228.0/22 maxlen: 23
                          143.44.232.0/22 maxlen: 23
                          143.44.236.0/22 maxlen: 23
                          143.44.240.0/22 maxlen: 23
                          143.44.244.0/22 maxlen: 23
                          143.44.248.0/22 maxlen: 23
                          143.44.252.0/22 maxlen: 23
                          152.32.64.0/18 maxlen: 18
                          152.32.64.0/22 maxlen: 22
                          152.32.68.0/22 maxlen: 22
                          152.32.72.0/22 maxlen: 22
                          152.32.76.0/22 maxlen: 22
                          152.32.80.0/22 maxlen: 22
                          152.32.84.0/22 maxlen: 22
                          152.32.88.0/22 maxlen: 22
                          152.32.92.0/22 maxlen: 22
                          152.32.96.0/22 maxlen: 22
                          152.32.96.0/23 maxlen: 23
                          152.32.98.0/23 maxlen: 24
                          152.32.100.0/22 maxlen: 22
                          152.32.100.0/24 maxlen: 24
                          152.32.104.0/22 maxlen: 22
                          152.32.104.0/24 maxlen: 24
                          152.32.105.0/24 maxlen: 24
                          152.32.106.0/24 maxlen: 24
                          152.32.107.0/24 maxlen: 24
                          152.32.108.0/22 maxlen: 22
                          152.32.108.0/23 maxlen: 23
                          152.32.110.0/23 maxlen: 23
                          152.32.112.0/22 maxlen: 22
                          152.32.112.0/24 maxlen: 24
                          152.32.113.0/24 maxlen: 24
                          152.32.115.0/24 maxlen: 24
                          152.32.116.0/22 maxlen: 22
                          152.32.120.0/22 maxlen: 22
                          152.32.124.0/22 maxlen: 22
                          161.49.0.0/17 maxlen: 17
                          161.49.0.0/22 maxlen: 22
                          161.49.0.0/24 maxlen: 24
                          161.49.1.0/24 maxlen: 24
                          161.49.4.0/22 maxlen: 22
                          161.49.8.0/22 maxlen: 22
                          161.49.12.0/22 maxlen: 22
                          161.49.16.0/22 maxlen: 22
                          161.49.20.0/22 maxlen: 22
                          161.49.24.0/22 maxlen: 22
                          161.49.28.0/22 maxlen: 22
                          161.49.32.0/22 maxlen: 22
                          161.49.36.0/22 maxlen: 22
                          161.49.40.0/22 maxlen: 22
                          161.49.44.0/22 maxlen: 22
                          161.49.48.0/22 maxlen: 22
                          161.49.50.0/23 maxlen: 23
                          161.49.50.0/24 maxlen: 24
                          161.49.51.0/24 maxlen: 24
                          161.49.52.0/22 maxlen: 22
                          161.49.56.0/22 maxlen: 22
                          161.49.60.0/22 maxlen: 22
                          161.49.60.0/23 maxlen: 24
                          161.49.62.0/23 maxlen: 24
                          161.49.64.0/22 maxlen: 22
                          161.49.65.0/24 maxlen: 24
                          161.49.66.0/24 maxlen: 24
                          161.49.67.0/24 maxlen: 24
                          161.49.68.0/22 maxlen: 22
                          161.49.72.0/22 maxlen: 22
                          161.49.76.0/22 maxlen: 22
                          161.49.79.0/24 maxlen: 24
                          161.49.80.0/22 maxlen: 22
                          161.49.80.0/24 maxlen: 24
                          161.49.81.0/24 maxlen: 24
                          161.49.82.0/23 maxlen: 23
                          161.49.84.0/22 maxlen: 22
                          161.49.88.0/22 maxlen: 22
                          161.49.92.0/22 maxlen: 22
                          161.49.96.0/22 maxlen: 22
                          161.49.100.0/22 maxlen: 22
                          161.49.104.0/22 maxlen: 22
                          161.49.108.0/22 maxlen: 22
                          161.49.112.0/22 maxlen: 22
                          161.49.112.0/24 maxlen: 24
                          161.49.113.0/24 maxlen: 24
                          161.49.114.0/24 maxlen: 24
                          161.49.115.0/24 maxlen: 24
                          161.49.116.0/22 maxlen: 22
                          161.49.120.0/22 maxlen: 22
                          161.49.124.0/22 maxlen: 22
                          161.49.128.0/19 maxlen: 19
                          161.49.128.0/22 maxlen: 22
                          161.49.128.0/24 maxlen: 24
                          161.49.132.0/22 maxlen: 22
                          161.49.136.0/22 maxlen: 22
                          161.49.140.0/22 maxlen: 22
                          161.49.144.0/22 maxlen: 22
                          161.49.148.0/22 maxlen: 22
                          161.49.148.0/24 maxlen: 24
                          161.49.152.0/22 maxlen: 22
                          161.49.156.0/22 maxlen: 22
                          161.49.159.0/24 maxlen: 24
                          161.49.160.0/20 maxlen: 20
                          161.49.160.0/22 maxlen: 22
