Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/CE2D52B2867A11EDA90A6D3AC4F9AE02.roa
File:                     CE2D52B2867A11EDA90A6D3AC4F9AE02.roa (raw, json)
Hash identifier:          Q9wZjk4Rq1EMzvQdIzY0ja9PWd29SRXro9eGiaDL5nI=
Subject key identifier:   52:B2:41:D9:CB:DB:3E:9C:3E:5B:8B:A1:F4:08:59:1C:45:A1:58:10
Certificate issuer:       /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial:       03F0
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/CE2D52B2867A11EDA90A6D3AC4F9AE02.roa
Signing time:             Fri 03 Nov 2023 02:34:43 +0000
ROA not before:           Fri 03 Nov 2023 02:34:43 +0000
ROA not after:            Fri 01 Mar 2024 00:00:00 +0000
asID:                     55410
IP address blocks:        42.104.64.0/21 maxlen: 24
                          42.104.72.0/21 maxlen: 24
                          42.104.80.0/21 maxlen: 24
                          42.104.88.0/21 maxlen: 24
                          42.104.96.0/21 maxlen: 24
                          42.104.104.0/21 maxlen: 24
                          42.104.112.0/21 maxlen: 24
                          42.104.120.0/21 maxlen: 24
                          43.245.88.0/22 maxlen: 24
                          103.29.44.0/22 maxlen: 24
                          118.185.0.0/16 maxlen: 16
                          118.185.0.0/21 maxlen: 24
                          118.185.8.0/21 maxlen: 24
                          118.185.16.0/21 maxlen: 24
                          118.185.24.0/21 maxlen: 21
                          118.185.24.0/24 maxlen: 24
                          118.185.25.0/24 maxlen: 24
                          118.185.26.0/24 maxlen: 24
                          118.185.27.0/24 maxlen: 24
                          118.185.28.0/24 maxlen: 24
                          118.185.29.0/24 maxlen: 24
                          118.185.30.0/24 maxlen: 24
                          118.185.31.0/24 maxlen: 24
                          118.185.32.0/21 maxlen: 24
                          118.185.40.0/21 maxlen: 24
                          118.185.48.0/21 maxlen: 24
                          118.185.56.0/21 maxlen: 24
                          118.185.64.0/21 maxlen: 24
                          118.185.72.0/21 maxlen: 24
                          118.185.80.0/21 maxlen: 24
                          118.185.88.0/21 maxlen: 24
                          118.185.96.0/21 maxlen: 21
                          118.185.97.0/24 maxlen: 24
                          118.185.98.0/24 maxlen: 24
                          118.185.99.0/24 maxlen: 24
                          118.185.100.0/24 maxlen: 24
                          118.185.101.0/24 maxlen: 24
                          118.185.102.0/24 maxlen: 24
                          118.185.103.0/24 maxlen: 24
                          118.185.104.0/21 maxlen: 24
                          118.185.112.0/21 maxlen: 24
                          118.185.120.0/21 maxlen: 24
                          118.185.128.0/20 maxlen: 21
                          118.185.128.0/24 maxlen: 24
                          118.185.129.0/24 maxlen: 24
                          118.185.130.0/24 maxlen: 24
                          118.185.131.0/24 maxlen: 24
                          118.185.132.0/24 maxlen: 24
                          118.185.133.0/24 maxlen: 24
                          118.185.134.0/24 maxlen: 24
                          118.185.135.0/24 maxlen: 24
                          118.185.136.0/24 maxlen: 24
                          118.185.138.0/24 maxlen: 24
                          118.185.139.0/24 maxlen: 24
                          118.185.140.0/24 maxlen: 24
                          118.185.141.0/24 maxlen: 24
                          118.185.142.0/24 maxlen: 24
                          118.185.143.0/24 maxlen: 24
                          118.185.144.0/21 maxlen: 24
                          118.185.152.0/21 maxlen: 24
                          118.185.160.0/21 maxlen: 24
                          118.185.168.0/21 maxlen: 24
                          118.185.176.0/21 maxlen: 24
                          118.185.184.0/21 maxlen: 24
                          118.185.192.0/21 maxlen: 24
                          118.185.200.0/21 maxlen: 24
                          118.185.208.0/21 maxlen: 24
                          118.185.216.0/21 maxlen: 24
                          118.185.224.0/21 maxlen: 24
                          118.185.232.0/21 maxlen: 24
                          118.185.240.0/21 maxlen: 24
                          118.185.248.0/21 maxlen: 24
                          122.15.0.0/16 maxlen: 16
                          122.15.0.0/21 maxlen: 24
                          122.15.8.0/21 maxlen: 24
                          122.15.16.0/21 maxlen: 24
