Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0ECD2F745C3011EDB5652650C4F9AE02.roa
File:                     0ECD2F745C3011EDB5652650C4F9AE02.roa (raw, json)
Hash identifier:          +ucK2DuE6NEO7Ho078yOOj3ExqhhnzYGcOb1Ap7CbiU=
Subject key identifier:   29:51:24:1F:D9:13:0F:28:B2:1D:B7:20:15:44:99:13:2A:77:15:15
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       5FB6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0ECD2F745C3011EDB5652650C4F9AE02.roa
Signing time:             Fri 04 Nov 2022 11:01:40 +0000
ROA not before:           Fri 04 Nov 2022 11:01:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     18002
IP address blocks:        14.102.0.0/24 maxlen: 24
                          14.102.1.0/24 maxlen: 24
                          14.102.2.0/24 maxlen: 24
                          14.102.3.0/24 maxlen: 24
                          14.102.4.0/24 maxlen: 24
                          14.102.5.0/24 maxlen: 24
                          14.102.6.0/24 maxlen: 24
                          14.102.7.0/24 maxlen: 24
                          14.102.8.0/24 maxlen: 24
                          14.102.9.0/24 maxlen: 24
                          14.102.10.0/24 maxlen: 24
                          14.102.11.0/24 maxlen: 24
                          14.102.12.0/24 maxlen: 24
                          14.102.13.0/24 maxlen: 24
                          14.102.14.0/24 maxlen: 24
                          14.102.15.0/24 maxlen: 24
                          14.102.16.0/24 maxlen: 24
                          14.102.22.0/24 maxlen: 24
                          14.102.23.0/24 maxlen: 24
                          14.102.24.0/24 maxlen: 24
                          14.102.25.0/24 maxlen: 24
                          14.102.26.0/24 maxlen: 24
                          14.102.27.0/24 maxlen: 24
                          14.102.28.0/24 maxlen: 24
                          14.102.29.0/24 maxlen: 24
                          14.102.30.0/24 maxlen: 24
                          14.102.31.0/24 maxlen: 24
                          14.102.32.0/24 maxlen: 24
                          14.102.33.0/24 maxlen: 24
                          14.102.34.0/24 maxlen: 24
                          14.102.35.0/24 maxlen: 24
                          14.102.36.0/24 maxlen: 24
                          14.102.37.0/24 maxlen: 24
                          14.102.38.0/24 maxlen: 24
                          14.102.39.0/24 maxlen: 24
                          14.102.40.0/24 maxlen: 24
                          14.102.41.0/24 maxlen: 24
                          14.102.42.0/24 maxlen: 24
                          14.102.43.0/24 maxlen: 24
                          14.102.44.0/24 maxlen: 24
                          14.102.45.0/24 maxlen: 24
                          14.102.46.0/24 maxlen: 24
                          14.102.47.0/24 maxlen: 24
                          14.102.48.0/24 maxlen: 24
                          14.102.49.0/24 maxlen: 24
                          14.102.50.0/24 maxlen: 24
                          14.102.52.0/24 maxlen: 24
                          14.102.53.0/24 maxlen: 24
                          14.102.54.0/24 maxlen: 24
                          14.102.55.0/24 maxlen: 24
                          14.102.56.0/24 maxlen: 24
                          14.102.57.0/24 maxlen: 24
                          14.102.58.0/24 maxlen: 24
                          14.102.59.0/24 maxlen: 24
                          14.102.60.0/22 maxlen: 22
                          14.102.60.0/24 maxlen: 24
                          14.102.62.0/24 maxlen: 24
                          14.102.63.0/24 maxlen: 24
