Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9AE51F8E61B811EDA304BA0BC4F9AE02.roa
File:                     9AE51F8E61B811EDA304BA0BC4F9AE02.roa (raw, json)
Hash identifier:          Dg2Drthb0BsHBH4j5ePKjjwLvwvxNm0O18r+uhKozGE=
Subject key identifier:   04:AB:96:40:B4:C4:F5:83:4A:6D:E5:6D:A5:23:9A:BB:16:E3:6C:A4
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       61C7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9AE51F8E61B811EDA304BA0BC4F9AE02.roa
Signing time:             Thu 22 Dec 2022 11:51:39 +0000
ROA not before:           Thu 22 Dec 2022 11:51:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     18002
IP address blocks:        14.102.0.0/24 maxlen: 24
                          14.102.1.0/24 maxlen: 24
                          14.102.2.0/24 maxlen: 24
                          14.102.3.0/24 maxlen: 24
                          14.102.4.0/24 maxlen: 24
                          14.102.5.0/24 maxlen: 24
                          14.102.6.0/24 maxlen: 24
                          14.102.7.0/24 maxlen: 24
                          14.102.8.0/24 maxlen: 24
                          14.102.9.0/24 maxlen: 24
                          14.102.10.0/24 maxlen: 24
                          14.102.11.0/24 maxlen: 24
                          14.102.12.0/24 maxlen: 24
                          14.102.13.0/24 maxlen: 24
                          14.102.14.0/24 maxlen: 24
                          14.102.15.0/24 maxlen: 24
                          14.102.16.0/24 maxlen: 24
                          14.102.22.0/24 maxlen: 24
                          14.102.23.0/24 maxlen: 24
                          14.102.24.0/24 maxlen: 24
                          14.102.25.0/24 maxlen: 24
                          14.102.26.0/24 maxlen: 24
                          14.102.27.0/24 maxlen: 24
                          14.102.28.0/24 maxlen: 24
                          14.102.29.0/24 maxlen: 24
                          14.102.30.0/24 maxlen: 24
                          14.102.31.0/24 maxlen: 24
                          14.102.32.0/24 maxlen: 24
                          14.102.33.0/24 maxlen: 24
                          14.102.34.0/24 maxlen: 24
                          14.102.35.0/24 maxlen: 24
                          14.102.36.0/24 maxlen: 24
                          14.102.37.0/24 maxlen: 24
                          14.102.38.0/24 maxlen: 24
                          14.102.39.0/24 maxlen: 24
                          14.102.40.0/24 maxlen: 24
                          14.102.41.0/24 maxlen: 24
                          14.102.42.0/24 maxlen: 24
                          14.102.43.0/24 maxlen: 24
                          14.102.44.0/24 maxlen: 24
                          14.102.45.0/24 maxlen: 24
                          14.102.46.0/24 maxlen: 24
                          14.102.47.0/24 maxlen: 24
                          14.102.48.0/24 maxlen: 24
                          14.102.49.0/24 maxlen: 24
                          14.102.50.0/24 maxlen: 24
                          14.102.52.0/24 maxlen: 24
                          14.102.53.0/24 maxlen: 24
                          14.102.54.0/24 maxlen: 24
                          14.102.55.0/24 maxlen: 24
                          14.102.56.0/24 maxlen: 24
                          14.102.57.0/24 maxlen: 24
                          14.102.58.0/24 maxlen: 24
                          14.102.59.0/24 maxlen: 24
                          14.102.60.0/22 maxlen: 22
                          14.102.60.0/24 maxlen: 24
                          14.102.62.0/24 maxlen: 24
                          14.102.63.0/24 maxlen: 24
                          14.102.64.0/24 maxlen: 24
                          14.102.65.0/24 maxlen: 24
                          14.102.66.0/24 maxlen: 24
                          14.102.67.0/24 maxlen: 24
                          14.102.68.0/24 maxlen: 24
                          14.102.69.0/24 maxlen: 24
                          14.102.70.0/24 maxlen: 24
                          14.102.71.0/24 maxlen: 24
                          14.102.72.0/24 maxlen: 24
                          14.102.73.0/24 maxlen: 24
                          14.102.74.0/24 maxlen: 24
                          14.102.75.0/24 maxlen: 24
                          14.102.76.0/24 maxlen: 24
                          14.102.77.0/24 maxlen: 24
