Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CD288C40410511EB962AA529C4F9AE02.roa
File:                     CD288C40410511EB962AA529C4F9AE02.roa (raw, json)
Hash identifier:          FUL7tcxxhcllUEuvQn20UuhhOLJeSgGt3hswLXZiPgE=
Subject key identifier:   77:31:07:DF:AE:6B:4F:79:7A:89:AE:C5:0C:AE:C6:C7:C0:37:55:77
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       5CF2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CD288C40410511EB962AA529C4F9AE02.roa
Signing time:             Fri 09 Sep 2022 10:11:40 +0000
ROA not before:           Fri 09 Sep 2022 10:11:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     18002
IP address blocks:        14.102.0.0/24 maxlen: 24
                          14.102.1.0/24 maxlen: 24
                          14.102.2.0/24 maxlen: 24
                          14.102.3.0/24 maxlen: 24
                          14.102.4.0/24 maxlen: 24
                          14.102.5.0/24 maxlen: 24
                          14.102.6.0/24 maxlen: 24
                          14.102.7.0/24 maxlen: 24
                          14.102.8.0/24 maxlen: 24
                          14.102.9.0/24 maxlen: 24
                          14.102.10.0/24 maxlen: 24
                          14.102.11.0/24 maxlen: 24
                          14.102.12.0/24 maxlen: 24
                          14.102.13.0/24 maxlen: 24
                          14.102.14.0/24 maxlen: 24
                          14.102.15.0/24 maxlen: 24
                          14.102.16.0/24 maxlen: 24
                          14.102.22.0/24 maxlen: 24
                          14.102.23.0/24 maxlen: 24
                          14.102.24.0/24 maxlen: 24
                          14.102.25.0/24 maxlen: 24
                          14.102.26.0/24 maxlen: 24
                          14.102.27.0/24 maxlen: 24
                          14.102.28.0/24 maxlen: 24
                          14.102.29.0/24 maxlen: 24
                          14.102.30.0/24 maxlen: 24
                          14.102.31.0/24 maxlen: 24
                          14.102.32.0/24 maxlen: 24
                          14.102.33.0/24 maxlen: 24
                          14.102.34.0/24 maxlen: 24
                          14.102.35.0/24 maxlen: 24
                          14.102.36.0/24 maxlen: 24
                          14.102.37.0/24 maxlen: 24
                          14.102.38.0/24 maxlen: 24
                          14.102.39.0/24 maxlen: 24
                          14.102.40.0/24 maxlen: 24
                          14.102.41.0/24 maxlen: 24
                          14.102.42.0/24 maxlen: 24
                          14.102.43.0/24 maxlen: 24
                          14.102.44.0/24 maxlen: 24
                          14.102.45.0/24 maxlen: 24
                          14.102.46.0/24 maxlen: 24
                          14.102.47.0/24 maxlen: 24
                          14.102.48.0/24 maxlen: 24
                          14.102.49.0/24 maxlen: 24
                          14.102.50.0/24 maxlen: 24
                          14.102.52.0/24 maxlen: 24
                          14.102.53.0/24 maxlen: 24
                          14.102.54.0/24 maxlen: 24
                          14.102.55.0/24 maxlen: 24
                          14.102.56.0/24 maxlen: 24
                          14.102.57.0/24 maxlen: 24
                          14.102.58.0/24 maxlen: 24
                          14.102.59.0/24 maxlen: 24
                          14.102.60.0/22 maxlen: 22
                          14.102.60.0/24 maxlen: 24
                          14.102.62.0/24 maxlen: 24
                          14.102.63.0/24 maxlen: 24
                          14.102.64.0/24 maxlen: 24
                          14.102.65.0/24 maxlen: 24
                          14.102.66.0/24 maxlen: 24
                          14.102.67.0/24 maxlen: 24
                          14.102.68.0/24 maxlen: 24
                          14.102.69.0/24 maxlen: 24
                          14.102.70.0/24 maxlen: 24
                          14.102.71.0/24 maxlen: 24
                          14.102.72.0/24 maxlen: 24
                          14.102.73.0/24 maxlen: 24
                          14.102.74.0/24 maxlen: 24
                          14.102.75.0/24 maxlen: 24
                          14.102.76.0/24 maxlen: 24
                          14.102.77.0/24 maxlen: 24
