Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180FC2/CD13CFE4870111EAB24E095DC4F9AE02/05D578BE92D211EBAE186A77C4F9AE02.roa
File:                     05D578BE92D211EBAE186A77C4F9AE02.roa (raw, json)
Hash identifier:          yVocmsaLGkGtvWiWSpoBxIMt8hndxyxSjhBWqn+WNu4=
Subject key identifier:   7E:54:D2:26:C5:FF:9F:2D:00:5A:EF:6F:30:75:AD:CE:C1:1D:BA:9C
Certificate issuer:       /CN=A9180FC2/serialNumber=062E3716DCC626C4924FF5347EF73928B80D73C4
Certificate serial:       04AD
Authority key identifier: 06:2E:37:16:DC:C6:26:C4:92:4F:F5:34:7E:F7:39:28:B8:0D:73:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bi43FtzGJsSST_U0fvc5KLgNc8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180FC2/CD13CFE4870111EAB24E095DC4F9AE02/05D578BE92D211EBAE186A77C4F9AE02.roa
Signing time:             Fri 27 Aug 2021 10:39:21 +0000
ROA not before:           Fri 27 Aug 2021 10:39:21 +0000
ROA not after:            Sun 01 May 2022 00:00:00 +0000
asID:                     49981
IP address blocks:        103.147.152.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1197 (0x4ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180FC2/serialNumber=062E3716DCC626C4924FF5347EF73928B80D73C4
        Validity
            Not Before: Aug 27 10:39:21 2021 GMT
            Not After : May  1 00:00:00 2022 GMT
        Subject: CN=6128c0d9-daf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:51:30:bb:c1:66:04:66:cb:1e:31:19:73:a9:
                    05:c5:87:e9:30:48:10:65:d9:ff:e5:59:af:59:81:
                    c8:bc:14:cd:79:41:ab:d6:78:23:33:79:17:cf:d9:
                    12:34:96:96:59:c4:58:c4:99:c4:13:4a:72:c1:83:
                    21:df:be:76:36:11:ef:a9:cb:8a:48:b3:43:d5:12:
                    35:ce:b7:9a:1e:9b:5d:93:60:4b:a4:f8:e9:60:e8:
                    37:0c:be:90:c2:f3:58:eb:99:0e:b2:2a:d5:88:6a:
                    7c:57:5a:02:09:d4:be:c2:82:09:96:49:13:2e:11:
                    b8:1d:2d:d4:be:34:20:97:79:38:da:91:3d:02:71:
                    75:c3:d3:23:a6:ed:12:ee:31:90:41:86:49:29:b1:
                    3d:df:71:cf:8f:4f:a5:6d:84:e9:69:ab:79:45:e3:
                    55:ca:b9:b7:e3:93:c8:f8:3c:74:3e:09:b6:d7:82:
                    9a:9a:86:7e:2b:1f:f8:6d:42:08:d3:c6:34:c6:0a:
                    2e:ae:57:1f:fe:b7:8a:fd:d8:83:b0:a9:82:dc:c6:
                    8e:8e:5c:cd:08:44:bd:46:bc:e2:27:d9:1b:ee:f5:
                    3d:9c:b7:0c:a6:38:5d:ae:c7:7b:69:75:07:e4:7f:
                    dc:e9:84:de:38:19:ec:3f:8b:01:9c:c6:c1:6a:c1:
                    cd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:54:D2:26:C5:FF:9F:2D:00:5A:EF:6F:30:75:AD:CE:C1:1D:BA:9C
            X509v3 Authority Key Identifier:
                keyid:06:2E:37:16:DC:C6:26:C4:92:4F:F5:34:7E:F7:39:28:B8:0D:73:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180FC2/CD13CFE4870111EAB24E095DC4F9AE02/Bi43FtzGJsSST_U0fvc5KLgNc8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bi43FtzGJsSST_U0fvc5KLgNc8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180FC2/CD13CFE4870111EAB24E095DC4F9AE02/05D578BE92D211EBAE186A77C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:ba:af:1e:f5:6a:45:86:2f:28:c6:14:ba:9c:1b:6f:e5:72:
         a8:51:80:56:b8:d1:e8:24:67:8f:48:3f:5f:7f:f2:25:41:1e:
         fb:c1:e9:d9:32:b8:9b:77:a0:7d:c4:3a:7c:29:1f:06:0e:77:
         e7:99:ee:bc:c7:1c:4d:72:ae:e9:03:34:02:be:e8:16:76:12:
         6f:a0:4c:ec:79:75:9d:47:cf:bc:d8:0e:dc:5c:f0:06:07:aa:
         9d:d1:4f:5d:0a:4e:ff:e7:fb:59:93:6f:17:f7:40:d6:b7:04:
         5d:07:a7:93:8a:c4:b6:18:67:63:ba:46:20:8f:2c:2f:ea:f0:
         45:eb:43:37:b5:b8:68:f1:4b:d8:51:fc:55:57:ef:c6:09:eb:
         fb:ea:8d:a2:7c:5e:43:70:f0:99:93:4a:28:ec:47:98:d1:33:
         63:f2:48:74:92:5e:dc:a6:7e:53:b3:24:97:24:ba:21:82:94:
         f6:42:0c:5a:6e:23:c4:ac:e9:51:9b:98:c0:44:63:1f:22:f1:
         78:09:0a:35:4b:8d:15:db:31:9e:60:26:e5:2c:a2:d5:af:96:
         34:ca:33:67:16:e6:19:f8:b1:33:5d:24:af:54:64:5e:e8:3d:
         20:fa:73:58:b4:a5:b2:04:0e:a7:25:60:d1:f5:63:81:27:7c:
         9f:0c:2d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-ams.rpki-client.org