Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/17503662D50511ECB4BBD287C4F9AE02.roa
File:                     17503662D50511ECB4BBD287C4F9AE02.roa (raw, json)
Hash identifier:          Rem50CYDy3HmJ+cHT8l5XxKPPP6kLL02u16Y0iN5G9k=
Subject key identifier:   6A:7B:FF:09:AE:89:03:97:05:63:9B:A2:81:C4:0B:8D:C8:04:C2:9D
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0757
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/17503662D50511ECB4BBD287C4F9AE02.roa
Signing time:             Mon 16 May 2022 10:43:59 +0000
ROA not before:           Mon 16 May 2022 10:43:59 +0000
ROA not after:            Sat 30 Jul 2022 00:00:00 +0000
asID:                     38547
IP address blocks:        115.167.0.0/24 maxlen: 24
                          115.167.1.0/24 maxlen: 24
                          115.167.2.0/24 maxlen: 24
                          115.167.3.0/24 maxlen: 24
                          115.167.5.0/24 maxlen: 24
                          115.167.6.0/24 maxlen: 24
                          115.167.20.0/22 maxlen: 24
                          115.167.56.0/22 maxlen: 24
                          115.167.60.0/22 maxlen: 24
                          115.167.72.0/22 maxlen: 24
                          115.167.79.0/24 maxlen: 24
                          175.110.68.0/22 maxlen: 24
                          175.110.72.0/22 maxlen: 24
                          175.110.80.0/21 maxlen: 24
                          175.110.88.0/22 maxlen: 24
                          175.110.104.0/24 maxlen: 24
                          175.110.107.2/32 maxlen: 32
                          175.110.107.14/32 maxlen: 32
                          175.110.107.114/32 maxlen: 32
                          175.110.108.0/22 maxlen: 23
                          175.110.108.0/23 maxlen: 24
                          175.110.110.0/24 maxlen: 24
                          202.92.16.0/24 maxlen: 24
                          202.92.17.0/24 maxlen: 24
                          202.92.18.0/24 maxlen: 24
                          202.92.19.0/24 maxlen: 24
                          202.92.20.0/24 maxlen: 24
                          202.92.21.0/24 maxlen: 24
                          202.92.22.0/24 maxlen: 24
                          202.92.23.0/24 maxlen: 24
                          202.92.24.0/24 maxlen: 24
                          202.92.24.32/27 maxlen: 27
                          202.92.25.0/24 maxlen: 24
                          202.92.26.0/24 maxlen: 24
                          202.92.27.0/24 maxlen: 24
                          202.92.28.0/24 maxlen: 24
                          202.92.29.0/24 maxlen: 24
                          202.92.30.0/24 maxlen: 24
                          202.92.31.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1879 (0x757)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: May 16 10:43:59 2022 GMT
            Not After : Jul 30 00:00:00 2022 GMT
        Subject: CN=62822aee-5dfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f6:d1:06:e1:08:2b:c8:6a:14:8f:4f:a7:26:
                    29:12:21:76:d1:1c:c2:ae:6d:e7:a6:ad:8d:36:e4:
                    fd:db:18:92:35:a1:e3:d8:68:6d:1f:1d:a7:f6:14:
                    8d:81:07:80:f8:94:ef:2e:ed:1c:be:73:34:6c:b1:
                    dc:94:1c:42:97:c3:18:a8:22:ea:14:c8:7f:9d:1d:
                    a2:da:6f:23:06:79:1c:35:27:f8:c9:c6:3e:ed:83:
                    8b:87:9d:95:5d:b0:08:51:15:2a:2a:8c:40:d8:0c:
                    2c:48:9e:5a:8f:f7:af:66:43:c1:11:c2:ca:85:d1:
                    a2:b9:18:65:43:9c:5b:c0:8c:3e:ab:46:43:5b:9b:
                    bd:1c:2a:9d:a0:18:39:71:aa:aa:45:01:22:c9:98:
                    82:12:56:53:d3:cf:ac:43:70:e6:4b:34:b5:18:5a:
                    4f:66:fe:37:f9:50:4c:4d:4c:79:ab:9a:e8:a1:61:
                    4e:94:6a:8a:84:57:44:6c:a2:0c:59:f8:53:f8:f0:
                    17:a6:4c:af:fe:fe:78:35:cd:2c:5c:1d:ac:ed:5c:
                    9f:ff:21:ef:04:7d:70:88:d0:28:c9:88:19:db:ca:
                    83:16:06:c9:d0:36:a9:c2:6e:a6:be:ed:f7:a6:8c:
                    0d:f4:08:f2:ab:8b:1d:0e:44:8f:70:40:13:f8:43:
                    75:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:7B:FF:09:AE:89:03:97:05:63:9B:A2:81:C4:0B:8D:C8:04:C2:9D
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/17503662D50511ECB4BBD287C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.0.0/22
                  115.167.5.0-115.167.6.255
                  115.167.20.0/22
                  115.167.56.0/21
                  115.167.72.0/22
                  115.167.79.0/24
                  175.110.68.0-175.110.75.255
                  175.110.80.0-175.110.91.255
                  175.110.104.0/24
                  175.110.107.2/32
                  175.110.107.14/32
                  175.110.107.114/32
                  175.110.108.0/22
                  202.92.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5f:bd:63:5b:5b:08:b3:cd:6b:5b:4d:04:81:df:99:db:32:ef:
         40:27:10:2e:30:99:88:fd:41:ed:5d:9a:e1:f2:4e:c5:95:6e:
         f7:be:4d:9b:01:04:e3:55:92:3b:dc:4d:e0:7e:c5:70:ac:49:
         83:d6:65:38:cf:57:e0:05:d9:77:2e:e3:2e:79:eb:39:05:8d:
         35:13:59:f3:06:f8:11:63:90:24:6a:f2:ef:0f:25:79:58:18:
         24:a8:cf:39:41:e8:62:c1:20:93:37:41:9e:ff:72:15:ee:4d:
         e8:5d:3a:11:fc:1d:d5:4e:8b:fd:8f:71:09:51:af:13:be:ce:
         85:52:27:6f:ea:91:27:24:3e:13:57:ea:79:a6:1e:ad:4e:30:
         2c:dc:91:ef:8c:27:31:a0:81:e7:ad:40:22:b4:d2:41:b3:43:
         45:f5:ee:5d:06:05:23:ee:4b:97:0c:57:03:28:5e:08:a6:63:
         41:9e:cd:da:3c:02:fb:0f:6e:82:c9:2c:58:ae:ef:75:cf:a9:
         9f:f5:a5:0e:b2:d1:c6:57:a0:ce:50:4a:f5:a4:66:af:ec:98:
         eb:b8:5d:cf:9b:48:89:e5:08:6b:45:15:b3:be:8b:ac:fc:d8:
         f0:b6:02:f9:7b:42:9a:91:8f:bc:e9:ce:ae:02:1b:e3:52:32:
         dd:92:8d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:11 2023 by rpki-client on console-fra.rpki-client.org