Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/0453D7FA6AC811ECA08A6561C4F9AE02.roa
File:                     0453D7FA6AC811ECA08A6561C4F9AE02.roa (raw, json)
Hash identifier:          KVQkoWlbQIzNVFbuX05gt4xLzJGqiBepv8+ROShmLxE=
Subject key identifier:   C8:00:B4:44:32:A4:80:ED:C5:01:2A:28:6E:82:3D:BF:DF:5B:55:97
Certificate issuer:       /CN=A91D5606/serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
Certificate serial:       0318
Authority key identifier: 1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/0453D7FA6AC811ECA08A6561C4F9AE02.roa
Signing time:             Fri 11 Mar 2022 01:50:24 +0000
ROA not before:           Fri 11 Mar 2022 01:50:24 +0000
ROA not after:            Fri 31 Mar 2023 00:00:00 +0000
asID:                     134806
IP address blocks:        103.162.51.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 792 (0x318)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5606/serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
        Validity
            Not Before: Mar 11 01:50:24 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=622aaae0-4367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1c:4b:e5:9f:cf:0f:50:b4:54:cf:f4:f1:97:
                    ab:dc:c0:0d:87:53:03:52:a9:5f:78:9f:98:bd:24:
                    28:a6:e4:19:2c:82:1f:88:d1:7a:3f:4b:fe:c4:e6:
                    a2:f7:4a:a7:81:75:ef:e2:53:0d:3a:9f:0f:58:fc:
                    d7:96:b8:5e:97:5e:a7:aa:b4:26:be:78:bd:82:ac:
                    3d:57:4f:ed:75:76:bf:a4:f6:ff:95:03:5e:0d:a3:
                    96:23:59:b2:6d:bb:c4:95:49:b5:b3:00:ab:77:28:
                    09:da:51:4a:9a:5e:ec:6d:1d:75:33:08:af:30:97:
                    60:f0:43:98:dc:e4:ab:08:d3:29:d3:dd:7b:7f:b3:
                    b7:c9:46:1f:e2:4b:9c:84:f5:1a:0c:d2:72:2f:25:
                    0c:da:6f:3f:0d:2a:eb:88:5d:b9:19:f7:8e:89:6e:
                    d6:b7:e6:9d:d5:e6:da:a4:fd:1b:1d:1b:21:5d:8c:
                    6d:c0:9d:30:7b:9a:fa:95:fd:d4:14:6f:52:0c:a1:
                    24:54:7b:6c:e1:28:7d:c0:2b:fc:fd:b9:d7:a2:d5:
                    23:33:37:43:25:9c:70:de:6f:b3:52:8e:25:a4:ad:
                    05:9f:bb:95:71:40:3f:23:ba:ff:da:aa:72:21:f6:
                    37:c4:3a:f1:4c:03:ef:19:49:68:76:d6:56:f9:fe:
                    77:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:00:B4:44:32:A4:80:ED:C5:01:2A:28:6E:82:3D:BF:DF:5B:55:97
            X509v3 Authority Key Identifier:
                keyid:1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/0453D7FA6AC811ECA08A6561C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:d4:8e:cc:ad:5d:97:aa:d2:50:d1:5b:80:80:b4:7c:2e:b5:
         70:eb:ad:8a:0f:f7:4a:0c:af:29:c0:24:51:47:34:94:aa:9e:
         22:37:07:a9:8f:00:91:96:e3:7c:01:a5:33:1f:37:a8:c8:22:
         03:85:29:e5:0f:93:ec:1a:24:c5:21:5e:8e:e8:bf:18:5c:78:
         71:ab:f1:a6:09:00:8d:56:d6:c0:de:cc:1d:5d:fb:5a:86:a6:
         b2:13:03:10:f6:e6:79:a3:92:ec:e3:1c:e0:b3:63:e1:d4:4f:
         3e:ec:1a:f5:57:5e:ca:32:61:8b:95:ef:29:5c:4c:56:5a:8e:
         11:48:f6:9f:5a:13:a1:5c:9d:4d:08:96:ce:ac:09:0f:49:91:
         90:35:00:65:a4:d7:a0:c3:86:9a:a5:46:73:69:0b:03:e4:f5:
         28:f7:38:ca:c9:44:3a:21:22:84:fa:d8:3b:14:d8:54:55:35:
         c7:32:0f:dc:7c:22:dc:8c:8b:75:ad:e8:b4:c3:c4:1d:a7:72:
         dc:d1:db:3f:6c:6f:f8:e2:48:9c:8b:8d:52:0d:ab:bc:f6:b4:
         f6:1b:b8:ce:81:14:bd:f6:d0:a3:63:f0:53:66:0a:d5:5c:02:
         3c:4e:00:46:81:b0:ac:ea:71:77:9d:f4:cf:95:b4:53:05:1a:
         b4:a6:68:41
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDU2MDYxMTAvBgNVBAUTKDFFMTZGODNEMEM0MDMzNUQ3OTZCRTVCQTIxQzkwQ0JF
RTk5NzU5QkMwHhcNMjIwMzExMDE1MDI0WhcNMjMwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjJhYWFlMC00MzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAphxL5Z/PD1C0VM/08Zer3MANh1MDUqlfeJ+YvSQopuQZLIIfiNF6P0v+xOai
90qngXXv4lMNOp8PWPzXlrhel16nqrQmvni9gqw9V0/tdXa/pPb/lQNeDaOWI1my
bbvElUm1swCrdygJ2lFKml7sbR11MwivMJdg8EOY3OSrCNMp0917f7O3yUYf4kuc
hPUaDNJyLyUM2m8/DSrriF25GfeOiW7Wt+ad1ebapP0bHRshXYxtwJ0we5r6lf3U
FG9SDKEkVHts4Sh9wCv8/bnXotUjMzdDJZxw3m+zUo4lpK0Fn7uVcUA/I7r/2qpy
IfY3xDrxTAPvGUlodtZW+f53mQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMgAtEQy
pIDtxQEqKG6CPb/fW1WXMB8GA1UdIwQYMBaAFB4W+D0MQDNdeWvluiHJDL7pl1m8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTYwNi85NDBDNUQ5Qzcx
MDIxMUVCODcwNzNCNzBDNEY5QUUwMi9IaGI0UFF4QU0xMTVhLVc2SWNrTXZ1bVhX
YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hoYjRQUXhBTTExNWEtVzZJY2tNdnVtWFdidy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDU2MDYvOTQwQzVEOUM3MTAyMTFFQjg3MDczQjcwQzRGOUFFMDIvMDQ1M0Q3RkE2
QUM4MTFFQ0EwOEE2NTYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnojMwDQYJKoZIhvcNAQELBQADggEBADnUjsytXZeq0lDR
W4CAtHwutXDrrYoP90oMrynAJFFHNJSqniI3B6mPAJGW43wBpTMfN6jIIgOFKeUP
k+waJMUhXo7ovxhceHGr8aYJAI1W1sDezB1d+1qGprITAxD25nmjkuzjHOCzY+HU
Tz7sGvVXXsoyYYuV7ylcTFZajhFI9p9aE6FcnU0Ils6sCQ9JkZA1AGWk16DDhpql
RnNpCwPk9Sj3OMrJRDohIoT62DsU2FRVNccyD9x8ItyMi3Wt6LTDxB2nctzR2z9s
b/jiSJyLjVINq7z2tPYbuM6BFL320KNj8FNmCtVcAjxOAEaBsKzqcXed9M+VtFMF
GrSmaEE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:42 2024 by rpki-client on console-fra.rpki-client.org