Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/2A1BE7DAC39B11EC9513D10BC4F9AE02.roa
File:                     2A1BE7DAC39B11EC9513D10BC4F9AE02.roa (raw, json)
Hash identifier:          2OmVJFhKSOXY0T9trYP5MHI8vAQ1tcvvzZW3diCP60s=
Subject key identifier:   39:70:C9:E3:83:F2:CA:BD:2E:F2:8A:BC:B4:56:EA:9D:99:52:A2:B8
Certificate issuer:       /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial:       030A
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/2A1BE7DAC39B11EC9513D10BC4F9AE02.roa
Signing time:             Thu 01 Dec 2022 11:32:28 +0000
ROA not before:           Thu 01 Dec 2022 11:32:28 +0000
ROA not after:            Fri 01 Dec 2023 00:00:00 +0000
asID:                     55410
IP address blocks:        42.104.64.0/21 maxlen: 24
                          42.104.72.0/21 maxlen: 24
                          42.104.80.0/21 maxlen: 24
                          42.104.88.0/21 maxlen: 24
                          42.104.96.0/21 maxlen: 24
                          42.104.104.0/21 maxlen: 24
                          42.104.112.0/21 maxlen: 24
                          42.104.120.0/21 maxlen: 24
                          43.245.88.0/22 maxlen: 24
                          103.29.44.0/22 maxlen: 24
                          118.185.0.0/21 maxlen: 24
                          118.185.8.0/21 maxlen: 24
                          118.185.16.0/21 maxlen: 24
                          118.185.24.0/21 maxlen: 21
                          118.185.24.0/24 maxlen: 24
                          118.185.25.0/24 maxlen: 24
                          118.185.26.0/24 maxlen: 24
                          118.185.27.0/24 maxlen: 24
                          118.185.28.0/24 maxlen: 24
                          118.185.29.0/24 maxlen: 24
                          118.185.30.0/24 maxlen: 24
                          118.185.31.0/24 maxlen: 24
                          118.185.32.0/21 maxlen: 24
                          118.185.40.0/21 maxlen: 24
                          118.185.48.0/21 maxlen: 24
                          118.185.56.0/21 maxlen: 21
                          118.185.56.0/24 maxlen: 24
                          118.185.57.0/24 maxlen: 24
                          118.185.58.0/24 maxlen: 24
                          118.185.59.0/24 maxlen: 24
                          118.185.61.0/24 maxlen: 24
                          118.185.62.0/24 maxlen: 24
                          118.185.63.0/24 maxlen: 24
                          118.185.64.0/21 maxlen: 24
                          118.185.72.0/21 maxlen: 24
                          118.185.80.0/21 maxlen: 24
                          118.185.88.0/21 maxlen: 24
                          118.185.96.0/21 maxlen: 21
                          118.185.97.0/24 maxlen: 24
                          118.185.98.0/24 maxlen: 24
                          118.185.99.0/24 maxlen: 24
                          118.185.100.0/24 maxlen: 24
                          118.185.101.0/24 maxlen: 24
                          118.185.102.0/24 maxlen: 24
                          118.185.103.0/24 maxlen: 24
                          118.185.104.0/21 maxlen: 24
                          118.185.112.0/21 maxlen: 24
                          118.185.120.0/21 maxlen: 24
                          118.185.128.0/20 maxlen: 21
                          118.185.128.0/24 maxlen: 24
                          118.185.129.0/24 maxlen: 24
                          118.185.130.0/24 maxlen: 24
                          118.185.131.0/24 maxlen: 24
                          118.185.133.0/24 maxlen: 24
                          118.185.134.0/24 maxlen: 24
                          118.185.135.0/24 maxlen: 24
