Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/44F814D0CF8E11ECBC56CF13C4F9AE02.roa
File:                     44F814D0CF8E11ECBC56CF13C4F9AE02.roa (raw, json)
Hash identifier:          m3GqZ9XkYzjPrE8J0zSgDJHMiP394csRn8MftUTPC2g=
Subject key identifier:   77:9E:85:13:35:60:BE:11:61:F4:93:3E:4D:25:39:00:3C:F3:32:85
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       073F
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/44F814D0CF8E11ECBC56CF13C4F9AE02.roa
Signing time:             Mon 09 May 2022 11:50:49 +0000
ROA not before:           Mon 09 May 2022 11:50:49 +0000
ROA not after:            Sat 30 Jul 2022 00:00:00 +0000
asID:                     38547
IP address blocks:        115.167.0.0/24 maxlen: 24
                          115.167.1.0/24 maxlen: 24
                          115.167.2.0/24 maxlen: 24
                          115.167.3.0/24 maxlen: 24
                          115.167.5.0/24 maxlen: 24
                          115.167.6.0/24 maxlen: 24
                          115.167.20.0/22 maxlen: 24
                          115.167.49.0/24 maxlen: 24
                          115.167.51.0/24 maxlen: 24
                          115.167.56.0/21 maxlen: 24
                          115.167.72.0/22 maxlen: 24
                          115.167.79.0/24 maxlen: 24
                          175.110.68.0/22 maxlen: 24
                          175.110.72.0/22 maxlen: 24
                          175.110.80.0/21 maxlen: 24
                          175.110.88.0/22 maxlen: 24
                          175.110.97.0/24 maxlen: 24
                          175.110.99.0/24 maxlen: 24
                          175.110.104.0/24 maxlen: 24
                          175.110.107.2/32 maxlen: 32
                          175.110.107.14/32 maxlen: 32
                          175.110.107.114/32 maxlen: 32
                          175.110.108.0/22 maxlen: 23
                          175.110.108.0/23 maxlen: 24
                          175.110.110.0/24 maxlen: 24
                          202.92.16.0/24 maxlen: 24
                          202.92.17.0/24 maxlen: 24
                          202.92.18.0/24 maxlen: 24
                          202.92.19.0/24 maxlen: 24
                          202.92.20.0/24 maxlen: 24
                          202.92.21.0/24 maxlen: 24
                          202.92.22.0/24 maxlen: 24
                          202.92.23.0/24 maxlen: 24
                          202.92.24.0/24 maxlen: 24
                          202.92.24.32/27 maxlen: 27
                          202.92.25.0/24 maxlen: 24
                          202.92.26.0/24 maxlen: 24
                          202.92.27.0/24 maxlen: 24
                          202.92.28.0/24 maxlen: 24
                          202.92.29.0/24 maxlen: 24
                          202.92.30.0/24 maxlen: 24
                          202.92.31.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1855 (0x73f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: May  9 11:50:49 2022 GMT
            Not After : Jul 30 00:00:00 2022 GMT
        Subject: CN=62790019-72dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:65:c9:ca:fc:b3:ed:b6:5f:eb:56:47:b1:6c:
                    ce:a4:ba:f8:08:05:2b:55:4c:53:f8:ef:b1:e0:eb:
                    17:d4:a7:37:f3:ed:ab:69:e6:95:13:7a:8f:40:00:
                    03:27:f9:1c:37:d2:30:55:90:84:e0:94:d1:ee:61:
                    d4:eb:fe:7b:91:7f:c7:58:40:f9:f3:7c:47:7c:64:
                    73:3e:78:f7:d6:c5:c2:be:96:d5:c9:65:e4:ef:08:
                    b0:3c:8b:2b:ea:6a:89:90:91:18:3f:1a:35:24:77:
                    59:5f:5e:fe:65:59:27:54:ad:ae:93:b8:42:6e:79:
                    76:0c:41:50:7a:03:72:c2:3a:f1:5e:48:68:27:2e:
                    4b:af:22:25:70:c0:fb:c2:2c:40:66:f6:29:c3:ed:
                    f0:8c:59:90:91:2c:65:4d:bf:e5:18:71:27:5e:a5:
                    e0:be:8a:b5:78:89:c5:94:19:6c:ae:cd:c1:9f:f8:
                    a4:31:44:5a:5f:56:71:37:4b:06:ce:c1:a9:31:29:
                    de:56:c9:66:68:19:39:fa:85:10:fd:fe:df:d3:5e:
                    0f:6f:a5:27:84:d3:3b:54:fb:ab:46:c4:df:b2:7f:
                    ee:ac:e1:98:1a:90:07:e1:de:f0:25:8b:44:b5:cd:
                    6b:4e:87:17:94:6d:ed:68:fb:60:7f:ff:cf:d1:d5:
                    75:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:9E:85:13:35:60:BE:11:61:F4:93:3E:4D:25:39:00:3C:F3:32:85
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/44F814D0CF8E11ECBC56CF13C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.0.0/22
                  115.167.5.0-115.167.6.255
                  115.167.20.0/22
                  115.167.49.0/24
                  115.167.51.0/24
                  115.167.56.0/21
                  115.167.72.0/22
                  115.167.79.0/24
                  175.110.68.0-175.110.75.255
                  175.110.80.0-175.110.91.255
                  175.110.97.0/24
                  175.110.99.0/24
                  175.110.104.0/24
                  175.110.107.2/32
                  175.110.107.14/32
                  175.110.107.114/32
                  175.110.108.0/22
                  202.92.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2f:97:6b:45:f5:c4:09:f2:c7:62:96:f5:a7:31:69:8a:42:eb:
         a3:7a:59:1c:f7:cc:a5:fe:e0:1a:9e:42:b8:cf:aa:72:80:4f:
         be:e4:2b:6b:d8:d7:73:41:7d:46:09:bc:a9:cf:61:48:46:36:
         ff:aa:de:42:a6:37:8d:4d:d0:63:cf:c9:40:42:cb:16:81:6d:
         b9:63:a8:47:b4:ea:34:bd:a0:45:d3:99:70:a3:13:1a:aa:ab:
         a8:3b:23:fe:cf:d0:93:0e:5b:f1:7c:ee:a4:c2:32:9e:8b:77:
         1e:8e:de:0f:6a:d9:23:23:ae:af:5d:7d:3c:30:96:76:98:3a:
         29:b6:3d:2e:fe:b4:01:ad:f0:05:72:33:aa:b9:88:29:c7:1c:
         5b:e6:13:42:ee:7a:6d:44:07:bc:6c:41:ad:e8:b8:42:f6:24:
         c4:ae:a8:9e:6a:f6:cc:a5:46:72:f3:3f:45:3f:03:32:77:2b:
         86:77:eb:ea:e3:6b:36:77:6e:b9:62:ca:ee:d3:88:6a:8c:2f:
         4c:94:5f:a4:a7:de:c0:1d:a2:cb:87:39:06:3f:46:b3:40:84:
         f8:85:1f:b6:5b:07:57:5c:be:39:5b:1e:4c:ea:17:9c:54:db:
         da:bb:ed:79:07:e4:dd:14:f0:b9:8c:4c:7b:3d:7a:97:55:3f:
         eb:7c:25:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:11 2023 by rpki-client on console-fra.rpki-client.org