Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/F7578398967311EDB9F09712C4F9AE02.roa
File:                     F7578398967311EDB9F09712C4F9AE02.roa (raw, json)
Hash identifier:          W2duI3LLI72t3fFLX38KpEiV5mzTJrx1jcCwTLpzOYY=
Subject key identifier:   77:F6:D0:EF:82:7A:8C:9D:B2:97:0A:5A:CD:5A:96:D0:A2:B7:B9:57
Certificate issuer:       /CN=A91C9945/serialNumber=868ECB6425DA83328892E57BB0DF644E1AEB73B3
Certificate serial:       010E
Authority key identifier: 86:8E:CB:64:25:DA:83:32:88:92:E5:7B:B0:DF:64:4E:1A:EB:73:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/F7578398967311EDB9F09712C4F9AE02.roa
Signing time:             Tue 17 Jan 2023 14:33:54 +0000
ROA not before:           Tue 17 Jan 2023 14:33:54 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     133480
IP address blocks:        103.216.197.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 270 (0x10e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9945/serialNumber=868ECB6425DA83328892E57BB0DF644E1AEB73B3
        Validity
            Not Before: Jan 17 14:33:54 2023 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=63c6b1d1-ac17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:39:d9:f7:f6:ee:ef:ad:38:af:79:6a:b9:ea:
                    2d:9b:63:51:43:81:f2:bb:f4:16:92:28:87:6a:02:
                    32:89:25:7e:b7:cd:40:57:23:6a:7a:1b:d7:58:d3:
                    68:3e:84:d5:d8:1e:db:41:21:88:68:85:86:b1:27:
                    49:f6:68:24:6d:9a:f0:59:4b:37:d1:c4:14:4f:fe:
                    55:9d:5d:a8:da:15:93:67:15:3a:df:86:4d:ab:e1:
                    19:72:c4:a3:87:3f:bc:f8:fc:ac:bd:cf:3a:92:f5:
                    64:c6:f1:1f:82:0f:94:97:23:20:47:ce:f1:fa:f2:
                    c7:d5:af:25:50:d4:ea:32:df:d2:7d:59:3e:25:74:
                    cc:04:cc:e0:72:39:a1:b5:bf:55:32:4d:6d:36:47:
                    0c:8d:99:4f:40:2b:0b:ef:f7:fd:34:12:ce:32:3c:
                    fa:fe:ed:2c:56:96:aa:d9:e6:39:70:63:c2:75:5e:
                    01:e8:de:4c:53:1e:b1:2c:c5:6e:ad:44:81:66:86:
                    a1:b3:62:08:fb:33:a9:69:fa:6f:19:82:39:63:a0:
                    85:c4:81:84:2c:a9:71:af:9c:a6:52:1e:79:85:b6:
                    0c:ef:e3:fe:61:2d:dd:4a:09:49:66:6e:b8:14:fa:
                    96:f3:87:5e:d9:b3:07:35:f7:46:2b:05:cd:a5:b2:
                    45:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F6:D0:EF:82:7A:8C:9D:B2:97:0A:5A:CD:5A:96:D0:A2:B7:B9:57
            X509v3 Authority Key Identifier:
                keyid:86:8E:CB:64:25:DA:83:32:88:92:E5:7B:B0:DF:64:4E:1A:EB:73:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/F7578398967311EDB9F09712C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.216.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:88:5f:73:49:f7:8f:52:45:25:b5:51:14:2b:32:2e:dc:b6:
         b0:bd:a6:56:2f:99:77:ef:cf:07:d8:79:da:41:24:34:ed:5b:
         38:3f:57:97:f0:6f:a6:6e:08:a7:40:a8:33:87:86:07:5a:ba:
         80:a8:5c:f1:4e:74:37:f0:b0:4f:8f:70:8f:a6:39:c4:e5:2f:
         c8:00:10:84:91:70:c8:0f:5a:da:83:99:7c:44:ee:18:8b:bb:
         36:a5:a3:e0:a6:64:a7:38:93:e4:a5:b4:6a:a9:f8:1b:a0:76:
         69:cf:d7:c0:c7:54:f5:b6:2d:c4:11:6f:96:f1:e9:23:6d:e7:
         f4:a9:84:78:98:3f:9b:35:1b:27:83:ad:11:57:23:1d:44:e1:
         1c:be:fb:5f:0a:9b:51:73:50:e0:78:3b:b4:31:c7:74:41:59:
         eb:22:f2:46:92:cf:69:12:fb:c0:c7:cb:28:96:b0:55:2d:bb:
         41:19:8b:2c:66:51:c3:0a:da:1d:6c:c2:b9:02:fa:b1:51:56:
         f2:8b:6f:7b:22:34:4b:9a:15:1b:c3:0e:f9:c9:3a:b2:f6:06:
         c4:32:f0:f3:c4:54:30:46:eb:3a:3d:7f:45:d8:e6:44:78:b3:
         22:0e:07:56:cf:92:63:9a:fa:4c:3b:c9:42:15:04:80:cf:27:
         da:9e:82:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:26 2024 by rpki-client on console-ams.rpki-client.org