                          14.102.78.0/24 maxlen: 24
                          14.102.79.0/24 maxlen: 24
                          14.102.80.0/24 maxlen: 24
                          14.102.81.0/24 maxlen: 24
                          14.102.82.0/24 maxlen: 24
                          14.102.83.0/24 maxlen: 24
                          14.102.84.0/24 maxlen: 24
                          14.102.85.0/24 maxlen: 24
                          14.102.86.0/24 maxlen: 24
                          14.102.87.0/24 maxlen: 24
                          14.102.88.0/24 maxlen: 24
                          14.102.89.0/24 maxlen: 24
                          14.102.90.0/24 maxlen: 24
                          14.102.91.0/24 maxlen: 24
                          14.102.92.0/24 maxlen: 24
                          14.102.93.0/24 maxlen: 24
                          14.102.95.0/24 maxlen: 24
                          14.102.96.0/24 maxlen: 24
                          14.102.97.0/24 maxlen: 24
                          14.102.98.0/24 maxlen: 24
                          14.102.99.0/24 maxlen: 24
                          14.102.100.0/24 maxlen: 24
                          14.102.101.0/24 maxlen: 24
                          14.102.103.0/24 maxlen: 24
                          14.102.104.0/24 maxlen: 24
                          14.102.105.0/24 maxlen: 24
                          14.102.106.0/23 maxlen: 24
                          14.102.108.0/24 maxlen: 24
                          14.102.109.0/24 maxlen: 24
                          14.102.110.0/24 maxlen: 24
                          14.102.111.0/24 maxlen: 24
                          14.102.112.0/24 maxlen: 24
                          14.102.113.0/24 maxlen: 24
                          14.102.114.0/24 maxlen: 24
                          14.102.115.0/24 maxlen: 24
                          14.102.116.0/24 maxlen: 24
                          14.102.117.0/24 maxlen: 24
                          14.102.118.0/24 maxlen: 24
                          14.102.119.0/24 maxlen: 24
                          14.102.120.0/24 maxlen: 24
                          14.102.121.0/24 maxlen: 24
                          14.102.122.0/24 maxlen: 24
                          14.102.123.0/24 maxlen: 24
                          14.102.124.0/24 maxlen: 24
                          14.102.125.0/24 maxlen: 24
                          14.102.126.0/24 maxlen: 24
                          14.102.127.0/24 maxlen: 24
                          43.245.136.0/22 maxlen: 24
                          43.251.212.0/22 maxlen: 24
                          61.14.228.0/22 maxlen: 24
                          103.5.200.0/22 maxlen: 24
                          103.87.100.0/22 maxlen: 24
                          103.122.84.0/24 maxlen: 24
                          103.147.128.0/24 maxlen: 24
                          103.160.24.0/24 maxlen: 24
                          103.163.60.0/24 maxlen: 24
                          103.163.126.0/23 maxlen: 24
                          103.176.8.0/23 maxlen: 24
                          110.172.128.0/18 maxlen: 23
                          110.172.128.0/21 maxlen: 24
                          110.172.136.0/24 maxlen: 24
                          110.172.138.0/23 maxlen: 24
                          110.172.140.0/22 maxlen: 24
                          110.172.144.0/20 maxlen: 24
                          110.172.160.0/23 maxlen: 24
                          110.172.162.0/24 maxlen: 24
                          110.172.164.0/22 maxlen: 24
                          110.172.168.0/21 maxlen: 24
                          110.172.176.0/20 maxlen: 24
                          111.235.64.0/22 maxlen: 24
                          114.69.224.0/19 maxlen: 23
                          114.69.224.0/23 maxlen: 24
                          114.69.226.0/24 maxlen: 24
                          114.69.228.0/22 maxlen: 24
                          114.69.232.0/24 maxlen: 24
                          114.69.234.0/23 maxlen: 24
                          114.69.236.0/22 maxlen: 24
                          114.69.240.0/20 maxlen: 24
                          118.91.176.0/20 maxlen: 22
                          118.91.176.0/21 maxlen: 24
                          118.91.185.0/24 maxlen: 24
                          118.91.186.0/23 maxlen: 24
                          118.91.188.0/22 maxlen: 24
