Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/4BD87990A37C11ECA208FE7EC4F9AE02.roa
File:                     4BD87990A37C11ECA208FE7EC4F9AE02.roa (raw, json)
Hash identifier:          JJF1R5w8K9GossKxlyJ/tGH34YtbfihJ+qrUrW5r9sI=
Subject key identifier:   73:88:C9:1A:76:07:3A:A9:52:DF:D6:19:6E:D3:3F:57:43:15:66:B5
Certificate issuer:       /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Certificate serial:       030A
Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/4BD87990A37C11ECA208FE7EC4F9AE02.roa
Signing time:             Mon 14 Mar 2022 09:51:19 +0000
ROA not before:           Mon 14 Mar 2022 09:51:19 +0000
ROA not after:            Fri 31 Mar 2023 00:00:00 +0000
asID:                     0
IP address blocks:        166.81.0.0/24 maxlen: 24
                          166.81.1.0/24 maxlen: 24
                          166.81.3.0/24 maxlen: 24
                          166.81.4.0/24 maxlen: 24
                          166.81.7.0/24 maxlen: 24
                          166.81.8.0/24 maxlen: 24
                          166.81.31.0/24 maxlen: 24
                          166.81.36.0/24 maxlen: 24
                          166.81.37.0/24 maxlen: 24
                          166.81.39.0/24 maxlen: 24
                          166.81.40.0/24 maxlen: 24
                          166.81.41.0/24 maxlen: 24
                          166.81.42.0/24 maxlen: 24
                          166.81.43.0/24 maxlen: 24
                          166.81.44.0/24 maxlen: 24
                          166.81.45.0/24 maxlen: 24
                          166.81.46.0/24 maxlen: 24
                          166.81.47.0/24 maxlen: 24
                          166.81.48.0/24 maxlen: 24
                          166.81.49.0/24 maxlen: 24
                          166.81.50.0/24 maxlen: 24
                          166.81.60.0/24 maxlen: 24
                          166.81.61.0/24 maxlen: 24
                          166.81.62.0/24 maxlen: 24
                          166.81.63.0/24 maxlen: 24
                          166.81.65.0/24 maxlen: 24
                          166.81.66.0/24 maxlen: 24
                          166.81.67.0/24 maxlen: 24
                          166.81.68.0/24 maxlen: 24
                          166.81.69.0/24 maxlen: 24
                          166.81.70.0/24 maxlen: 24
                          166.81.71.0/24 maxlen: 24
                          166.81.72.0/24 maxlen: 24
                          166.81.73.0/24 maxlen: 24
                          166.81.74.0/24 maxlen: 24
                          166.81.75.0/24 maxlen: 24
                          166.81.76.0/24 maxlen: 24
                          166.81.77.0/24 maxlen: 24
                          166.81.78.0/24 maxlen: 24
                          166.81.79.0/24 maxlen: 24
                          166.81.80.0/24 maxlen: 24
                          166.81.81.0/24 maxlen: 24
                          166.81.82.0/24 maxlen: 24
                          166.81.83.0/24 maxlen: 24
                          166.81.84.0/24 maxlen: 24
                          166.81.85.0/24 maxlen: 24
                          166.81.86.0/24 maxlen: 24
                          166.81.87.0/24 maxlen: 24
                          166.81.88.0/24 maxlen: 24
                          166.81.89.0/24 maxlen: 24
                          166.81.90.0/24 maxlen: 24
                          166.81.91.0/24 maxlen: 24
                          166.81.92.0/24 maxlen: 24
                          166.81.93.0/24 maxlen: 24
                          166.81.94.0/24 maxlen: 24
                          166.81.95.0/24 maxlen: 24
                          166.81.96.0/24 maxlen: 24
                          166.81.97.0/24 maxlen: 24
                          166.81.98.0/24 maxlen: 24
                          166.81.99.0/24 maxlen: 24
                          166.81.100.0/24 maxlen: 24
                          166.81.101.0/24 maxlen: 24
                          166.81.102.0/24 maxlen: 24
                          166.81.103.0/24 maxlen: 24
                          166.81.104.0/24 maxlen: 24
