Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/8A955812B14911EC85F9D71AC4F9AE02.roa
File:                     8A955812B14911EC85F9D71AC4F9AE02.roa (raw, json)
Hash identifier:          NlctwOn7nWW4w0IwPifzgXBtlyiBLyymZhjm0cgpiaw=
Subject key identifier:   C5:FD:CD:49:00:E9:B5:19:56:CE:E7:82:60:A0:56:76:07:DD:37:7A
Certificate issuer:       /CN=A918AA78/serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
Certificate serial:       191A
Authority key identifier: 09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/8A955812B14911EC85F9D71AC4F9AE02.roa
Signing time:             Thu 30 Jun 2022 22:05:02 +0000
ROA not before:           Thu 30 Jun 2022 22:05:02 +0000
ROA not after:            Mon 01 May 2023 00:00:00 +0000
asID:                     0
IP address blocks:        203.144.49.0/24 maxlen: 24
                          203.144.51.0/24 maxlen: 24
                          203.144.52.0/24 maxlen: 24
                          203.144.54.0/23 maxlen: 23
                          203.144.56.0/23 maxlen: 23
                          203.144.62.0/23 maxlen: 23
                          2402:79c0::/47 maxlen: 47
                          2402:79c0:4::/46 maxlen: 46
                          2402:79c0:8::/45 maxlen: 45
                          2402:79c0:10::/44 maxlen: 44
                          2402:79c0:20::/43 maxlen: 43
                          2402:79c0:40::/42 maxlen: 42
                          2402:79c0:80::/41 maxlen: 41
                          2402:79c0:10b::/48 maxlen: 48
                          2402:79c0:10c::/46 maxlen: 46
                          2402:79c0:110::/44 maxlen: 44
                          2402:79c0:120::/43 maxlen: 43
                          2402:79c0:140::/42 maxlen: 42
                          2402:79c0:180::/41 maxlen: 41
                          2402:79c0:200::/39 maxlen: 39
                          2402:79c0:400::/38 maxlen: 38
                          2402:79c0:800::/37 maxlen: 37
                          2402:79c0:1000::/40 maxlen: 40
                          2402:79c0:1100::/43 maxlen: 43
                          2402:79c0:1120::/46 maxlen: 46
                          2402:79c0:1124::/47 maxlen: 47
                          2402:79c0:1128::/45 maxlen: 45
                          2402:79c0:1130::/44 maxlen: 44
                          2402:79c0:1140::/46 maxlen: 46
                          2402:79c0:1144::/48 maxlen: 48
                          2402:79c0:1146::/47 maxlen: 47
                          2402:79c0:1148::/48 maxlen: 48
                          2402:79c0:114a::/47 maxlen: 47
                          2402:79c0:114c::/46 maxlen: 46
                          2402:79c0:1150::/46 maxlen: 46
                          2402:79c0:1158::/45 maxlen: 45
                          2402:79c0:1160::/44 maxlen: 44
                          2402:79c0:1170::/45 maxlen: 45
                          2402:79c0:1178::/48 maxlen: 48
                          2402:79c0:1179::/48 maxlen: 48
                          2402:79c0:117a::/47 maxlen: 47
                          2402:79c0:117c::/46 maxlen: 46
                          2402:79c0:1180::/41 maxlen: 41
                          2402:79c0:1200::/39 maxlen: 39
                          2402:79c0:1400::/38 maxlen: 38
                          2402:79c0:1800::/37 maxlen: 37