                          118.185.136.0/24 maxlen: 24
                          118.185.138.0/24 maxlen: 24
                          118.185.139.0/24 maxlen: 24
                          118.185.140.0/24 maxlen: 24
                          118.185.141.0/24 maxlen: 24
                          118.185.142.0/24 maxlen: 24
                          118.185.143.0/24 maxlen: 24
                          118.185.144.0/21 maxlen: 24
                          118.185.152.0/21 maxlen: 24
                          118.185.160.0/21 maxlen: 24
                          118.185.168.0/21 maxlen: 24
                          118.185.176.0/21 maxlen: 24
                          118.185.184.0/21 maxlen: 24
                          118.185.192.0/21 maxlen: 24
                          118.185.200.0/21 maxlen: 24
                          118.185.208.0/21 maxlen: 24
                          118.185.216.0/21 maxlen: 24
                          118.185.224.0/21 maxlen: 24
                          118.185.232.0/21 maxlen: 24
                          118.185.240.0/21 maxlen: 24
                          118.185.248.0/21 maxlen: 24
                          122.15.0.0/21 maxlen: 24
                          122.15.8.0/21 maxlen: 24
                          122.15.16.0/21 maxlen: 24
                          122.15.24.0/21 maxlen: 24
                          122.15.32.0/21 maxlen: 24
                          122.15.40.0/21 maxlen: 24
                          122.15.48.0/21 maxlen: 24
                          122.15.56.0/21 maxlen: 24
                          122.15.64.0/21 maxlen: 24
                          122.15.72.0/21 maxlen: 24
                          122.15.80.0/21 maxlen: 24
                          122.15.96.0/21 maxlen: 24
                          122.15.104.0/21 maxlen: 24
                          122.15.112.0/21 maxlen: 24
                          122.15.120.0/21 maxlen: 24
                          122.15.128.0/21 maxlen: 24
                          122.15.136.0/21 maxlen: 24
                          122.15.144.0/21 maxlen: 24
                          122.15.152.0/21 maxlen: 24
                          122.15.160.0/21 maxlen: 24
                          122.15.168.0/21 maxlen: 24
                          122.15.176.0/21 maxlen: 24
                          122.15.184.0/21 maxlen: 24
                          122.15.192.0/21 maxlen: 24
                          122.15.200.0/21 maxlen: 24
                          122.15.208.0/21 maxlen: 24
                          122.15.216.0/21 maxlen: 24
                          122.15.224.0/21 maxlen: 24
                          122.15.232.0/21 maxlen: 24
                          122.15.240.0/21 maxlen: 21
                          122.15.248.0/21 maxlen: 24
                          123.63.0.0/21 maxlen: 24
                          123.63.8.0/21 maxlen: 24
                          123.63.16.0/21 maxlen: 24
                          123.63.24.0/21 maxlen: 24
                          123.63.32.0/21 maxlen: 24
                          123.63.40.0/21 maxlen: 24
                          123.63.48.0/21 maxlen: 24
                          123.63.56.0/21 maxlen: 24
                          123.63.64.0/21 maxlen: 24
                          123.63.72.0/21 maxlen: 24
                          123.63.80.0/21 maxlen: 24
                          123.63.88.0/21 maxlen: 24
                          123.63.96.0/21 maxlen: 24
                          123.63.104.0/21 maxlen: 24
                          123.63.112.0/21 maxlen: 24
                          123.63.120.0/21 maxlen: 24
                          123.63.128.0/20 maxlen: 24
                          123.63.144.0/21 maxlen: 24
                          123.63.152.0/21 maxlen: 24
