Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/18781B9AD50511ECB4BBD287C4F9AE02.roa
File:                     18781B9AD50511ECB4BBD287C4F9AE02.roa (raw, json)
Hash identifier:          sJVPRtEJdOPxw7wNZ1T2Khw71mi70uaPiE1FrG9vqOY=
Subject key identifier:   A1:D4:B9:C0:E9:71:6F:69:80:08:97:BB:2E:21:9E:2B:21:4E:15:7C
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0758
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/18781B9AD50511ECB4BBD287C4F9AE02.roa
Signing time:             Mon 16 May 2022 10:44:00 +0000
ROA not before:           Mon 16 May 2022 10:44:00 +0000
ROA not after:            Sat 30 Jul 2022 00:00:00 +0000
asID:                     43260
IP address blocks:        115.167.49.0/24 maxlen: 24
                          115.167.51.0/24 maxlen: 24
                          115.167.96.0/22 maxlen: 24
                          175.110.97.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1880 (0x758)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: May 16 10:44:00 2022 GMT
            Not After : Jul 30 00:00:00 2022 GMT
        Subject: CN=62822af0-69e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ec:83:c6:dc:88:2c:8b:2c:bf:54:3e:05:18:
                    4c:cd:a2:84:db:ae:1c:ce:6c:a5:53:4b:fa:b1:b3:
                    d4:bf:04:60:4b:3f:da:5d:dc:eb:b0:3b:e1:8f:0d:
                    c2:2e:f3:31:86:c7:a6:62:02:84:91:0a:f0:05:75:
                    0e:5b:ed:09:04:36:c9:ba:a0:e0:c9:1e:23:8a:63:
                    be:79:6b:9c:40:cb:e5:1f:a4:ac:22:59:58:86:3f:
                    ee:26:ad:88:00:e6:f6:ab:66:9e:08:39:06:2b:8d:
                    2c:69:af:88:13:73:22:45:02:48:fc:32:c2:e4:ec:
                    a2:f2:d6:bf:1d:46:c9:27:01:54:01:a8:41:ce:c5:
                    06:6b:20:5c:91:0c:8f:b2:47:3a:1a:d9:1c:58:01:
                    2c:d9:e3:e5:5b:5f:49:3f:d7:72:fc:1b:f7:77:a3:
                    49:1a:6e:00:24:d9:f0:8d:22:6b:ce:4f:06:80:23:
                    f1:ac:56:c3:45:e8:74:85:de:9b:4b:ca:9f:df:96:
                    74:cd:c7:45:33:1e:3d:ef:c3:bd:08:f7:db:38:40:
                    f9:c7:82:47:d6:c2:af:dd:82:84:50:46:75:b5:58:
                    f3:51:7c:a6:2c:2a:f7:f6:86:f8:21:12:a1:ef:f0:
                    50:5a:61:8c:5d:ae:e5:93:a9:c9:b8:41:5f:09:8b:
                    3c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D4:B9:C0:E9:71:6F:69:80:08:97:BB:2E:21:9E:2B:21:4E:15:7C
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/18781B9AD50511ECB4BBD287C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.49.0/24
                  115.167.51.0/24
                  115.167.96.0/22
                  175.110.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:43:fd:37:e2:bf:05:be:82:30:68:0e:2e:bf:c6:60:0e:6e:
         8c:df:4f:7f:5c:ac:de:c6:92:b9:4a:c6:bb:28:69:86:e1:f4:
         07:cd:cc:ca:04:5e:a9:e9:64:24:24:db:9f:2c:47:80:d3:0a:
         10:da:01:c9:0e:f3:ef:75:ee:9d:e1:a3:a1:84:16:91:87:66:
         bd:d0:2b:75:51:25:f6:27:9c:7f:86:86:7d:fb:0c:b5:13:a6:
         05:44:22:d1:52:d5:7e:10:49:56:c2:b1:42:07:ce:73:a3:67:
         8e:de:c3:db:60:85:67:8f:98:e6:ea:d5:9a:05:6f:4e:18:22:
         13:16:9f:98:d9:8b:8d:34:96:02:83:0d:74:93:ef:9f:9e:1d:
         2c:3c:73:a1:63:ec:b9:4b:22:c4:c2:a6:9b:b6:d3:d3:32:59:
         3e:61:0d:cc:20:5d:fd:ab:23:fa:c3:40:f3:0b:7c:14:a1:74:
         19:16:31:9e:a9:4f:75:c3:2b:28:ba:e3:06:96:04:8b:11:2e:
         0f:a6:51:1b:d6:6a:9b:11:3a:d6:52:b1:3f:2b:4b:f2:7c:e4:
         d2:c7:58:ab:47:e1:ea:15:02:82:27:8e:eb:9e:41:27:46:61:
         e4:6c:9b:76:d6:74:0e:2f:19:94:50:48:f8:83:2d:f1:0d:67:
         51:3f:20:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:11 2023 by rpki-client on console-fra.rpki-client.org