Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/D4D9C2C6946811EC905A943CC4F9AE02.roa
File:                     D4D9C2C6946811EC905A943CC4F9AE02.roa (raw, json)
Hash identifier:          TP/RRDHGb7FvalYqeHR0ilzlb2L/IcxaLUkFHExiiRk=
Subject key identifier:   DE:74:B7:97:3A:91:3D:B7:A1:F9:15:8A:B8:10:FF:1C:59:88:A9:D2
Certificate issuer:       /CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E
Certificate serial:       13C2
Authority key identifier: 36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/D4D9C2C6946811EC905A943CC4F9AE02.roa
Signing time:             Mon 18 Jul 2022 08:06:10 +0000
ROA not before:           Mon 18 Jul 2022 08:06:10 +0000
ROA not after:            Tue 31 Jan 2023 00:00:00 +0000
asID:                     17639
IP address blocks:        136.158.0.0/17 maxlen: 17
                          136.158.0.0/22 maxlen: 23
                          136.158.4.0/22 maxlen: 23
                          136.158.7.0/24 maxlen: 24
                          136.158.8.0/22 maxlen: 23
                          136.158.8.0/24 maxlen: 24
                          136.158.10.0/24 maxlen: 24
                          136.158.11.0/24 maxlen: 24
                          136.158.12.0/22 maxlen: 23
                          136.158.16.0/22 maxlen: 23
                          136.158.20.0/22 maxlen: 23
                          136.158.24.0/22 maxlen: 23
                          136.158.28.0/22 maxlen: 23
                          136.158.32.0/22 maxlen: 23
                          136.158.36.0/22 maxlen: 23
                          136.158.40.0/22 maxlen: 23
                          136.158.44.0/22 maxlen: 23
                          136.158.44.0/24 maxlen: 24
                          136.158.46.0/24 maxlen: 24
                          136.158.48.0/22 maxlen: 23
                          136.158.52.0/22 maxlen: 23
                          136.158.56.0/22 maxlen: 23
                          136.158.60.0/22 maxlen: 23
                          136.158.64.0/22 maxlen: 23
                          136.158.68.0/22 maxlen: 23
                          136.158.70.0/24 maxlen: 24
                          136.158.71.0/24 maxlen: 24
                          136.158.72.0/22 maxlen: 23
                          136.158.76.0/22 maxlen: 23
                          136.158.80.0/22 maxlen: 23
                          136.158.84.0/22 maxlen: 23
                          136.158.88.0/22 maxlen: 23
                          136.158.92.0/22 maxlen: 23
                          136.158.96.0/22 maxlen: 23
                          136.158.100.0/22 maxlen: 23
                          136.158.104.0/22 maxlen: 23
                          136.158.108.0/22 maxlen: 23
                          136.158.112.0/22 maxlen: 23
                          136.158.116.0/22 maxlen: 23
                          136.158.120.0/22 maxlen: 23
                          136.158.124.0/22 maxlen: 23
                          136.239.128.0/17 maxlen: 22
                          139.135.128.0/17 maxlen: 17
                          139.135.128.0/22 maxlen: 22
                          143.44.128.0/17 maxlen: 17
                          143.44.128.0/22 maxlen: 22
                          143.44.130.0/23 maxlen: 23
                          143.44.132.0/22 maxlen: 23
                          143.44.136.0/22 maxlen: 23
                          143.44.140.0/22 maxlen: 23
                          143.44.144.0/22 maxlen: 23
                          143.44.148.0/22 maxlen: 23
                          143.44.152.0/22 maxlen: 23
                          143.44.156.0/22 maxlen: 23
                          143.44.160.0/22 maxlen: 23
                          143.44.164.0/22 maxlen: 23
