Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F777707E413611ECA936C369C4F9AE02.roa
File:                     F777707E413611ECA936C369C4F9AE02.roa (raw, json)
Hash identifier:          h1Il3/qRGxsyXbzbsYX6nUOqyjT701kl1YV6VNfunoM=
Subject key identifier:   33:C8:9F:A2:47:4F:E8:98:40:AF:83:99:75:E9:19:B3:99:FB:D7:C7
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0527
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F777707E413611ECA936C369C4F9AE02.roa
Signing time:             Tue 09 Nov 2021 08:28:08 +0000
ROA not before:           Tue 09 Nov 2021 08:28:08 +0000
ROA not after:            Sat 30 Jul 2022 00:00:00 +0000
asID:                     210654
IP address blocks:        115.167.77.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1319 (0x527)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Nov  9 08:28:08 2021 GMT
            Not After : Jul 30 00:00:00 2022 GMT
        Subject: CN=618a3118-b3b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:43:e8:a6:c0:58:19:f3:73:d4:67:75:e5:e7:
                    96:45:f3:a6:aa:23:52:60:51:e1:f6:b0:f3:78:05:
                    c4:cf:65:d2:b4:f8:c6:9b:04:b7:42:ab:b4:e4:c8:
                    80:d0:73:9c:59:2b:bb:b2:69:82:33:7d:1e:a0:fd:
                    03:1c:94:8a:2b:62:c6:52:9b:93:da:85:6f:38:b3:
                    91:d6:72:49:9c:2e:b2:6d:f2:9d:db:ab:4d:92:88:
                    fc:91:83:99:c5:9d:0d:47:f3:1a:72:9b:49:43:3e:
                    31:70:60:f5:3e:13:e1:53:be:c2:8b:54:64:0a:62:
                    bc:ee:c7:ef:bd:e9:87:96:bb:d8:12:b5:64:f5:78:
                    b2:9f:f1:db:d6:0e:f5:5d:e8:90:c6:c0:98:35:4c:
                    1b:91:86:9a:dd:a7:fa:02:ad:1c:3e:4e:2e:51:48:
                    5b:23:26:ba:a3:f1:ab:a1:4e:4e:c7:22:b8:cb:6c:
                    1a:f6:70:ac:fd:79:75:e8:00:cd:22:f8:b2:57:7e:
                    c5:6c:d1:c9:8c:a3:4b:f2:41:27:fa:ef:0c:0e:ba:
                    9f:43:85:45:b7:e2:31:d9:a7:64:d7:e7:4e:3c:0f:
                    7c:20:50:c1:96:e8:fa:10:3e:5e:91:53:d1:c1:bc:
                    a4:76:c3:ff:a3:a0:c4:7a:58:a8:65:a4:26:b4:a1:
                    d8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C8:9F:A2:47:4F:E8:98:40:AF:83:99:75:E9:19:B3:99:FB:D7:C7
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F777707E413611ECA936C369C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:8c:2b:74:b3:77:2c:b1:cc:cc:c8:45:07:2b:f1:92:57:29:
         8b:6d:46:9e:91:6b:64:f5:5b:52:95:59:a1:80:6d:3d:3f:ab:
         71:c9:39:0b:9a:a6:cd:15:91:7d:9d:36:44:9b:87:a7:d7:c4:
         6f:d7:57:e2:bc:e2:73:20:40:48:98:75:6f:98:f8:9d:f4:5b:
         23:54:81:3a:65:53:65:69:0e:2e:f7:3d:be:c3:0f:92:c9:1a:
         fc:d9:a3:d9:97:2c:e0:cb:88:da:d1:07:4f:26:16:09:21:43:
         a6:1f:b7:48:b4:5a:ab:2a:f0:dd:7f:62:31:71:2c:ed:86:7d:
         67:a3:97:0e:11:98:fc:a3:f1:30:20:2f:ea:21:05:1b:bc:aa:
         84:10:9a:2d:ea:2c:f3:ed:ab:13:ca:89:ec:20:53:4d:82:15:
         bd:7c:dc:37:c2:13:b8:0f:8e:8c:44:2c:81:d5:45:dc:09:26:
         5a:63:25:8f:b2:16:71:7b:c0:5a:91:51:29:24:81:e5:42:9d:
         5f:2a:3b:f6:b2:7c:df:6d:bb:3e:e4:96:53:a9:5a:1d:14:3c:
         e6:3a:76:a3:6c:f3:a4:9b:a5:94:36:03:99:fd:cf:8b:e6:f5:
         41:50:bb:e4:4d:8c:2b:e7:16:63:d7:ea:8f:0d:a8:a5:4e:72:
         02:16:ad:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:12 2023 by rpki-client on console-fra.rpki-client.org