                          166.81.105.0/24 maxlen: 24
                          166.81.106.0/24 maxlen: 24
                          166.81.107.0/24 maxlen: 24
                          166.81.108.0/24 maxlen: 24
                          166.81.109.0/24 maxlen: 24
                          166.81.110.0/24 maxlen: 24
                          166.81.111.0/24 maxlen: 24
                          166.81.112.0/24 maxlen: 24
                          166.81.113.0/24 maxlen: 24
                          166.81.114.0/24 maxlen: 24
                          166.81.115.0/24 maxlen: 24
                          166.81.116.0/24 maxlen: 24
                          166.81.117.0/24 maxlen: 24
                          166.81.118.0/24 maxlen: 24
                          166.81.119.0/24 maxlen: 24
                          166.81.120.0/24 maxlen: 24
                          166.81.121.0/24 maxlen: 24
                          166.81.122.0/24 maxlen: 24
                          166.81.123.0/24 maxlen: 24
                          166.81.124.0/24 maxlen: 24
                          166.81.125.0/24 maxlen: 24
                          166.81.126.0/24 maxlen: 24
                          166.81.127.0/24 maxlen: 24
                          166.81.128.0/24 maxlen: 24
                          166.81.129.0/24 maxlen: 24
                          166.81.130.0/24 maxlen: 24
                          166.81.131.0/24 maxlen: 24
                          166.81.132.0/24 maxlen: 24
                          166.81.133.0/24 maxlen: 24
                          166.81.134.0/24 maxlen: 24
                          166.81.135.0/24 maxlen: 24
                          166.81.136.0/24 maxlen: 24
                          166.81.137.0/24 maxlen: 24
                          166.81.138.0/24 maxlen: 24
                          166.81.139.0/24 maxlen: 24
                          166.81.140.0/24 maxlen: 24
                          166.81.141.0/24 maxlen: 24
                          166.81.142.0/24 maxlen: 24
                          166.81.143.0/24 maxlen: 24
                          166.81.144.0/24 maxlen: 24
                          166.81.145.0/24 maxlen: 24
                          166.81.146.0/24 maxlen: 24
                          166.81.147.0/24 maxlen: 24
                          166.81.148.0/24 maxlen: 24
                          166.81.149.0/24 maxlen: 24
                          166.81.150.0/24 maxlen: 24
                          166.81.151.0/24 maxlen: 24
                          166.81.152.0/24 maxlen: 24
                          166.81.153.0/24 maxlen: 24
                          166.81.154.0/24 maxlen: 24
                          166.81.155.0/24 maxlen: 24
                          166.81.156.0/24 maxlen: 24
                          166.81.157.0/24 maxlen: 24
                          166.81.158.0/24 maxlen: 24
                          166.81.159.0/24 maxlen: 24
                          166.81.160.0/24 maxlen: 24
                          166.81.161.0/24 maxlen: 24
                          166.81.162.0/24 maxlen: 24
                          166.81.163.0/24 maxlen: 24
                          166.81.164.0/24 maxlen: 24
                          166.81.165.0/24 maxlen: 24
                          166.81.166.0/24 maxlen: 24
                          166.81.167.0/24 maxlen: 24
                          166.81.168.0/24 maxlen: 24
                          166.81.169.0/24 maxlen: 24
                          166.81.170.0/24 maxlen: 24
                          166.81.171.0/24 maxlen: 24
                          166.81.172.0/24 maxlen: 24
                          166.81.173.0/24 maxlen: 24
                          166.81.174.0/24 maxlen: 24
                          166.81.175.0/24 maxlen: 24
                          166.81.176.0/24 maxlen: 24
                          166.81.177.0/24 maxlen: 24
                          166.81.178.0/24 maxlen: 24
                          166.81.179.0/24 maxlen: 24
                          166.81.180.0/24 maxlen: 24
                          166.81.181.0/24 maxlen: 24