                          143.44.168.0/22 maxlen: 23
                          143.44.172.0/22 maxlen: 23
                          143.44.176.0/22 maxlen: 23
                          143.44.180.0/22 maxlen: 23
                          143.44.184.0/22 maxlen: 23
                          143.44.188.0/22 maxlen: 23
                          143.44.192.0/21 maxlen: 23
                          143.44.200.0/22 maxlen: 23
                          143.44.204.0/22 maxlen: 23
                          143.44.208.0/22 maxlen: 23
                          143.44.212.0/22 maxlen: 23
                          143.44.216.0/22 maxlen: 23
                          143.44.220.0/22 maxlen: 23
                          143.44.224.0/22 maxlen: 23
                          143.44.228.0/22 maxlen: 23
                          143.44.232.0/22 maxlen: 23
                          143.44.236.0/22 maxlen: 23
                          143.44.240.0/22 maxlen: 23
                          143.44.244.0/22 maxlen: 23
                          143.44.248.0/22 maxlen: 23
                          143.44.252.0/22 maxlen: 23
                          152.32.64.0/18 maxlen: 18
                          152.32.64.0/22 maxlen: 22
                          152.32.68.0/22 maxlen: 22
                          152.32.72.0/22 maxlen: 22
                          152.32.76.0/22 maxlen: 22
                          152.32.80.0/22 maxlen: 22
                          152.32.84.0/22 maxlen: 22
                          152.32.88.0/22 maxlen: 22
                          152.32.92.0/22 maxlen: 22
                          152.32.96.0/22 maxlen: 22
                          152.32.96.0/23 maxlen: 23
                          152.32.98.0/23 maxlen: 24
                          152.32.100.0/22 maxlen: 22
                          152.32.100.0/24 maxlen: 24
                          152.32.104.0/22 maxlen: 22
                          152.32.104.0/24 maxlen: 24
                          152.32.105.0/24 maxlen: 24
                          152.32.106.0/24 maxlen: 24
                          152.32.107.0/24 maxlen: 24
                          152.32.108.0/22 maxlen: 22
                          152.32.108.0/23 maxlen: 23
                          152.32.110.0/23 maxlen: 23
                          152.32.112.0/22 maxlen: 22
                          152.32.112.0/24 maxlen: 24
                          152.32.113.0/24 maxlen: 24
                          152.32.115.0/24 maxlen: 24
                          152.32.116.0/22 maxlen: 22
                          152.32.120.0/22 maxlen: 22
                          152.32.124.0/22 maxlen: 22
                          161.49.0.0/17 maxlen: 17
                          161.49.0.0/22 maxlen: 22
                          161.49.0.0/24 maxlen: 24
                          161.49.4.0/22 maxlen: 22
                          161.49.8.0/22 maxlen: 22
                          161.49.12.0/22 maxlen: 22
                          161.49.16.0/22 maxlen: 22
                          161.49.20.0/22 maxlen: 22
                          161.49.24.0/22 maxlen: 22
                          161.49.28.0/22 maxlen: 22
                          161.49.32.0/22 maxlen: 22
                          161.49.36.0/22 maxlen: 22
                          161.49.40.0/22 maxlen: 22
                          161.49.44.0/22 maxlen: 22
                          161.49.48.0/22 maxlen: 22
                          161.49.50.0/23 maxlen: 23
                          161.49.50.0/24 maxlen: 24
                          161.49.51.0/24 maxlen: 24
                          161.49.52.0/22 maxlen: 22
                          161.49.56.0/22 maxlen: 22
                          161.49.60.0/22 maxlen: 22