                          14.102.64.0/24 maxlen: 24
                          14.102.65.0/24 maxlen: 24
                          14.102.66.0/24 maxlen: 24
                          14.102.67.0/24 maxlen: 24
                          14.102.68.0/24 maxlen: 24
                          14.102.69.0/24 maxlen: 24
                          14.102.70.0/24 maxlen: 24
                          14.102.71.0/24 maxlen: 24
                          14.102.72.0/24 maxlen: 24
                          14.102.73.0/24 maxlen: 24
                          14.102.74.0/24 maxlen: 24
                          14.102.75.0/24 maxlen: 24
                          14.102.76.0/24 maxlen: 24
                          14.102.77.0/24 maxlen: 24
                          14.102.78.0/24 maxlen: 24
                          14.102.79.0/24 maxlen: 24
                          14.102.80.0/24 maxlen: 24
                          14.102.81.0/24 maxlen: 24
                          14.102.82.0/24 maxlen: 24
                          14.102.83.0/24 maxlen: 24
                          14.102.84.0/24 maxlen: 24
                          14.102.85.0/24 maxlen: 24
                          14.102.86.0/24 maxlen: 24
                          14.102.87.0/24 maxlen: 24
                          14.102.88.0/24 maxlen: 24
                          14.102.89.0/24 maxlen: 24
                          14.102.90.0/24 maxlen: 24
                          14.102.91.0/24 maxlen: 24
                          14.102.92.0/24 maxlen: 24
                          14.102.93.0/24 maxlen: 24
                          14.102.95.0/24 maxlen: 24
                          14.102.96.0/24 maxlen: 24
                          14.102.97.0/24 maxlen: 24
                          14.102.98.0/24 maxlen: 24
                          14.102.99.0/24 maxlen: 24
                          14.102.100.0/24 maxlen: 24
                          14.102.101.0/24 maxlen: 24
                          14.102.103.0/24 maxlen: 24
                          14.102.104.0/24 maxlen: 24
                          14.102.105.0/24 maxlen: 24
                          14.102.106.0/23 maxlen: 24
                          14.102.108.0/24 maxlen: 24
                          14.102.109.0/24 maxlen: 24
                          14.102.110.0/24 maxlen: 24
                          14.102.111.0/24 maxlen: 24
                          14.102.112.0/24 maxlen: 24
                          14.102.113.0/24 maxlen: 24
                          14.102.114.0/24 maxlen: 24
                          14.102.115.0/24 maxlen: 24
                          14.102.116.0/24 maxlen: 24
                          14.102.117.0/24 maxlen: 24
                          14.102.118.0/24 maxlen: 24
                          14.102.119.0/24 maxlen: 24
                          14.102.120.0/24 maxlen: 24
                          14.102.121.0/24 maxlen: 24
                          14.102.122.0/24 maxlen: 24
                          14.102.123.0/24 maxlen: 24
                          14.102.124.0/24 maxlen: 24
                          14.102.125.0/24 maxlen: 24
                          14.102.126.0/24 maxlen: 24
                          14.102.127.0/24 maxlen: 24
                          43.245.136.0/22 maxlen: 24
                          43.251.212.0/22 maxlen: 24
                          61.14.228.0/22 maxlen: 24
                          103.5.200.0/22 maxlen: 24
                          103.87.100.0/22 maxlen: 24
                          103.122.84.0/24 maxlen: 24
                          103.160.24.0/24 maxlen: 24
                          103.163.126.0/23 maxlen: 24