                          166.81.182.0/24 maxlen: 24
                          166.81.183.0/24 maxlen: 24
                          166.81.184.0/24 maxlen: 24
                          166.81.185.0/24 maxlen: 24
                          166.81.186.0/24 maxlen: 24
                          166.81.187.0/24 maxlen: 24
                          166.81.188.0/24 maxlen: 24
                          166.81.189.0/24 maxlen: 24
                          166.81.190.0/24 maxlen: 24
                          166.81.191.0/24 maxlen: 24
                          166.81.192.0/24 maxlen: 24
                          166.81.193.0/24 maxlen: 24
                          166.81.194.0/24 maxlen: 24
                          166.81.195.0/24 maxlen: 24
                          166.81.196.0/24 maxlen: 24
                          166.81.197.0/24 maxlen: 24
                          166.81.198.0/24 maxlen: 24
                          166.81.199.0/24 maxlen: 24
                          166.81.200.0/24 maxlen: 24
                          166.81.201.0/24 maxlen: 24
                          166.81.202.0/24 maxlen: 24
                          166.81.203.0/24 maxlen: 24
                          166.81.204.0/24 maxlen: 24
                          166.81.205.0/24 maxlen: 24
                          166.81.206.0/24 maxlen: 24
                          166.81.207.0/24 maxlen: 24
                          166.81.208.0/24 maxlen: 24
                          166.81.209.0/24 maxlen: 24
                          166.81.210.0/24 maxlen: 24
                          166.81.211.0/24 maxlen: 24
                          166.81.212.0/24 maxlen: 24
                          166.81.213.0/24 maxlen: 24
                          166.81.214.0/24 maxlen: 24
                          166.81.215.0/24 maxlen: 24
                          166.81.216.0/24 maxlen: 24
                          166.81.217.0/24 maxlen: 24
                          166.81.218.0/24 maxlen: 24
                          166.81.219.0/24 maxlen: 24
                          166.81.220.0/24 maxlen: 24
                          166.81.221.0/24 maxlen: 24
                          166.81.222.0/24 maxlen: 24
                          166.81.223.0/24 maxlen: 24
                          166.81.224.0/24 maxlen: 24
                          166.81.225.0/24 maxlen: 24
                          166.81.226.0/24 maxlen: 24
                          166.81.227.0/24 maxlen: 24
                          166.81.228.0/24 maxlen: 24
                          166.81.229.0/24 maxlen: 24
                          166.81.230.0/24 maxlen: 24
                          166.81.231.0/24 maxlen: 24
                          166.81.232.0/24 maxlen: 24
                          166.81.233.0/24 maxlen: 24
                          166.81.234.0/24 maxlen: 24
                          166.81.235.0/24 maxlen: 24
                          166.81.236.0/24 maxlen: 24
                          166.81.237.0/24 maxlen: 24
                          166.81.238.0/24 maxlen: 24
                          166.81.239.0/24 maxlen: 24
                          166.81.240.0/24 maxlen: 24
                          166.81.241.0/24 maxlen: 24
                          166.81.242.0/24 maxlen: 24
                          166.81.243.0/24 maxlen: 24
                          166.81.244.0/24 maxlen: 24
                          166.81.245.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 778 (0x30a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
        Validity
            Not Before: Mar 14 09:51:19 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=622f1016-7689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9b:80:dc:12:20:67:13:ba:98:ce:65:2b:a8:
                    7c:1c:cd:72:75:d5:f3:ba:ee:52:3f:e9:21:54:45:
                    6d:a6:10:2f:8e:20:18:fe:9c:f0:c9:94:61:77:73:
                    6e:4a:70:83:86:ad:0f:a3:0f:d5:ec:52:d8:ee:a1:
                    6a:f4:76:70:c6:12:89:57:51:98:4c:76:c5:3f:9d:
                    9c:f5:90:7d:9d:12:13:03:79:4c:f8:8d:f3:5b:e8:
                    1f:41:3d:18:10:0d:7a:cd:26:e5:da:8d:bd:32:b1:
                    42:78:bf:79:4a:da:ea:a4:78:e4:76:d6:24:6f:e6:
                    40:b6:78:e0:35:d9:65:45:da:03:c3:5b:19:fe:03:
                    51:74:64:f6:15:07:27:3d:81:f5:0d:f5:c5:3a:08:
                    89:62:40:9c:c0:3d:2f:54:64:c4:74:9b:f8:3b:e2:
                    d1:39:9d:9d:f7:0b:f1:dd:dd:45:81:81:74:56:73:
                    d9:00:66:e3:15:0a:e9:ef:6a:34:2a:c8:7b:3f:df:
                    11:83:e1:d8:9d:5d:e2:34:11:8a:01:75:76:dd:03:
                    f2:ba:27:7e:d6:d7:14:96:04:d8:e6:07:be:df:fb:
                    89:7a:5b:02:95:21:14:2a:c4:cd:1a:ab:55:f0:72:
                    94:77:88:64:4c:3d:8e:58:6e:79:4a:68:fc:92:76:
                    87:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:88:C9:1A:76:07:3A:A9:52:DF:D6:19:6E:D3:3F:57:43:15:66:B5
            X509v3 Authority Key Identifier:
                keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/4BD87990A37C11ECA208FE7EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.81.0.0/23
                  166.81.3.0-166.81.4.255
                  166.81.7.0-166.81.8.255
                  166.81.31.0/24
                  166.81.36.0/23
                  166.81.39.0-166.81.50.255
                  166.81.60.0/22
                  166.81.65.0-166.81.245.255

    Signature Algorithm: sha256WithRSAEncryption
         14:05:73:64:6d:c3:58:61:23:c2:2b:2e:ce:88:6c:24:c4:9f:
         78:1c:bb:56:f3:a4:65:78:23:df:80:08:ab:06:e4:5d:21:d4:
         97:ff:aa:95:0a:c2:0e:53:b4:da:e6:f2:c0:6d:af:a1:26:fd:
         f9:df:51:8c:83:ff:83:7d:41:20:fb:0e:e6:55:22:27:dd:d7:
         ff:79:65:07:ae:a9:5d:ce:0e:d0:71:9b:44:02:f4:91:49:83:
         90:3c:dc:30:46:b2:34:db:ca:d1:ec:a6:3e:14:2c:9d:45:94:
         83:95:5d:4e:42:3f:45:fd:13:00:2b:ab:ff:af:54:82:d5:c3:
         9a:da:8a:bb:07:ae:7a:ea:58:02:b5:82:b1:04:b4:98:bc:c1:
         8f:90:af:37:42:5f:b4:ee:71:10:0a:8b:24:37:67:2a:34:dd:
         69:25:c0:2b:a7:b6:41:e8:51:36:3c:a6:cb:83:a0:e7:14:f1:
         1a:ca:79:d2:2a:84:e2:90:ec:5f:03:bb:c3:90:ff:b2:27:04:
         7e:09:c4:e7:d8:d0:aa:89:fa:ac:a8:b6:9a:0d:78:18:cc:e3:
         39:3a:c7:c3:4e:76:c7:c9:86:86:24:64:65:e6:8c:0b:ec:72:
         f1:3e:d5:19:d4:3d:ea:2c:ea:bc:e5:c8:fb:b9:1a:44:a1:62:
         b9:00:03:8a
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgICAwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REMzMUIxMTAvBgNVBAUTKDhCOEFENUNBMUMzRThCOENGNDY4QjVGNDk2QTkxQUJC
MEU0OENGQTgwHhcNMjIwMzE0MDk1MTE5WhcNMjMwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjJmMTAxNi03Njg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArJuA3BIgZxO6mM5lK6h8HM1yddXzuu5SP+khVEVtphAvjiAY/pzwyZRhd3Nu
SnCDhq0Pow/V7FLY7qFq9HZwxhKJV1GYTHbFP52c9ZB9nRITA3lM+I3zW+gfQT0Y
EA16zSbl2o29MrFCeL95StrqpHjkdtYkb+ZAtnjgNdllRdoDw1sZ/gNRdGT2FQcn
PYH1DfXFOgiJYkCcwD0vVGTEdJv4O+LROZ2d9wvx3d1FgYF0VnPZAGbjFQrp72o0
Ksh7P98Rg+HYnV3iNBGKAXV23QPyuid+1tcUlgTY5ge+3/uJelsClSEUKsTNGqtV
8HKUd4hkTD2OWG55Smj8knaHFwIDAQABo4IC3zCCAtswHQYDVR0OBBYEFHOIyRp2
BzqpUt/WGW7TP1dDFWa1MB8GA1UdIwQYMBaAFIuK1cocPouM9Gi19JapGrsOSM+o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMxQi9EMEVDQ0Q0ODg5
M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0ejBhTFgwbHFrYXV3NUl6
NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2k0clZ5aHctaTR6MGFMWDBscWthdXc1SXo2Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REMzMUIvRDBFQ0NENDg4OTNEMTFFQjkxNkRGMDIyQzRGOUFFMDIvNEJEODc5OTBB
MzdDMTFFQ0EyMDhGRTdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwaQYIKwYBBQUHAQcBAf8E
WjBYMFYEAgABMFADBAGmUQAwDAMEAKZRAwMEAKZRBDAMAwQAplEHAwQAplEIAwQA
plEfAwQBplEkMAwDBACmUScDBACmUTIDBAKmUTwwDAMEAKZRQQMEAaZR9DANBgkq
hkiG9w0BAQsFAAOCAQEAFAVzZG3DWGEjwisuzohsJMSfeBy7VvOkZXgj34AIqwbk
XSHUl/+qlQrCDlO02ubywG2voSb9+d9RjIP/g31BIPsO5lUiJ93X/3llB66pXc4O
0HGbRAL0kUmDkDzcMEayNNvK0eymPhQsnUWUg5VdTkI/Rf0TACur/69UgtXDmtqK
uweueupYArWCsQS0mLzBj5CvN0JftO5xEAqLJDdnKjTdaSXAK6e2QehRNjymy4Og
5xTxGsp50iqE4pDsXwO7w5D/sicEfgnE59jQqon6rKi2mg14GMzjOTrHw052x8mG
hiRkZeaMC+xy8T7VGdQ96izqvOXI+7kaRKFiuQADig==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:43 2024 by rpki-client on console-fra.rpki-client.org