                          161.49.60.0/23 maxlen: 24
                          161.49.62.0/23 maxlen: 24
                          161.49.64.0/22 maxlen: 22
                          161.49.65.0/24 maxlen: 24
                          161.49.66.0/24 maxlen: 24
                          161.49.67.0/24 maxlen: 24
                          161.49.68.0/22 maxlen: 22
                          161.49.72.0/22 maxlen: 22
                          161.49.76.0/22 maxlen: 22
                          161.49.79.0/24 maxlen: 24
                          161.49.80.0/22 maxlen: 22
                          161.49.80.0/24 maxlen: 24
                          161.49.81.0/24 maxlen: 24
                          161.49.82.0/23 maxlen: 23
                          161.49.84.0/22 maxlen: 22
                          161.49.88.0/22 maxlen: 22
                          161.49.92.0/22 maxlen: 22
                          161.49.96.0/22 maxlen: 22
                          161.49.100.0/22 maxlen: 22
                          161.49.104.0/22 maxlen: 22
                          161.49.108.0/22 maxlen: 22
                          161.49.112.0/22 maxlen: 22
                          161.49.112.0/24 maxlen: 24
                          161.49.113.0/24 maxlen: 24
                          161.49.114.0/24 maxlen: 24
                          161.49.115.0/24 maxlen: 24
                          161.49.116.0/22 maxlen: 22
                          161.49.120.0/22 maxlen: 22
                          161.49.124.0/22 maxlen: 22
                          161.49.128.0/19 maxlen: 19
                          161.49.128.0/22 maxlen: 22
                          161.49.128.0/24 maxlen: 24
                          161.49.132.0/22 maxlen: 22
                          161.49.136.0/22 maxlen: 22
                          161.49.140.0/22 maxlen: 22
                          161.49.144.0/22 maxlen: 22
                          161.49.148.0/22 maxlen: 22
                          161.49.148.0/24 maxlen: 24
                          161.49.152.0/22 maxlen: 22
                          161.49.156.0/22 maxlen: 22
                          161.49.159.0/24 maxlen: 24
                          161.49.160.0/20 maxlen: 20
                          161.49.160.0/22 maxlen: 22
                          161.49.164.0/22 maxlen: 22
                          161.49.168.0/22 maxlen: 22
                          161.49.172.0/22 maxlen: 22
                          161.49.176.0/21 maxlen: 22
                          161.49.184.0/22 maxlen: 22
                          161.49.192.0/19 maxlen: 19
                          161.49.192.0/22 maxlen: 22
                          161.49.196.0/22 maxlen: 22
                          161.49.196.0/24 maxlen: 24
                          161.49.197.0/24 maxlen: 24
                          161.49.200.0/22 maxlen: 22
                          161.49.204.0/22 maxlen: 22
                          161.49.208.0/22 maxlen: 22
                          161.49.211.0/24 maxlen: 24
                          161.49.212.0/22 maxlen: 22
                          161.49.212.0/24 maxlen: 24
                          161.49.213.0/24 maxlen: 24
                          161.49.214.0/24 maxlen: 24
                          161.49.215.0/24 maxlen: 24
                          161.49.216.0/22 maxlen: 22
                          161.49.216.0/24 maxlen: 24
                          161.49.217.0/24 maxlen: 24
                          161.49.218.0/24 maxlen: 24
                          161.49.219.0/24 maxlen: 24
                          161.49.220.0/22 maxlen: 22
                          161.49.224.0/21 maxlen: 22
                          204.145.0.0/24 maxlen: 24
                          204.145.2.0/23 maxlen: 23
