Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/9EE33C8806A911EEB58E6A6FC4F9AE02.roa
File:                     9EE33C8806A911EEB58E6A6FC4F9AE02.roa (raw, json)
Hash identifier:          3Ynum3ENTfkl169YNcytuyV9UzJm8O8ovTGf+TAdjQk=
Subject key identifier:   F7:45:4C:4F:A8:82:9E:AB:71:AB:7A:90:4B:4B:43:D1:6D:E5:62:3A
Certificate issuer:       /CN=A91A1818/serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
Certificate serial:       05
Authority key identifier: 92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/9EE33C8806A911EEB58E6A6FC4F9AE02.roa
Signing time:             Fri 09 Jun 2023 10:20:08 +0000
ROA not before:           Fri 09 Jun 2023 10:20:08 +0000
ROA not after:            Fri 01 Dec 2023 00:00:00 +0000
asID:                     132388
IP address blocks:        139.180.9.0/24 maxlen: 24
                          139.180.10.0/24 maxlen: 24
                          139.180.12.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1818/serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
        Validity
            Not Before: Jun  9 10:20:08 2023 GMT
            Not After : Dec  1 00:00:00 2023 GMT
        Subject: CN=6482fcd7-427c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:09:11:10:4e:07:e0:90:b5:b0:bf:ef:7d:b2:
                    fe:17:55:fe:04:0c:21:de:1d:31:ca:e6:ab:dc:98:
                    d1:c3:c7:d3:3e:d7:70:0b:8b:c6:1b:0c:06:6a:6e:
                    67:b2:a9:a6:0a:86:0f:d2:63:aa:08:82:f4:a9:69:
                    9d:29:cc:44:cf:28:29:b4:4a:d7:84:ee:9e:bc:46:
                    76:f6:4b:67:5b:d5:ed:89:10:0a:bb:9a:38:3f:0e:
                    3a:b5:ce:61:70:44:2a:58:71:2e:4a:c1:9e:79:5b:
                    2f:38:cb:d8:d6:5b:c7:80:eb:91:64:7e:56:b8:2f:
                    dd:63:32:f1:2c:0d:49:8d:03:3d:b3:d5:2a:de:a0:
                    5d:ea:7c:05:d6:a3:30:d9:05:5d:83:4f:7b:29:97:
                    57:95:61:44:97:96:60:f4:9e:fd:3d:42:f7:92:b3:
                    aa:e2:60:4b:d1:92:c4:0e:f6:2f:9a:97:86:ff:85:
                    c8:ae:0d:57:1a:a3:a5:04:68:53:8c:48:50:e2:d1:
                    27:2b:8d:f4:46:e3:61:49:70:29:22:20:bd:e7:e8:
                    7c:0d:cb:ad:bd:86:ef:dd:6b:c3:7e:83:29:4c:ea:
                    d8:df:ff:5a:b2:9b:3f:79:4b:18:ba:07:42:ca:aa:
                    09:00:ed:7f:33:e8:ec:d3:82:41:51:21:72:b2:52:
                    81:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:45:4C:4F:A8:82:9E:AB:71:AB:7A:90:4B:4B:43:D1:6D:E5:62:3A
            X509v3 Authority Key Identifier:
                keyid:92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/9EE33C8806A911EEB58E6A6FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.180.9.0-139.180.10.255
                  139.180.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:e6:9f:d6:34:c4:ea:55:7d:f5:2f:9f:67:f5:81:ed:e8:96:
         3c:c1:99:33:64:0b:23:48:40:1b:26:09:7e:15:f1:92:df:77:
         4a:46:d9:2d:1b:90:18:2f:c1:65:05:cf:7a:72:f1:71:f7:07:
         7c:aa:db:7e:f3:cd:1e:0a:d2:62:57:5c:d0:ba:dc:d9:c0:c2:
         79:82:b6:b8:82:a3:6b:cf:e6:33:12:ca:c4:42:f3:85:f0:66:
         ef:32:39:7d:48:53:16:ad:90:0b:3d:6e:ee:bf:02:68:35:a1:
         0a:2f:c0:cc:4b:e4:47:2a:ff:c9:04:a8:0d:3a:cd:c7:40:38:
         c4:59:b4:e2:21:f3:c0:4c:9c:e3:ab:10:f5:2b:79:36:01:72:
         ee:7d:02:f3:2b:f1:f8:13:89:5d:c3:f6:8c:0e:34:7c:f3:dc:
         b4:03:5e:f6:75:a4:59:f9:10:6d:94:50:c5:cd:79:b3:a6:a9:
         ad:ef:00:2b:a0:f3:df:f7:96:b0:d9:b8:38:2c:90:9b:75:b8:
         f2:57:6d:54:93:d2:7a:f5:c2:cc:ad:67:f7:f7:5a:74:4c:d9:
         19:28:f1:9e:50:d8:0c:87:5d:ef:a4:8e:93:07:4c:bd:f3:db:
         8a:20:a2:51:e8:c6:d2:1b:7b:94:28:3c:5a:75:dc:84:fa:1d:
         86:38:c5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:35 2024 by rpki-client on console-fra.rpki-client.org