                          123.63.160.0/21 maxlen: 24
                          123.63.168.0/21 maxlen: 24
                          123.63.176.0/21 maxlen: 24
                          123.63.184.0/21 maxlen: 24
                          123.63.192.0/21 maxlen: 24
                          123.63.200.0/21 maxlen: 24
                          123.63.208.0/21 maxlen: 24
                          123.63.216.0/21 maxlen: 24
                          123.63.224.0/21 maxlen: 24
                          123.63.232.0/21 maxlen: 24
                          123.63.240.0/21 maxlen: 24
                          123.63.248.0/21 maxlen: 24
                          124.247.192.0/24 maxlen: 24
                          124.247.194.0/24 maxlen: 24
                          124.247.198.0/24 maxlen: 24
                          124.247.199.0/24 maxlen: 24
                          124.247.201.0/24 maxlen: 24
                          124.247.203.0/24 maxlen: 24
                          124.247.204.0/24 maxlen: 24
                          124.247.205.0/24 maxlen: 24
                          182.19.0.0/20 maxlen: 24
                          182.19.16.0/20 maxlen: 24
                          182.19.32.0/20 maxlen: 24
                          182.19.48.0/20 maxlen: 20
                          182.19.48.0/24 maxlen: 24
                          182.19.49.0/24 maxlen: 24
                          182.19.52.0/24 maxlen: 24
                          182.19.53.0/24 maxlen: 24
                          182.19.54.0/24 maxlen: 24
                          182.19.55.0/24 maxlen: 24
                          182.19.56.0/24 maxlen: 24
                          182.19.57.0/24 maxlen: 24
                          182.19.58.0/24 maxlen: 24
                          182.19.59.0/24 maxlen: 24
                          182.19.60.0/24 maxlen: 24
                          182.19.61.0/24 maxlen: 24
                          182.19.62.0/24 maxlen: 24
                          182.19.63.0/24 maxlen: 24
                          182.19.64.0/20 maxlen: 24
                          182.19.80.0/21 maxlen: 24
                          182.19.88.0/21 maxlen: 21
                          182.19.88.0/24 maxlen: 24
                          182.19.89.0/24 maxlen: 24
                          182.19.90.0/24 maxlen: 24
                          182.19.91.0/24 maxlen: 24
                          182.19.93.0/24 maxlen: 24
                          182.19.94.0/24 maxlen: 24
                          182.19.95.0/24 maxlen: 24
                          2400:5200:401::/48 maxlen: 48
                          2400:5200:403::/48 maxlen: 48
                          2400:5200:404::/48 maxlen: 48
                          2400:5200:c00::/40 maxlen: 48
                          2400:5200:1000::/40 maxlen: 48
                          2400:5200:1400::/40 maxlen: 48
                          2400:5200:1800::/40 maxlen: 48
                          2400:5200:1c00::/40 maxlen: 48
                          2400:5200:2000::/36 maxlen: 48
                          2400:5200:3000::/36 maxlen: 48
                          2400:5200:4000::/36 maxlen: 48
                          2400:5200:5000::/36 maxlen: 48
                          2400:5200:6000::/36 maxlen: 48
                          2400:5200:7000::/36 maxlen: 48
                          2400:5200:8000::/36 maxlen: 48
                          2400:5200:9000::/36 maxlen: 48
                          2400:5200:a000::/36 maxlen: 48
                          2400:5200:b000::/36 maxlen: 48
                          2400:5200:c000::/36 maxlen: 48
                          2400:5200:d000::/36 maxlen: 48
                          2400:5200:e000::/36 maxlen: 48