                          122.15.24.0/21 maxlen: 24
                          122.15.32.0/21 maxlen: 24
                          122.15.40.0/21 maxlen: 24
                          122.15.48.0/21 maxlen: 24
                          122.15.56.0/21 maxlen: 24
                          122.15.64.0/21 maxlen: 24
                          122.15.72.0/21 maxlen: 24
                          122.15.80.0/21 maxlen: 24
                          122.15.88.0/21 maxlen: 24
                          122.15.96.0/21 maxlen: 24
                          122.15.104.0/21 maxlen: 24
                          122.15.112.0/21 maxlen: 24
                          122.15.120.0/21 maxlen: 24
                          122.15.128.0/21 maxlen: 24
                          122.15.136.0/21 maxlen: 24
                          122.15.144.0/21 maxlen: 24
                          122.15.152.0/21 maxlen: 24
                          122.15.160.0/21 maxlen: 24
                          122.15.168.0/21 maxlen: 24
                          122.15.176.0/21 maxlen: 24
                          122.15.184.0/21 maxlen: 24
                          122.15.192.0/21 maxlen: 24
                          122.15.200.0/21 maxlen: 24
                          122.15.208.0/21 maxlen: 24
                          122.15.216.0/21 maxlen: 24
                          122.15.224.0/21 maxlen: 24
                          122.15.232.0/21 maxlen: 24
                          122.15.240.0/21 maxlen: 21
                          122.15.248.0/21 maxlen: 24
                          123.63.0.0/16 maxlen: 16
                          123.63.0.0/21 maxlen: 24
                          123.63.8.0/21 maxlen: 24
                          123.63.16.0/21 maxlen: 24
                          123.63.24.0/21 maxlen: 24
                          123.63.32.0/21 maxlen: 24
                          123.63.40.0/21 maxlen: 24
                          123.63.48.0/21 maxlen: 24
                          123.63.56.0/21 maxlen: 24
                          123.63.64.0/21 maxlen: 24
                          123.63.72.0/21 maxlen: 24
                          123.63.80.0/21 maxlen: 24
                          123.63.88.0/21 maxlen: 24
                          123.63.96.0/21 maxlen: 24
                          123.63.104.0/21 maxlen: 24
                          123.63.112.0/21 maxlen: 24
                          123.63.120.0/21 maxlen: 24
                          123.63.128.0/18 maxlen: 18
                          123.63.128.0/20 maxlen: 24
                          123.63.144.0/21 maxlen: 24
                          123.63.152.0/21 maxlen: 24
                          123.63.160.0/19 maxlen: 19
                          123.63.160.0/21 maxlen: 24
                          123.63.168.0/21 maxlen: 24
                          123.63.176.0/21 maxlen: 24
                          123.63.184.0/21 maxlen: 24
                          123.63.192.0/18 maxlen: 18
                          123.63.192.0/21 maxlen: 24
                          123.63.200.0/21 maxlen: 24
                          123.63.208.0/21 maxlen: 24
                          123.63.216.0/21 maxlen: 24
                          123.63.224.0/19 maxlen: 19
                          123.63.224.0/21 maxlen: 24
                          123.63.232.0/21 maxlen: 24
                          123.63.240.0/21 maxlen: 24
                          123.63.248.0/21 maxlen: 24
                          124.247.192.0/24 maxlen: 24
                          124.247.194.0/24 maxlen: 24
                          124.247.198.0/24 maxlen: 24
                          124.247.199.0/24 maxlen: 24
                          124.247.201.0/24 maxlen: 24
                          124.247.203.0/24 maxlen: 24
                          124.247.204.0/24 maxlen: 24
                          124.247.205.0/24 maxlen: 24
                          182.19.0.0/19 maxlen: 19
                          182.19.0.0/20 maxlen: 24
                          182.19.16.0/20 maxlen: 24
                          182.19.32.0/19 maxlen: 19
                          182.19.32.0/20 maxlen: 24
                          182.19.48.0/20 maxlen: 24
                          182.19.64.0/20 maxlen: 24
                          182.19.80.0/21 maxlen: 24
                          182.19.88.0/21 maxlen: 21
                          182.19.88.0/24 maxlen: 24
                          182.19.89.0/24 maxlen: 24
                          182.19.90.0/24 maxlen: 24
                          182.19.91.0/24 maxlen: 24
                          182.19.93.0/24 maxlen: 24
                          182.19.94.0/24 maxlen: 24
                          182.19.95.0/24 maxlen: 24
                          182.19.96.0/19 maxlen: 24
                          2400:5200:401::/48 maxlen: 48