                          150.107.192.0/22 maxlen: 24
                          202.89.64.0/20 maxlen: 20
                          202.89.64.0/24 maxlen: 24
                          202.89.65.0/24 maxlen: 24
                          202.89.66.0/24 maxlen: 24
                          202.89.67.0/24 maxlen: 24
                          202.89.68.0/24 maxlen: 24
                          202.89.69.0/24 maxlen: 24
                          202.89.70.0/24 maxlen: 24
                          202.89.71.0/24 maxlen: 24
                          202.89.72.0/24 maxlen: 24
                          202.89.73.0/24 maxlen: 24
                          202.89.74.0/24 maxlen: 24
                          202.89.75.0/24 maxlen: 24
                          202.89.76.0/24 maxlen: 24
                          202.89.77.0/24 maxlen: 24
                          202.89.78.0/24 maxlen: 24
                          202.89.79.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23794 (0x5cf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Sep  9 10:11:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=631b115c-0ec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:47:fc:a0:db:6e:c6:7f:99:6f:f6:51:91:a6:
                    ae:bd:a5:08:c3:17:ee:dd:fb:3d:48:d4:c9:7e:86:
                    7e:1c:be:0e:48:c4:e5:53:1b:c4:6e:2d:5b:8d:da:
                    12:03:b0:b2:f7:fd:82:d7:43:ae:4a:91:9a:20:3c:
                    24:e4:ea:92:66:06:11:50:48:9a:73:c2:c3:3a:c1:
                    42:bd:25:2e:40:61:c2:70:82:0d:a0:95:dd:2a:1a:
                    8d:56:c1:01:c3:8b:78:30:78:c4:23:e3:d0:43:64:
                    5b:d6:9d:f1:22:4a:71:be:ab:71:0e:66:f6:f0:6a:
                    f5:70:c8:e9:68:ef:a4:97:d1:47:dd:95:28:c0:90:
                    50:db:a5:cb:82:a8:d6:02:05:fe:41:87:76:fd:e0:
                    a3:86:c5:21:95:f4:26:f9:71:a5:9b:50:40:56:42:
                    65:86:14:2d:a8:08:0f:3c:04:87:71:1c:c8:16:62:
                    3d:c2:43:03:2d:5d:34:a8:57:48:39:f3:fa:4e:2a:
                    6e:32:79:7c:d2:a6:e1:7a:f8:8e:ad:61:15:05:e7:
                    32:0a:93:5a:91:41:f9:13:3e:1e:ce:53:3f:23:4d:
                    1b:a5:36:d0:5f:64:84:d8:8b:33:ec:53:71:5d:49:
                    c6:70:21:fa:4f:bf:bb:9f:2d:88:63:54:e9:0b:b7:
                    c8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:31:07:DF:AE:6B:4F:79:7A:89:AE:C5:0C:AE:C6:C7:C0:37:55:77
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CD288C40410511EB962AA529C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.102.0.0-14.102.16.255
                  14.102.22.0-14.102.50.255
                  14.102.52.0-14.102.93.255
                  14.102.95.0-14.102.101.255
                  14.102.103.0-14.102.127.255
                  43.245.136.0/22
                  43.251.212.0/22
                  61.14.228.0/22
                  103.5.200.0/22
                  103.87.100.0/22
                  103.122.84.0/24
                  103.147.128.0/24
                  103.160.24.0/24
                  103.163.60.0/24
                  103.163.126.0/23
                  103.176.8.0/23
                  110.172.128.0/18
                  111.235.64.0/22
                  114.69.224.0/19
                  118.91.176.0/20
                  150.107.192.0/22
                  202.89.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         14:ef:f4:5d:11:2a:b0:1f:90:99:72:e4:ec:25:c7:ad:49:2d:
         d8:b8:69:4f:d1:9e:95:b7:e6:3b:b3:91:5e:ef:57:d7:a5:93:
         a4:35:db:08:f5:0a:4c:ad:5e:73:a3:1b:06:d1:36:24:23:5e:
         b9:50:c8:9b:fa:7d:a1:5d:79:79:fa:b8:f7:0e:3b:ae:6a:14:
         c8:d7:4a:94:29:13:2b:07:2d:17:7f:c4:6d:81:2b:d7:b6:be:
         a6:f5:ae:77:4c:36:e3:8e:f0:c6:ee:82:f0:b8:b2:48:41:4f:
         0f:18:f3:7e:32:18:03:91:95:0c:db:97:83:fa:83:71:3a:d1:
         61:0e:bb:44:1e:cc:73:22:9a:e4:cb:c7:60:e5:5d:78:4d:e2:
         b9:e1:0e:b5:9f:0c:79:82:cc:1c:57:ee:83:6d:be:4e:69:8b:
         33:dd:3e:7b:0c:ed:b2:1a:02:c4:01:ba:86:0f:09:81:86:b5:
         55:19:78:55:4d:30:54:20:26:74:87:29:b7:ce:9f:ea:df:c4:
         f9:75:21:94:14:ce:c8:cb:be:d5:6f:9e:aa:4e:8f:b4:15:ed:
         0c:f0:d0:42:87:9b:76:62:14:0a:42:fa:3c:da:86:79:87:63:
         c3:1a:9a:b5:d5:ab:4b:1d:91:e5:33:73:a0:24:29:69:82:20:
         a1:f6:8f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:54 2023 by rpki-client on console-ams.rpki-client.org