                          103.175.72.0/24 maxlen: 24
                          103.175.73.0/24 maxlen: 24
                          103.176.8.0/23 maxlen: 24
                          110.172.128.0/18 maxlen: 23
                          110.172.128.0/21 maxlen: 24
                          110.172.136.0/24 maxlen: 24
                          110.172.138.0/23 maxlen: 24
                          110.172.140.0/22 maxlen: 24
                          110.172.144.0/20 maxlen: 24
                          110.172.160.0/23 maxlen: 24
                          110.172.162.0/24 maxlen: 24
                          110.172.164.0/22 maxlen: 24
                          110.172.168.0/21 maxlen: 24
                          110.172.176.0/20 maxlen: 24
                          111.235.64.0/22 maxlen: 24
                          114.69.224.0/19 maxlen: 23
                          114.69.224.0/23 maxlen: 24
                          114.69.226.0/24 maxlen: 24
                          114.69.228.0/22 maxlen: 24
                          114.69.232.0/24 maxlen: 24
                          114.69.234.0/23 maxlen: 24
                          114.69.236.0/22 maxlen: 24
                          114.69.240.0/20 maxlen: 24
                          118.91.176.0/20 maxlen: 22
                          118.91.176.0/21 maxlen: 24
                          118.91.185.0/24 maxlen: 24
                          118.91.186.0/23 maxlen: 24
                          118.91.188.0/22 maxlen: 24
                          150.107.192.0/22 maxlen: 24
                          202.89.64.0/20 maxlen: 20
                          202.89.64.0/24 maxlen: 24
                          202.89.65.0/24 maxlen: 24
                          202.89.66.0/24 maxlen: 24
                          202.89.67.0/24 maxlen: 24
                          202.89.68.0/24 maxlen: 24
                          202.89.69.0/24 maxlen: 24
                          202.89.70.0/24 maxlen: 24
                          202.89.71.0/24 maxlen: 24
                          202.89.72.0/24 maxlen: 24
                          202.89.73.0/24 maxlen: 24
                          202.89.74.0/24 maxlen: 24
                          202.89.75.0/24 maxlen: 24
                          202.89.76.0/24 maxlen: 24
                          202.89.77.0/24 maxlen: 24
                          202.89.78.0/24 maxlen: 24
                          202.89.79.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24502 (0x5fb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Nov  4 11:01:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6364f113-ca4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:76:54:24:05:49:0a:cf:d9:50:d5:a7:d8:f7:
                    59:62:1f:cd:5b:7f:60:39:6e:2c:2f:d7:03:85:3d:
                    5d:03:66:b6:62:58:1b:03:7e:54:d1:db:36:76:e5:
                    32:e1:42:21:91:c8:5b:1f:77:97:d4:8d:01:13:ed:
                    e5:82:11:59:5e:c9:7c:a8:be:0a:57:ff:41:97:0a:
                    1c:29:65:b5:52:c4:54:5c:cf:3f:ca:6c:30:e4:8b:
                    fe:12:cb:29:c0:1e:6e:0e:b2:90:e7:49:12:e9:26:
                    58:80:a0:10:8e:4f:43:30:3d:08:b9:ce:8f:32:c6:
                    67:d6:07:cc:ea:59:21:de:3c:ca:06:49:13:9a:68:
                    f0:e2:56:e9:10:3a:77:ff:c1:c9:55:73:ec:9e:24:
                    02:a1:5c:7d:c1:30:e2:43:64:21:21:16:80:c3:32:
                    95:92:a4:06:f8:35:2f:e3:61:06:91:3e:2b:94:99:
                    cc:7f:9f:1c:71:c2:f2:25:c8:d3:6f:10:0e:7a:27:
                    98:b5:be:4c:8d:f0:56:33:05:b2:93:61:e2:b0:97:
                    b3:6b:fe:ea:9e:94:66:6b:84:28:40:45:c6:ad:56:
                    56:9b:4c:54:87:09:99:ef:5b:f6:e6:1f:d5:d8:5f:
                    e3:68:24:7d:e5:a8:26:be:92:89:39:c4:67:28:83:
                    4c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:51:24:1F:D9:13:0F:28:B2:1D:B7:20:15:44:99:13:2A:77:15:15
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0ECD2F745C3011EDB5652650C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.102.0.0-14.102.16.255
                  14.102.22.0-14.102.50.255
                  14.102.52.0-14.102.93.255
                  14.102.95.0-14.102.101.255
                  14.102.103.0-14.102.127.255
                  43.245.136.0/22
                  43.251.212.0/22
                  61.14.228.0/22
                  103.5.200.0/22
                  103.87.100.0/22
                  103.122.84.0/24
                  103.160.24.0/24
                  103.163.126.0/23
                  103.175.72.0/23
                  103.176.8.0/23
                  110.172.128.0/18
                  111.235.64.0/22
                  114.69.224.0/19
                  118.91.176.0/20
                  150.107.192.0/22
                  202.89.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         49:2d:b0:61:55:e5:1c:57:4d:65:fa:20:c7:90:88:a9:91:39:
         83:fe:95:b4:f8:a6:cb:96:3d:d2:3f:e6:69:c9:fa:1e:17:4e:
         02:e7:8f:c3:fa:be:9c:32:05:a1:17:05:3b:7e:f4:2f:e9:51:
         8b:ad:c7:4d:fe:f3:ed:b3:aa:1d:a3:4f:e7:b9:a6:a2:e7:0c:
         40:39:11:c7:37:c4:e9:b1:4e:4b:6f:9d:6d:7d:db:31:62:22:
         ad:d0:b9:68:e0:7c:5a:b5:61:01:78:46:19:28:82:92:ab:11:
         9f:da:fa:ff:a9:2d:bd:1b:80:48:c7:69:65:26:b0:41:73:75:
         7e:ea:75:6e:0c:51:a2:c9:91:64:6e:f3:7a:67:2d:29:3f:d5:
         8d:a4:65:c7:21:c3:15:58:46:94:7f:96:ed:74:e1:57:45:f3:
         e4:26:b4:d9:0a:25:d3:4c:67:39:60:ad:24:f5:10:df:d4:14:
         03:73:b6:73:02:6f:92:d6:1b:7e:53:84:c0:5e:9b:d7:a4:15:
         48:eb:3c:20:66:fc:3a:c0:45:a3:6e:96:13:20:05:f7:2e:ea:
         e4:f0:e5:7b:48:b2:f3:08:6a:03:73:31:5f:c5:6b:8b:f0:a7:
         d4:9e:e9:5a:9d:8f:8f:0e:c8:38:6d:d9:98:1b:b2:f3:16:22:
         f8:0a:58:ae
-----BEGIN CERTIFICATE-----
MIIGFTCCBP2gAwIBAgICX7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjIxMTA0MTEwMTQwWhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzY0ZjExMy1jYTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6XZUJAVJCs/ZUNWn2PdZYh/NW39gOW4sL9cDhT1dA2a2YlgbA35U0ds2duUy
4UIhkchbH3eX1I0BE+3lghFZXsl8qL4KV/9BlwocKWW1UsRUXM8/ymww5Iv+Essp
wB5uDrKQ50kS6SZYgKAQjk9DMD0Iuc6PMsZn1gfM6lkh3jzKBkkTmmjw4lbpEDp3
/8HJVXPsniQCoVx9wTDiQ2QhIRaAwzKVkqQG+DUv42EGkT4rlJnMf58cccLyJcjT
bxAOeieYtb5MjfBWMwWyk2HisJeza/7qnpRma4QoQEXGrVZWm0xUhwmZ71v25h/V
2F/jaCR95agmvpKJOcRnKINMiwIDAQABo4IDOTCCAzUwHQYDVR0OBBYEFClRJB/Z
Ew8osh23IBVEmRMqdxUVMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMEVDRDJGNzQ1
QzMwMTFFREI1NjUyNjUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgcIGCCsGAQUFBwEHAQH/
BIGyMIGvMIGsBAIAATCBpTALAwMBDmYDBAAOZhAwDAMEAQ5mFgMEAA5mMjAMAwQC
DmY0AwQBDmZcMAwDBAAOZl8DBAEOZmQwDAMEAA5mZwMEBw5mAAMEAiv1iAMEAiv7
1AMEAj0O5AMEAmcFyAMEAmdXZAMEAGd6VAMEAGegGAMEAWejfgMEAWevSAMEAWew
CAMEBm6sgAMEAm/rQAMEBXJF4AMEBHZbsAMEApZrwAMEBMpZQDANBgkqhkiG9w0B
AQsFAAOCAQEASS2wYVXlHFdNZfogx5CIqZE5g/6VtPimy5Y90j/macn6HhdOAueP
w/q+nDIFoRcFO370L+lRi63HTf7z7bOqHaNP57mmoucMQDkRxzfE6bFOS2+dbX3b
MWIirdC5aOB8WrVhAXhGGSiCkqsRn9r6/6ktvRuASMdpZSawQXN1fup1bgxRosmR
ZG7zemctKT/VjaRlxyHDFVhGlH+W7XThV0Xz5Ca02Qol00xnOWCtJPUQ39QUA3O2
cwJvktYbflOEwF6b16QVSOs8IGb8OsBFo26WEyAF9y7q5PDle0iy8whqA3MxX8Vr
i/Cn1J7pWp2Pjw7IOG3ZmBuy8xYi+ApYrg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:51 2023 by rpki-client on console-fra.rpki-client.org