                          161.49.164.0/22 maxlen: 22
                          161.49.168.0/22 maxlen: 22
                          161.49.172.0/22 maxlen: 22
                          161.49.176.0/21 maxlen: 22
                          161.49.184.0/22 maxlen: 22
                          161.49.192.0/19 maxlen: 19
                          161.49.192.0/22 maxlen: 22
                          161.49.196.0/22 maxlen: 22
                          161.49.196.0/24 maxlen: 24
                          161.49.197.0/24 maxlen: 24
                          161.49.200.0/22 maxlen: 22
                          161.49.204.0/22 maxlen: 22
                          161.49.208.0/22 maxlen: 22
                          161.49.211.0/24 maxlen: 24
                          161.49.212.0/22 maxlen: 22
                          161.49.212.0/24 maxlen: 24
                          161.49.213.0/24 maxlen: 24
                          161.49.214.0/24 maxlen: 24
                          161.49.215.0/24 maxlen: 24
                          161.49.216.0/22 maxlen: 22
                          161.49.216.0/24 maxlen: 24
                          161.49.217.0/24 maxlen: 24
                          161.49.218.0/24 maxlen: 24
                          161.49.219.0/24 maxlen: 24
                          161.49.220.0/22 maxlen: 22
                          161.49.224.0/21 maxlen: 22
                          204.145.0.0/24 maxlen: 24
                          204.145.2.0/23 maxlen: 23
                          204.145.4.0/22 maxlen: 22
                          206.201.0.0/20 maxlen: 20
                          206.201.0.0/22 maxlen: 24
                          206.201.4.0/22 maxlen: 24
                          206.201.8.0/22 maxlen: 24
                          206.201.12.0/23 maxlen: 24
                          206.201.14.0/23 maxlen: 24
                          208.71.224.0/21 maxlen: 22
                          208.71.225.0/24 maxlen: 24
                          208.71.226.0/24 maxlen: 24
                          208.71.227.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5124 (0x1404)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E
        Validity
            Not Before: Aug 17 03:14:23 2022 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=62fc5d0e-6440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cc:b8:1f:1f:5f:4a:0c:bd:b7:9e:41:1f:81:
                    35:97:a8:42:2d:34:3c:2b:98:30:08:1f:eb:cf:73:
                    28:69:07:32:5f:27:3e:2e:a0:40:8c:85:67:90:40:
                    5f:05:18:46:8e:17:0d:bd:af:df:c6:ef:19:32:46:
                    9a:10:e1:c9:dc:a7:86:f2:81:c2:d1:1c:99:7f:35:
                    2e:6c:52:e6:01:b8:62:bb:ed:27:f1:46:0c:ac:f2:
                    36:f3:b6:b1:35:e7:40:3e:bc:45:67:2d:e1:bd:aa:
                    46:51:d5:be:7f:c7:d1:bc:4c:43:30:de:17:b3:f7:
                    69:25:5f:85:d3:60:aa:e3:ca:3d:6f:ed:0d:5b:fa:
                    3b:9f:8e:93:b8:cd:08:68:ea:fe:3a:5d:fb:67:5d:
                    07:e5:dd:e1:44:e7:fe:79:8e:61:e2:82:e0:22:62:
                    22:c7:43:a3:ac:55:09:05:9f:e8:2d:43:89:07:8b:
                    92:50:a8:15:61:26:f2:35:7e:d7:a3:2b:fd:dd:8a:
                    be:63:65:40:5e:b9:b0:e7:23:c4:98:10:2a:bc:fa:
                    75:53:eb:31:39:47:14:d1:fc:46:ed:c7:57:3d:6a:
                    27:66:ce:85:04:2b:53:76:fe:11:f2:4c:6b:4a:8b:
                    9e:cd:65:93:15:a7:37:e8:bf:82:76:c5:10:38:3e:
                    94:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:09:39:1C:4C:69:4F:C4:A8:E6:8E:D6:45:CB:92:0E:A4:A5:4D:F9
            X509v3 Authority Key Identifier:
                keyid:36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/A7B88034074F11ED8DF56060C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.158.0.0/17
                  136.239.128.0/17
                  139.135.128.0/17
                  143.44.128.0/17
                  152.32.64.0/18
                  161.49.0.0-161.49.187.255
                  161.49.192.0-161.49.231.255
                  204.145.0.0/24
                  204.145.2.0-204.145.7.255
                  206.201.0.0/20
                  208.71.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4f:34:51:8d:09:ea:2e:25:0e:35:36:16:7f:e9:69:ba:58:28:
         3e:a7:6a:58:19:f6:fe:61:c0:e8:2a:59:01:9b:6e:3e:db:86:
         7d:cf:2a:1c:f3:42:db:f8:c5:ac:56:a1:24:c4:f2:3e:13:4e:
         c5:e6:cd:83:2c:e4:45:32:71:3d:ed:88:d0:bd:5f:3a:73:35:
         fc:98:55:39:df:d6:11:53:01:46:bd:4b:a9:99:54:39:45:69:
         4b:e8:d2:6d:b3:fd:31:0e:90:36:e3:c1:bd:d8:7d:42:b9:bd:
         d9:12:6a:a2:26:d1:98:2d:5c:8b:c0:53:7b:8b:48:25:b3:b8:
         5a:8c:c1:4c:d8:c0:c1:e2:e7:3f:c2:90:5b:f6:8e:95:a8:09:
         c0:a9:2a:1b:e1:ad:37:f8:4d:f0:7e:fb:52:3e:4a:04:5b:2d:
         76:e0:82:a4:6f:07:67:06:e2:ba:7a:8c:5d:cb:0e:ac:51:d3:
         07:d2:f4:e8:c9:7c:db:ea:b3:c0:28:29:4c:5a:f8:1f:eb:f7:
         ec:26:18:a3:ea:27:d9:7d:f0:c5:ec:c0:b1:95:ef:49:72:41:
         45:ff:3c:9f:84:ce:8d:ee:17:46:95:35:57:fa:2c:17:c2:27:
         8e:e3:26:4e:83:06:1b:c4:e2:fd:19:0b:19:61:71:2a:22:ab:
         cf:05:34:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:20 2024 by rpki-client on console-ams.rpki-client.org