                          2400:5200:f000::/36 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 778 (0x30a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
        Validity
            Not Before: Dec  1 11:32:28 2022 GMT
            Not After : Dec  1 00:00:00 2023 GMT
        Subject: CN=638890cc-fb35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0c:3d:29:4b:7c:e9:6d:a6:55:6b:bc:74:e0:
                    68:31:67:5e:71:8c:23:12:dc:17:0e:9f:33:de:cb:
                    54:8e:c0:4f:0b:34:aa:f7:18:48:b9:3d:3e:c0:5e:
                    d2:6d:3d:4a:8a:82:bb:12:01:3c:11:83:ba:a2:ad:
                    58:a7:92:c8:95:81:37:a1:09:f3:f0:2f:0b:a8:ec:
                    68:53:29:7a:16:b3:8b:80:07:7e:6a:d9:64:c4:65:
                    1b:29:d9:d6:11:65:af:35:e9:70:97:1f:c3:69:cb:
                    84:58:01:98:ba:2f:01:8a:0a:0e:0c:74:18:b7:ce:
                    43:18:ae:9a:85:64:65:82:f9:0a:64:05:3b:41:68:
                    12:1c:24:04:b2:1d:9e:c0:5d:e8:0e:47:30:a3:76:
                    49:d7:35:23:3c:0d:24:47:e9:83:50:c2:e9:4f:7f:
                    49:a1:09:cf:10:c6:6d:a0:ef:56:8d:9f:17:f6:fd:
                    b3:87:83:7b:32:68:98:c0:13:7f:f0:cd:71:0e:09:
                    c2:be:f8:6c:6d:7d:a5:b1:1d:a1:e2:21:20:49:e7:
                    d1:97:01:65:9f:25:1e:09:b5:2c:9b:e8:32:91:e4:
                    d8:79:f7:95:53:16:42:5b:50:4a:7e:d3:1b:37:82:
                    62:41:ff:98:66:dc:61:87:95:6b:d9:29:c5:08:50:
                    e4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:70:C9:E3:83:F2:CA:BD:2E:F2:8A:BC:B4:56:EA:9D:99:52:A2:B8
            X509v3 Authority Key Identifier:
                keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/2A1BE7DAC39B11EC9513D10BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.104.64.0/18
                  43.245.88.0/22
                  103.29.44.0/22
                  118.185.0.0/16
                  122.15.0.0-122.15.87.255
                  122.15.96.0-122.15.255.255
                  123.63.0.0/16
                  124.247.192.0/24
                  124.247.194.0/24
                  124.247.198.0/23
                  124.247.201.0/24
                  124.247.203.0-124.247.205.255
                  182.19.0.0-182.19.95.255
                IPv6:
                  2400:5200:401::/48
                  2400:5200:403::-2400:5200:404:ffff:ffff:ffff:ffff:ffff
                  2400:5200:c00::/40
                  2400:5200:1000::/40
                  2400:5200:1400::/40
                  2400:5200:1800::/40
                  2400:5200:1c00::/40
                  2400:5200:2000::-2400:5200:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         43:a9:5c:2f:af:a7:02:77:19:e0:9d:4f:51:3f:fe:fe:56:23:
         46:3e:04:36:85:2c:ad:a3:1b:1b:77:db:86:f3:77:35:c4:49:
         de:d7:e7:f3:22:66:3f:9f:e5:15:66:6a:3e:0d:be:ed:57:72:
         e2:c2:ae:a4:b3:8d:93:dd:66:82:1d:ac:fc:7d:e7:3f:0f:a9:
         4e:d3:d1:f8:a3:31:c8:84:39:51:aa:2d:94:1f:a0:0c:e8:ec:
         b7:91:95:9b:46:61:6f:32:a7:48:c4:98:9d:af:17:a7:b7:7e:
         df:6a:16:47:ff:e5:d8:4e:a6:51:40:cf:de:aa:8e:04:4c:e6:
         3d:76:c6:1e:2e:dc:17:2f:f3:50:82:6b:eb:90:65:44:90:4a:
         f1:47:2c:ff:44:66:81:98:21:60:64:68:e6:db:16:3d:c4:7d:
         65:02:0a:f2:8b:54:e6:e0:e9:f8:35:11:a6:77:7f:bd:90:df:
         ca:e5:96:98:cf:73:dc:01:15:99:f4:57:b3:97:6f:e1:ae:a3:
         a3:db:81:59:aa:d9:02:40:8e:9c:42:0f:a8:26:1c:0a:d5:b7:
         fd:f8:07:5d:bd:b1:14:dc:0f:88:c9:56:41:79:63:32:c9:07:
         ef:36:f0:8d:5b:5b:3a:12:a0:83:ea:83:bb:31:60:79:ad:38:
         77:e3:70:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:27 2024 by rpki-client on console-ams.rpki-client.org