                          14.102.78.0/24 maxlen: 24
                          14.102.79.0/24 maxlen: 24
                          14.102.80.0/24 maxlen: 24
                          14.102.81.0/24 maxlen: 24
                          14.102.82.0/24 maxlen: 24
                          14.102.83.0/24 maxlen: 24
                          14.102.84.0/24 maxlen: 24
                          14.102.85.0/24 maxlen: 24
                          14.102.86.0/24 maxlen: 24
                          14.102.87.0/24 maxlen: 24
                          14.102.88.0/24 maxlen: 24
                          14.102.89.0/24 maxlen: 24
                          14.102.90.0/24 maxlen: 24
                          14.102.91.0/24 maxlen: 24
                          14.102.92.0/24 maxlen: 24
                          14.102.93.0/24 maxlen: 24
                          14.102.95.0/24 maxlen: 24
                          14.102.96.0/24 maxlen: 24
                          14.102.97.0/24 maxlen: 24
                          14.102.98.0/24 maxlen: 24
                          14.102.99.0/24 maxlen: 24
                          14.102.100.0/24 maxlen: 24
                          14.102.101.0/24 maxlen: 24
                          14.102.103.0/24 maxlen: 24
                          14.102.104.0/24 maxlen: 24
                          14.102.105.0/24 maxlen: 24
                          14.102.106.0/23 maxlen: 24
                          14.102.108.0/24 maxlen: 24
                          14.102.109.0/24 maxlen: 24
                          14.102.110.0/24 maxlen: 24
                          14.102.111.0/24 maxlen: 24
                          14.102.112.0/24 maxlen: 24
                          14.102.113.0/24 maxlen: 24
                          14.102.114.0/24 maxlen: 24
                          14.102.115.0/24 maxlen: 24
                          14.102.116.0/24 maxlen: 24
                          14.102.117.0/24 maxlen: 24
                          14.102.118.0/24 maxlen: 24
                          14.102.119.0/24 maxlen: 24
                          14.102.120.0/24 maxlen: 24
                          14.102.121.0/24 maxlen: 24
                          14.102.122.0/24 maxlen: 24
                          14.102.123.0/24 maxlen: 24
                          14.102.124.0/24 maxlen: 24
                          14.102.125.0/24 maxlen: 24
                          14.102.126.0/24 maxlen: 24
                          14.102.127.0/24 maxlen: 24
                          43.245.136.0/22 maxlen: 24
                          43.251.212.0/22 maxlen: 24
                          61.14.228.0/22 maxlen: 24
                          103.5.200.0/22 maxlen: 24
                          103.14.127.0/24 maxlen: 24
                          103.87.100.0/22 maxlen: 24
                          103.122.84.0/24 maxlen: 24
                          103.158.131.0/24 maxlen: 24
                          103.160.24.0/24 maxlen: 24
                          103.175.72.0/24 maxlen: 24
                          103.175.73.0/24 maxlen: 24
                          103.176.8.0/23 maxlen: 24
                          110.172.128.0/18 maxlen: 23
                          110.172.128.0/21 maxlen: 24
                          110.172.136.0/24 maxlen: 24
                          110.172.138.0/23 maxlen: 24
                          110.172.140.0/22 maxlen: 24
                          110.172.144.0/20 maxlen: 24
                          110.172.160.0/23 maxlen: 24
                          110.172.162.0/24 maxlen: 24
                          110.172.164.0/22 maxlen: 24
                          110.172.168.0/21 maxlen: 24
                          110.172.176.0/20 maxlen: 24
                          111.235.64.0/22 maxlen: 24
                          114.69.224.0/19 maxlen: 23
                          114.69.224.0/23 maxlen: 24
                          114.69.226.0/24 maxlen: 24
                          114.69.228.0/22 maxlen: 24
                          114.69.232.0/24 maxlen: 24
                          114.69.234.0/23 maxlen: 24
                          114.69.236.0/22 maxlen: 24
                          114.69.240.0/20 maxlen: 24
                          118.91.176.0/20 maxlen: 22
                          118.91.176.0/21 maxlen: 24
                          118.91.185.0/24 maxlen: 24
                          118.91.186.0/23 maxlen: 24