                          2402:79c0:2000::/35 maxlen: 35
                          2402:79c0:4000::/34 maxlen: 34
                          2402:79c0:8000::/34 maxlen: 34
                          2402:79c0:c000::/35 maxlen: 35
                          2402:79c0:e000::/36 maxlen: 36
                          2402:79c0:f000::/45 maxlen: 45
                          2402:79c0:f00c::/46 maxlen: 46
                          2402:79c0:f010::/44 maxlen: 44
                          2402:79c0:f020::/43 maxlen: 43
                          2402:79c0:f040::/42 maxlen: 42
                          2402:79c0:f080::/42 maxlen: 42
                          2402:79c0:f0c0::/43 maxlen: 43
                          2402:79c0:f0e0::/44 maxlen: 44
                          2402:79c0:f0f0::/45 maxlen: 45
                          2402:79c0:f0f8::/48 maxlen: 48
                          2402:79c0:f0fa::/47 maxlen: 47
                          2402:79c0:f0fc::/46 maxlen: 46
                          2402:79c0:f100::/40 maxlen: 40
                          2402:79c0:f200::/39 maxlen: 39
                          2402:79c0:f400::/38 maxlen: 38
                          2402:79c0:f800::/37 maxlen: 37

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6426 (0x191a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AA78/serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
        Validity
            Not Before: Jun 30 22:05:02 2022 GMT
            Not After : May  1 00:00:00 2023 GMT
        Subject: CN=62be1e0e-3c1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:af:ad:f3:80:fd:84:32:2e:f8:05:e8:30:ab:
                    2c:af:60:29:d1:28:43:c4:95:f1:ee:83:8f:64:53:
                    17:62:08:b8:c7:4a:1c:25:42:8c:cf:af:85:de:98:
                    ad:0a:4d:3d:6c:c3:90:c7:1d:ab:e4:e8:7f:08:ba:
                    4c:6b:2b:ca:d1:a4:68:01:88:ee:6c:cc:7b:7f:15:
                    0b:74:40:f7:84:61:7a:ad:83:33:6a:7f:ba:0b:21:
                    d6:eb:c3:05:a3:f2:ef:d3:56:a0:63:29:7d:99:3b:
                    8c:a2:67:85:84:d3:34:65:7d:95:da:e9:87:4f:4b:
                    58:ca:ea:87:b9:12:1b:ed:c7:70:68:ee:0d:cd:37:
                    21:f4:b5:ec:e2:2c:f5:c5:08:62:ca:a2:a1:28:ae:
                    04:10:1a:6e:1f:df:b9:a1:8c:5f:50:ac:82:07:f3:
                    85:fb:93:2d:88:bd:bf:93:84:8f:9f:d6:47:a4:b4:
                    ae:f2:22:cb:4a:d4:0c:e5:95:65:1e:30:c6:5a:a4:
                    f2:8c:f2:2b:05:45:62:e0:59:27:1a:99:fb:b1:ec:
                    d9:95:23:73:c4:6f:1e:4a:a1:be:fb:85:9d:bd:e3:
                    0f:e3:a9:c0:ff:42:bd:56:2e:c7:b1:e9:92:55:62:
                    8e:1b:75:81:82:47:98:a5:46:a0:5a:e3:36:e0:d2:
                    c0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:FD:CD:49:00:E9:B5:19:56:CE:E7:82:60:A0:56:76:07:DD:37:7A
            X509v3 Authority Key Identifier:
                keyid:09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/8A955812B14911EC85F9D71AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.144.49.0/24
                  203.144.51.0-203.144.52.255
                  203.144.54.0-203.144.57.255
                  203.144.62.0/23
                IPv6:
                  2402:79c0::/47
                  2402:79c0:4::-2402:79c0:ff:ffff:ffff:ffff:ffff:ffff
                  2402:79c0:10b::-2402:79c0:1125:ffff:ffff:ffff:ffff:ffff
                  2402:79c0:1128::-2402:79c0:1144:ffff:ffff:ffff:ffff:ffff