                          204.145.4.0/22 maxlen: 22
                          206.201.0.0/20 maxlen: 20
                          206.201.0.0/22 maxlen: 24
                          206.201.4.0/22 maxlen: 24
                          206.201.8.0/22 maxlen: 24
                          206.201.12.0/23 maxlen: 24
                          206.201.14.0/23 maxlen: 24
                          208.71.224.0/21 maxlen: 22
                          208.71.225.0/24 maxlen: 24
                          208.71.226.0/24 maxlen: 24
                          208.71.227.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5058 (0x13c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E
        Validity
            Not Before: Jul 18 08:06:10 2022 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=62d51471-52a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a0:ef:4b:f8:90:bd:26:54:37:81:9d:80:87:
                    c7:53:7d:d2:98:7b:fc:af:e3:49:62:75:3e:40:08:
                    75:2d:48:9f:34:b0:d2:dc:78:2c:99:e0:7e:62:df:
                    86:24:e3:9e:04:40:12:f9:ca:75:0e:5b:63:2c:89:
                    7c:d1:f5:81:df:cb:26:06:62:a2:a8:43:0f:7c:06:
                    32:9b:0e:f5:43:65:46:b6:0e:0e:7c:ee:86:1c:1f:
                    2c:e7:6e:9d:c7:03:45:62:f8:60:a3:8f:80:d4:a6:
                    da:92:c5:1f:19:18:41:f4:cc:58:15:81:6e:96:a6:
                    5d:22:57:4e:14:df:cd:8a:38:bb:b9:9a:25:e9:37:
                    34:fc:7b:8e:07:9e:1a:46:f8:7d:93:86:d6:32:71:
                    49:ee:23:be:53:24:66:9c:45:dc:57:fd:e6:1d:d4:
                    f8:e6:e6:73:65:f1:8c:34:25:4d:de:0e:b9:9a:41:
                    23:8e:20:06:4f:24:ca:da:96:be:92:a1:88:86:ce:
                    cf:87:38:51:f3:58:f0:97:9a:64:66:0e:e9:50:2d:
                    4b:7a:32:e0:71:98:4b:43:5d:1f:48:fe:72:12:75:
                    47:37:93:24:2e:81:3d:d8:cb:fc:8b:31:62:15:2a:
                    11:44:5a:c0:8e:60:f4:01:36:a9:f4:69:1c:e8:8d:
                    0f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:74:B7:97:3A:91:3D:B7:A1:F9:15:8A:B8:10:FF:1C:59:88:A9:D2
            X509v3 Authority Key Identifier:
                keyid:36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/D4D9C2C6946811EC905A943CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.158.0.0/17
                  136.239.128.0/17
                  139.135.128.0/17
                  143.44.128.0/17
                  152.32.64.0/18
                  161.49.0.0-161.49.187.255
                  161.49.192.0-161.49.231.255
                  204.145.0.0/24
                  204.145.2.0-204.145.7.255
                  206.201.0.0/20
                  208.71.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5b:0b:a3:52:6d:b5:57:81:cf:e3:51:64:ae:a5:09:0a:ef:49:
         9d:ac:6a:31:31:23:95:fa:8c:23:59:e0:8d:89:60:4e:f5:dc:
         62:35:ff:ce:f0:b7:79:7b:64:37:c2:e5:34:0c:bd:7f:fa:a3:
         9f:dd:ba:65:48:20:f8:a5:e1:b5:31:14:4e:16:52:6e:38:64:
         f9:89:49:1f:7e:b3:3e:74:8b:b7:31:67:00:ba:3e:79:da:f1:
         72:0b:46:f4:b4:c7:6c:36:f3:8f:3c:33:32:6d:a1:c8:61:c4:
         52:c1:05:03:d8:46:c5:f6:31:25:f0:eb:44:e6:6e:e4:aa:53:
         9f:73:8b:13:37:37:0b:fa:c4:1a:06:89:f3:36:77:04:7a:cb:
         30:1c:5b:84:63:c4:dc:89:3a:68:6b:81:09:3d:82:d9:d8:fc:
         55:c6:67:81:46:de:83:93:31:8c:a3:d9:3c:50:9f:4e:7d:a8:
         cc:03:35:dc:83:a7:64:ea:e4:df:5a:a3:d6:9d:ba:8d:8e:2f:
         15:8a:ae:48:ff:bf:8b:b6:26:fa:51:9c:77:79:d5:1d:f6:06:
         59:0c:5f:a0:fe:15:60:f3:0f:de:72:d0:6e:2a:fe:30:86:cc:
         5c:ec:b4:7a:b2:e6:87:ce:c5:c7:e2:67:42:4c:9a:88:b0:a7:
         dd:f8:05:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:45 2023 by rpki-client on console-fra.rpki-client.org