                          118.91.188.0/22 maxlen: 24
                          150.107.192.0/22 maxlen: 24
                          202.89.64.0/20 maxlen: 20
                          202.89.64.0/24 maxlen: 24
                          202.89.65.0/24 maxlen: 24
                          202.89.66.0/24 maxlen: 24
                          202.89.67.0/24 maxlen: 24
                          202.89.68.0/24 maxlen: 24
                          202.89.69.0/24 maxlen: 24
                          202.89.70.0/24 maxlen: 24
                          202.89.71.0/24 maxlen: 24
                          202.89.72.0/24 maxlen: 24
                          202.89.73.0/24 maxlen: 24
                          202.89.74.0/24 maxlen: 24
                          202.89.75.0/24 maxlen: 24
                          202.89.76.0/24 maxlen: 24
                          202.89.77.0/24 maxlen: 24
                          202.89.78.0/24 maxlen: 24
                          202.89.79.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25031 (0x61c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Dec 22 11:51:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=63a444ca-64bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ae:ad:d3:6a:38:0e:7d:b3:47:dd:5c:ad:fd:
                    01:1f:b6:86:5b:83:07:93:d3:99:64:c0:2b:2f:a7:
                    43:7c:56:79:ad:a7:56:53:64:bc:a6:b3:04:8c:5c:
                    38:0e:fc:29:62:53:95:bc:ff:e1:27:d7:b4:5d:e5:
                    8c:09:ec:58:03:16:4d:27:31:0f:3e:31:89:1c:b2:
                    92:69:6e:fc:4a:0e:11:63:a3:cc:35:da:ae:f6:dc:
                    8f:36:ab:fd:4c:c4:ff:f1:03:4b:f8:31:87:01:c3:
                    30:32:cb:eb:12:fe:b0:c6:c3:c2:fd:cc:0b:7a:4c:
                    33:03:8f:65:1e:5a:5a:a5:c2:ad:f0:14:08:99:b7:
                    a0:dd:07:d8:ac:54:15:f4:73:b5:64:d9:0f:8c:4c:
                    44:4b:a5:97:bd:dc:a8:30:7f:ea:07:6f:cd:e1:39:
                    d1:39:8b:25:af:18:3b:45:a0:ef:f0:f0:03:95:5c:
                    8b:65:57:65:40:ea:51:bd:54:13:3e:96:1b:50:30:
                    8b:74:f7:99:19:44:71:f7:e8:00:ad:70:33:81:6f:
                    e3:d9:59:91:23:83:cf:0f:17:bd:f5:b5:d6:4c:6e:
                    c6:fd:12:91:92:f6:43:5f:26:e1:f8:ef:aa:50:1f:
                    d8:a8:fb:c7:9b:29:06:24:8e:3a:d2:f9:eb:05:00:
                    d8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:AB:96:40:B4:C4:F5:83:4A:6D:E5:6D:A5:23:9A:BB:16:E3:6C:A4
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9AE51F8E61B811EDA304BA0BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.102.0.0-14.102.16.255
                  14.102.22.0-14.102.50.255
                  14.102.52.0-14.102.93.255
                  14.102.95.0-14.102.101.255
                  14.102.103.0-14.102.127.255
                  43.245.136.0/22
                  43.251.212.0/22
                  61.14.228.0/22
                  103.5.200.0/22
                  103.14.127.0/24
                  103.87.100.0/22
                  103.122.84.0/24
                  103.158.131.0/24
                  103.160.24.0/24
                  103.175.72.0/23
                  103.176.8.0/23
                  110.172.128.0/18
                  111.235.64.0/22
                  114.69.224.0/19
                  118.91.176.0/20
                  150.107.192.0/22
                  202.89.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3d:74:90:75:13:17:36:c8:8c:24:83:da:93:34:89:96:d3:bb:
         fe:7e:80:3e:d9:12:cf:a9:fa:e0:fd:5e:95:05:0e:e6:ff:ca:
         3b:1f:43:c2:d9:29:f3:33:8e:3a:d9:b6:74:50:e9:4b:96:7e:
         b5:f0:71:4e:8f:13:4b:57:ba:ca:d0:2d:ae:7c:97:df:b9:2b:
         ab:fc:58:fc:73:56:36:16:7a:70:3a:bf:19:b2:9d:34:85:65:
         38:25:72:69:78:04:a0:bc:be:b7:98:ef:3c:3b:7a:b7:a1:5c:
         f9:d9:d4:91:07:5a:90:20:4f:44:c6:36:c6:9a:23:66:f2:1b:
         b1:8c:46:21:72:16:45:2d:c4:54:71:cb:11:17:9e:62:c3:0a:
         80:57:65:2c:b0:ff:a8:f1:47:8a:72:f9:09:54:27:fb:b6:95:
         f8:d6:c3:8b:5f:a0:56:c9:df:57:d5:d7:4e:57:c4:69:05:67:
         2d:4a:69:24:8a:df:5f:5a:f9:72:65:24:f7:4d:e5:23:46:d2:
         02:29:29:b5:8e:d8:6c:72:ae:a1:4e:23:eb:fd:c7:f9:bc:85:
         fa:42:9f:ce:1b:f7:33:6d:ab:ac:b1:91:ad:8a:23:0e:9c:14:
         e4:83:0b:e1:12:b0:15:65:34:1d:37:f6:7b:22:89:a0:65:60:
         c8:69:87:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:56 2023 by rpki-client on console-fra.rpki-client.org