Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/7DD6837AE18311EC9F76C50BC4F9AE02.roa
File:                     7DD6837AE18311EC9F76C50BC4F9AE02.roa (raw, json)
Hash identifier:          gJ7cIkz+0A5hd4nJFlsAFkubfUzbsvSz7kHd0AxugHM=
Subject key identifier:   5D:48:10:B3:2E:25:B7:EC:E5:9B:D7:BA:44:B8:7F:23:4E:5B:CA:43
Certificate issuer:       /CN=A917A608/serialNumber=211C550B53EB20475185BABCDE7E70DF674448B7
Certificate serial:       09AD
Authority key identifier: 21:1C:55:0B:53:EB:20:47:51:85:BA:BC:DE:7E:70:DF:67:44:48:B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/7DD6837AE18311EC9F76C50BC4F9AE02.roa
Signing time:             Mon 20 Jun 2022 19:58:47 +0000
ROA not before:           Mon 20 Jun 2022 19:58:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     139809
IP address blocks:        103.137.163.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2477 (0x9ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A608/serialNumber=211C550B53EB20475185BABCDE7E70DF674448B7
        Validity
            Not Before: Jun 20 19:58:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=62b0d177-8b10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:62:ca:a4:1b:99:d7:51:ec:93:f8:21:90:07:
                    8c:15:4e:ca:1a:5a:18:d3:00:5f:6a:a0:6f:eb:d3:
                    e8:f0:d1:b3:a8:ba:bf:69:0f:9e:19:42:b5:9d:d2:
                    02:ef:8c:ef:e6:12:30:43:48:63:47:06:ea:a0:60:
                    ed:a6:1e:21:ef:30:c6:4e:be:cd:88:c0:c7:a8:8c:
                    f2:a0:4e:6f:35:66:07:03:b3:b6:4a:c8:2b:16:d0:
                    f4:07:8e:6f:7b:a9:b4:f6:c0:c8:ba:1c:2a:89:80:
                    8c:44:b9:2a:41:60:37:e3:cf:03:05:2c:cf:9a:37:
                    c3:77:bb:65:0b:7f:70:41:f7:97:03:95:fd:e2:41:
                    7e:07:e3:eb:8d:76:3c:a9:50:f2:5c:6b:98:39:a0:
                    55:c1:a2:1e:14:bd:2a:71:f0:74:f1:1d:7b:2c:f2:
                    38:ad:32:ab:b2:3c:9a:ba:10:a1:79:04:f4:f7:ea:
                    98:98:75:48:6c:73:03:7b:93:9e:87:6f:56:85:4d:
                    24:84:c7:c0:62:b9:52:14:23:42:88:0b:77:50:5e:
                    c4:e8:82:4a:2e:d6:05:43:4a:c6:8a:85:45:89:d1:
                    25:d4:e6:e8:ef:3f:38:6f:e3:6e:09:74:d3:f8:ae:
                    40:88:7c:a9:4b:4c:85:ec:86:0d:df:3f:7c:06:41:
                    5c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:48:10:B3:2E:25:B7:EC:E5:9B:D7:BA:44:B8:7F:23:4E:5B:CA:43
            X509v3 Authority Key Identifier:
                keyid:21:1C:55:0B:53:EB:20:47:51:85:BA:BC:DE:7E:70:DF:67:44:48:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/7DD6837AE18311EC9F76C50BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:4b:cc:b6:3c:06:1d:85:11:0c:e6:61:5a:aa:9e:f0:22:f9:
         07:c8:e6:11:58:e1:f1:70:f8:0c:16:0e:77:8a:71:92:1c:0e:
         3b:2e:00:33:4a:85:7f:99:ac:5f:e1:1e:a2:8c:7a:9b:a9:4c:
         e4:f3:ba:b2:c2:bd:a8:1c:48:cd:da:55:a7:d8:c5:8f:06:37:
         8b:c2:fb:51:c1:a0:2d:6d:1f:df:b1:f3:c5:c7:4e:56:8d:3f:
         e5:fd:55:87:33:67:26:cd:a6:0c:d4:5b:26:a7:91:05:9f:20:
         f6:12:07:75:4f:c0:80:f1:d2:da:8f:f6:ab:00:83:ea:3a:ae:
         82:eb:9c:36:41:30:20:56:a3:0a:ed:49:62:de:e2:4a:ba:b7:
         5f:c8:40:bb:87:b8:9e:6a:3d:e4:ef:96:a9:5e:14:3e:bb:93:
         4a:99:33:69:79:5d:34:41:ad:a4:b7:65:38:a6:44:22:b7:dc:
         9d:b2:a6:3a:03:fa:d3:97:4c:2a:0a:db:9b:9d:51:34:9d:fe:
         c3:f1:c1:b4:ec:54:2a:8d:9d:05:66:dc:48:a0:24:56:31:0e:
         b6:20:76:78:65:56:01:8f:3f:81:52:58:1e:b7:fb:40:97:ea:
         e2:6c:cc:af:3b:b1:82:f3:b7:6d:3e:f7:0c:f7:79:21:2b:66:
         4c:f2:72:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:47 2023 by rpki-client on console-fra.rpki-client.org