Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/93D8310EE0D011ECAF88A30DC4F9AE02.roa
File:                     93D8310EE0D011ECAF88A30DC4F9AE02.roa (raw, json)
Hash identifier:          cz7X9phECfUBykaZgNG0luI7JpiGrY/8UxrAYF2ZhvY=
Subject key identifier:   18:EF:07:E4:96:90:84:2F:04:E9:3E:95:7C:33:5E:73:6B:EC:C5:03
Certificate issuer:       /CN=A91B29F8/serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411
Certificate serial:       044C
Authority key identifier: 76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/93D8310EE0D011ECAF88A30DC4F9AE02.roa
Signing time:             Wed 14 Sep 2022 13:22:26 +0000
ROA not before:           Wed 14 Sep 2022 13:22:26 +0000
ROA not after:            Fri 01 Dec 2023 00:00:00 +0000
asID:                     136778
IP address blocks:        103.99.62.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1100 (0x44c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B29F8/serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411
        Validity
            Not Before: Sep 14 13:22:26 2022 GMT
            Not After : Dec  1 00:00:00 2023 GMT
        Subject: CN=6321d592-7b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:09:33:09:52:1e:4a:dc:2e:13:d2:9e:3d:40:
                    77:5d:43:0f:34:36:d0:fb:7c:c3:9e:f8:46:3f:76:
                    83:04:d2:46:d2:ec:6e:c2:79:17:4a:2f:b8:1e:96:
                    a1:87:bc:75:f1:13:bf:21:65:af:42:86:c8:02:8e:
                    3e:2d:8d:f9:39:b7:62:1b:60:17:5e:6a:9c:09:a5:
                    40:bf:c2:4c:df:61:8a:15:b8:fa:04:c4:4c:e7:9a:
                    41:21:c1:70:d7:2b:09:f7:1d:7b:71:00:44:69:b4:
                    76:b3:77:2e:f8:54:17:ed:f9:d2:a0:83:77:dd:f7:
                    8b:34:96:a6:b7:2e:f1:5a:5e:53:90:af:b4:63:91:
                    c8:6f:85:13:dd:02:91:54:4b:d2:51:6c:75:26:f7:
                    18:1a:d2:dd:ce:1f:35:2c:cf:c6:22:3d:15:d8:7a:
                    d2:3f:56:7e:cd:f5:83:58:51:81:a1:c0:52:95:d1:
                    41:73:e8:d8:ae:ac:c7:cb:e8:57:43:ce:e0:da:45:
                    51:b5:ce:87:39:75:7e:29:aa:46:55:48:3d:95:7b:
                    63:b9:88:92:6d:3c:25:40:36:f1:a9:28:c2:1a:dd:
                    80:3d:22:35:e1:cd:ba:64:34:5a:cf:fa:41:28:3e:
                    df:ce:7d:c7:05:d7:39:66:82:13:62:ee:b8:2f:40:
                    52:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:EF:07:E4:96:90:84:2F:04:E9:3E:95:7C:33:5E:73:6B:EC:C5:03
            X509v3 Authority Key Identifier:
                keyid:76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/93D8310EE0D011ECAF88A30DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:a8:73:71:e5:b8:c5:59:61:ae:ed:b8:82:7e:f1:3d:78:84:
         5f:76:86:f5:29:f7:20:75:44:62:b4:9a:ab:59:53:8a:86:73:
         ef:36:39:63:0f:01:06:3e:5a:ad:d2:fb:77:9c:b2:1f:d5:c6:
         b5:3e:8e:41:52:ab:dc:87:78:ff:ad:34:ce:3a:7d:ec:ae:cb:
         e5:fa:00:a3:a9:a8:f3:92:2c:ac:4d:fb:b7:c6:52:6f:c6:73:
         05:28:ea:f5:5a:82:79:ee:c9:6a:1a:ff:aa:2a:ba:d0:4a:4c:
         d4:fb:17:89:69:7d:6a:db:0d:a0:e0:19:10:3f:7f:36:57:06:
         0f:f0:13:33:4a:fe:81:a8:21:26:f1:9e:2e:c0:95:72:48:c3:
         2a:9c:fc:25:da:7a:49:60:f3:85:8f:c8:d9:ae:8c:0c:21:80:
         1a:05:82:b8:f0:3a:b5:ae:23:a5:a2:89:c8:18:5d:34:b7:cf:
         50:27:b3:14:58:5c:fa:cd:7a:6e:c0:2c:c7:a4:6a:3e:84:d1:
         82:56:23:88:01:3b:b5:6f:06:72:f3:c9:b6:96:df:9d:50:61:
         b3:7b:9f:82:fb:a6:be:f9:5d:38:aa:5b:09:0e:bf:84:25:79:
         26:73:41:e8:0d:e6:4d:45:bb:5c:ab:ed:4f:0c:f7:b9:e1:6a:
         0d:52:92:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:56 2024 by rpki-client on console-ams.rpki-client.org