Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/ECDFEEBC977611EBAEEB4777C4F9AE02.roa
File:                     ECDFEEBC977611EBAEEB4777C4F9AE02.roa (raw, json)
Hash identifier:          lx6Wixe1sCA2TS+7sU+IgmPnIVUX8duHZ1STnc5nrz8=
Subject key identifier:   1E:00:C6:B2:10:D8:5C:7C:E3:DD:6D:DD:71:16:90:E2:50:04:89:01
Certificate issuer:       /CN=A91D5606/serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
Certificate serial:       0319
Authority key identifier: 1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/ECDFEEBC977611EBAEEB4777C4F9AE02.roa
Signing time:             Fri 11 Mar 2022 01:50:25 +0000
ROA not before:           Fri 11 Mar 2022 01:50:25 +0000
ROA not after:            Fri 31 Mar 2023 00:00:00 +0000
asID:                     139282
IP address blocks:        103.162.50.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 793 (0x319)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5606/serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
        Validity
            Not Before: Mar 11 01:50:25 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=622aaae1-8bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ef:7e:2f:3d:71:e8:8b:b0:a0:c5:58:8f:24:
                    09:ad:59:38:94:e3:24:b0:56:3a:b7:cd:58:c8:e1:
                    11:5a:6d:5c:bf:bf:63:37:a6:4c:42:ff:67:14:1a:
                    b9:d0:51:af:ce:d7:13:5a:4f:8a:37:9b:f9:63:d9:
                    ba:97:b9:af:2f:3d:2f:0e:6c:3e:0d:a4:a1:9d:5f:
                    88:4a:ef:6f:09:00:6c:e0:e3:fb:08:78:26:10:67:
                    5b:8d:67:7c:58:43:3f:f9:a8:15:1b:7d:77:cb:e7:
                    3e:4d:b6:f0:47:a1:60:85:04:f4:92:4c:fc:90:9d:
                    ce:41:43:92:ad:87:cb:f9:0f:aa:7a:6b:2e:d6:28:
                    17:33:09:a6:20:0b:e7:82:a4:a5:16:df:3a:f4:e4:
                    fd:62:3d:de:a7:31:7f:96:75:3f:52:51:b4:ed:9b:
                    11:e8:38:f0:e6:b4:6b:2f:43:53:cd:5d:b2:7c:15:
                    a1:1a:ec:94:10:13:d5:55:a0:57:df:85:61:4a:75:
                    0c:57:a9:89:c7:1d:5b:11:5e:b0:d0:45:e1:de:51:
                    8c:05:00:f3:48:d0:13:5c:b7:0e:62:ea:24:a2:d8:
                    fb:41:17:27:a1:67:50:f7:e0:46:31:62:3b:35:1c:
                    b1:09:fc:f9:27:90:35:8c:b3:7c:11:36:83:bf:4a:
                    c6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:00:C6:B2:10:D8:5C:7C:E3:DD:6D:DD:71:16:90:E2:50:04:89:01
            X509v3 Authority Key Identifier:
                keyid:1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/ECDFEEBC977611EBAEEB4777C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:2a:93:25:27:e8:6c:39:97:68:4f:4f:3e:08:29:12:c4:dc:
         fa:c4:52:b2:18:fd:71:e0:e2:59:23:b5:8b:e9:36:67:dc:26:
         d6:1b:ed:d7:c4:8e:a3:5f:1a:7a:d3:88:ab:ba:5e:ad:e7:5a:
         28:93:d7:4d:81:ca:9f:6e:a7:49:2f:32:50:27:e3:4a:81:06:
         88:f9:d1:2f:e9:a5:57:b5:54:07:e6:50:4c:c1:19:b3:31:ca:
         5d:f0:2b:86:ad:7d:48:4a:7e:e5:80:eb:f6:52:9c:cf:36:48:
         58:83:51:f6:fc:40:ac:7e:8d:92:b8:c7:86:c1:f8:1b:39:97:
         65:b2:a7:fd:e6:70:e0:cb:ef:2b:1a:24:2a:ee:3a:b1:00:81:
         de:90:25:d4:6c:ac:5c:cc:32:1d:4b:06:a3:4b:2e:5c:92:e7:
         01:18:9b:07:f5:1d:03:11:48:f4:55:17:5f:d8:be:c0:1b:05:
         c1:f4:93:d6:67:2c:16:59:ab:bf:a1:71:b5:f5:9c:c2:a9:bc:
         eb:84:3a:bd:93:54:f5:48:80:42:5e:4b:f8:02:c7:ab:3c:ad:
         2f:a5:03:02:3c:8d:fa:0c:8d:19:86:44:0e:df:2a:70:08:d5:
         c9:70:56:30:5e:75:ab:e6:f2:28:c1:61:68:5b:11:1e:b8:39:
         cf:76:e7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:42 2024 by rpki-client on console-fra.rpki-client.org