                          2400:5200:402::/48 maxlen: 48
                          2400:5200:403::/48 maxlen: 48
                          2400:5200:404::/48 maxlen: 48
                          2400:5200:c00::/40 maxlen: 48
                          2400:5200:1000::/40 maxlen: 48
                          2400:5200:1400::/40 maxlen: 48
                          2400:5200:1800::/40 maxlen: 48
                          2400:5200:1c00::/40 maxlen: 48
                          2400:5200:2000::/36 maxlen: 48
                          2400:5200:3000::/36 maxlen: 48
                          2400:5200:4000::/36 maxlen: 48
                          2400:5200:5000::/36 maxlen: 48
                          2400:5200:6000::/36 maxlen: 48
                          2400:5200:7000::/36 maxlen: 48
                          2400:5200:8000::/36 maxlen: 48
                          2400:5200:9000::/36 maxlen: 48
                          2400:5200:a000::/36 maxlen: 48
                          2400:5200:b000::/36 maxlen: 48
                          2400:5200:c000::/36 maxlen: 48
                          2400:5200:d000::/36 maxlen: 48
                          2400:5200:e000::/36 maxlen: 48
                          2400:5200:f000::/36 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1008 (0x3f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
        Validity
            Not Before: Nov  3 02:34:43 2023 GMT
            Not After : Mar  1 00:00:00 2024 GMT
        Subject: CN=65445c42-809d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:26:09:d3:ff:b5:63:2e:0d:ab:46:28:cd:42:
                    42:ef:2d:1d:4c:a2:e4:00:9b:8c:a1:90:f7:db:71:
                    59:88:9d:e7:2b:1f:49:53:bf:04:f9:33:d5:6c:56:
                    01:82:fa:28:3b:99:cd:7d:ce:13:2d:2a:a6:8f:f6:
                    3b:d7:ee:58:87:dd:b0:bc:3a:3f:63:68:cc:81:de:
                    92:50:09:be:78:5f:f6:87:f8:ab:b9:51:3e:91:99:
                    b0:0b:2b:04:02:5f:23:a6:64:7c:12:86:7f:a3:14:
                    55:cc:89:1d:35:85:f8:89:ec:75:e2:69:cd:c1:af:
                    a6:59:28:fd:e1:ee:e2:11:55:04:11:c4:60:20:8b:
                    ae:44:8f:09:fd:62:08:a0:b7:54:b2:a1:c9:84:db:
                    05:bb:3c:d1:06:13:c4:4f:76:1a:08:5a:e2:5c:9a:
                    b6:44:2a:90:46:32:63:49:eb:5e:e4:a8:49:b8:9d:
                    2e:6a:70:bb:e4:b4:49:75:b3:7c:6d:42:a9:87:3a:
                    3b:e1:3a:db:bb:ac:9a:59:62:ee:45:ba:2b:ff:99:
                    e4:a6:71:e5:bb:4e:b2:d0:7e:89:fb:8b:4a:59:66:
                    25:d6:1b:49:d8:09:c8:8d:74:d8:0e:65:5c:25:4a:
                    98:fc:84:fa:44:a9:53:04:f7:ae:f1:d8:f0:53:c0:
                    51:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B2:41:D9:CB:DB:3E:9C:3E:5B:8B:A1:F4:08:59:1C:45:A1:58:10
            X509v3 Authority Key Identifier:
                keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/CE2D52B2867A11EDA90A6D3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.104.64.0/18
                  43.245.88.0/22
                  103.29.44.0/22
                  118.185.0.0/16
                  122.15.0.0/16
                  123.63.0.0/16
                  124.247.192.0/24
                  124.247.194.0/24
                  124.247.198.0/23
                  124.247.201.0/24
                  124.247.203.0-124.247.205.255
                  182.19.0.0/17
                IPv6:
                  2400:5200:401::-2400:5200:404:ffff:ffff:ffff:ffff:ffff
                  2400:5200:c00::/40
                  2400:5200:1000::/40
                  2400:5200:1400::/40
                  2400:5200:1800::/40
                  2400:5200:1c00::/40
                  2400:5200:2000::-2400:5200:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         93:0c:fa:51:25:0c:b7:ff:7f:8c:85:3a:58:a8:b8:8c:9d:6e:
         01:2c:d5:1f:bf:f8:ca:06:ac:3c:82:42:b1:32:1e:c0:84:2a:
         25:f9:ff:2f:45:ab:1c:aa:04:05:cb:f2:65:92:30:c8:a1:95:
         e7:93:1e:bc:5f:8d:fe:fc:0d:ee:96:88:5c:5a:17:68:30:20:
         41:b4:a8:b9:19:4b:17:f0:8e:94:81:bc:8a:e5:a2:81:63:bd:
         10:7e:0f:39:9e:1b:35:1d:a9:07:82:44:e1:d1:43:58:dd:17:
         37:d7:5d:8c:71:b2:8b:a2:61:f6:04:85:95:db:cb:43:60:09:
         ce:ed:b8:63:2e:c9:1c:f2:64:23:0a:99:71:2b:e9:df:24:6c:
         68:ac:6a:0f:ba:0e:7c:51:82:41:77:43:17:fb:a5:83:9e:81:
         7f:47:b7:cb:9d:5b:e8:fb:4c:29:4a:af:f5:f4:ea:f8:08:28:
         3d:8c:72:65:c5:69:58:d0:87:0c:22:e4:d5:e9:a4:9a:df:ab:
         94:dc:50:d2:73:3a:ec:93:9d:ea:40:68:e1:6e:c3:cf:6d:1c:
         8e:9f:ff:63:ec:04:c1:e9:1b:48:a0:98:4d:b0:d9:c0:6f:6e:
         68:d9:c7:b1:2d:bd:7b:2a:d7:d6:a4:1b:a1:57:ee:ef:2f:84:
         77:68:93:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:41 2024 by rpki-client on console-fra.rpki-client.org