                  2402:79c0:1146::-2402:79c0:1148:ffff:ffff:ffff:ffff:ffff
                  2402:79c0:114a::-2402:79c0:1153:ffff:ffff:ffff:ffff:ffff
                  2402:79c0:1158::-2402:79c0:f007:ffff:ffff:ffff:ffff:ffff
                  2402:79c0:f00c::-2402:79c0:f0f8:ffff:ffff:ffff:ffff:ffff
                  2402:79c0:f0fa::-2402:79c0:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         d9:57:13:a8:90:07:5b:96:78:7a:d1:d3:c6:a1:07:38:a8:1a:
         04:4f:d0:21:8c:62:0b:06:0c:b7:4a:cd:e5:41:0a:6b:7a:b0:
         48:ff:2a:0c:16:03:5e:91:c8:db:ab:90:27:de:6f:a0:55:b2:
         44:8d:b7:45:73:f6:78:32:0e:9a:94:43:a7:9c:f8:29:5b:c9:
         04:18:d6:fc:dd:01:2d:2a:16:a8:56:5c:20:67:e2:35:a8:93:
         7b:9d:d7:a0:bc:b3:0e:f5:37:4d:0e:ac:bf:e0:f3:f3:f7:a2:
         27:b6:1e:0f:fb:2f:6f:76:bc:0d:e2:93:8d:e0:2c:d1:9d:29:
         9a:f8:b1:56:12:5a:86:d6:25:92:97:af:cd:a1:78:84:25:0f:
         b8:65:2d:16:53:82:ed:b9:c6:69:84:38:a5:f3:1a:17:21:13:
         92:50:63:54:8b:6c:8a:e5:17:e0:5a:20:b5:c7:f2:3e:10:92:
         25:b7:ba:82:e8:83:49:86:be:a2:f0:96:20:be:68:f3:5f:92:
         59:1d:29:51:8b:18:1f:a6:d4:ed:d1:17:24:32:91:e1:e8:86:
         71:f2:20:8d:04:9b:1f:79:5e:d8:f9:fc:28:0d:9c:c3:db:64:
         2f:e9:73:dd:77:d8:8d:8d:59:ed:e7:dd:0b:53:64:ba:b6:bc:
         1a:93:ae:1f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgICGRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEFBNzgxMTAvBgNVBAUTKDA5Q0ZGRTQ2N0YzQjA5QzNEMDZGMjQ5MTlDRkFDN0Uw
MDNFNEJCNzUwHhcNMjIwNjMwMjIwNTAyWhcNMjMwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmJlMWUwZS0zYzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA66+t84D9hDIu+AXoMKssr2Ap0ShDxJXx7oOPZFMXYgi4x0ocJUKMz6+F3pit
Ck09bMOQxx2r5Oh/CLpMayvK0aRoAYjubMx7fxULdED3hGF6rYMzan+6CyHW68MF
o/Lv01agYyl9mTuMomeFhNM0ZX2V2umHT0tYyuqHuRIb7cdwaO4NzTch9LXs4iz1
xQhiyqKhKK4EEBpuH9+5oYxfUKyCB/OF+5MtiL2/k4SPn9ZHpLSu8iLLStQM5ZVl
HjDGWqTyjPIrBUVi4FknGpn7sezZlSNzxG8eSqG++4WdveMP46nA/0K9Vi7HsemS
VWKOG3WBgkeYpUagWuM24NLAfQIDAQABo4IDajCCA2YwHQYDVR0OBBYEFMX9zUkA
6bUZVs7ngmCgVnYH3Td6MB8GA1UdIwQYMBaAFAnP/kZ/OwnD0G8kkZz6x+AD5Lt1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUE3OC82OEQzMzQ5MEZE
NjQxMUU2QTEwOTU0ODNDNEY5QUUwMi9DY18tUm44N0NjUFFieVNSblBySDRBUGt1
M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NjXy1Sbjg3Q2NQUWJ5U1JuUHJINEFQa3UzVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEFBNzgvNjhEMzM0OTBGRDY0MTFFNkExMDk1NDgzQzRGOUFFMDIvOEE5NTU4MTJC
MTQ5MTFFQzg1RjlENzFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgfMGCCsGAQUFBwEHAQH/
BIHjMIHgMC4EAgABMCgDBADLkDEwDAMEAMuQMwMEAMuQNDAMAwQBy5A2AwQBy5A4
AwQBy5A+MIGtBAIAAjCBpgMHASQCecAAADARAwcCJAJ5wAAEAwYAJAJ5wAAwEgMH
ACQCecABCwMHASQCecARJDASAwcDJAJ5wBEoAwcAJAJ5wBFEMBIDBwEkAnnAEUYD
BwAkAnnAEUgwEgMHASQCecARSgMHAiQCecARUDASAwcDJAJ5wBFYAwcDJAJ5wPAA
MBIDBwIkAnnA8AwDBwAkAnnA8PgwEAMHASQCecDw+gMFACQCecAwDQYJKoZIhvcN
AQELBQADggEBANlXE6iQB1uWeHrR08ahBzioGgRP0CGMYgsGDLdKzeVBCmt6sEj/
KgwWA16RyNurkCfeb6BVskSNt0Vz9ngyDpqUQ6ec+ClbyQQY1vzdAS0qFqhWXCBn
4jWok3ud16C8sw71N00OrL/g8/P3oie2Hg/7L292vA3ik43gLNGdKZr4sVYSWobW
JZKXr82heIQlD7hlLRZTgu25xmmEOKXzGhchE5JQY1SLbIrlF+BaILXH8j4QkiW3
uoLog0mGvqLwliC+aPNfklkdKVGLGB+m1O3RFyQykeHohnHyII0Emx95Xtj5/CgN
nMPbZC/pc9132I2NWe3n3QtTZLq2vBqTrh8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:25 2024 by rpki-client on console-ams.rpki-client.org