Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/A8C01826C47D11ECB544A26DC4F9AE02.roa
File:                     A8C01826C47D11ECB544A26DC4F9AE02.roa (raw, json)
Hash identifier:          GUnuW8yLOBXi21EhGDN0mWV2v3l4sbTgE4uVKp14otY=
Subject key identifier:   11:FF:CA:CC:7E:A8:D4:0F:A4:59:B4:6C:61:AF:E5:0F:F1:80:F9:F5
Certificate issuer:       /CN=A9130138/serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A
Certificate serial:       010D
Authority key identifier: 4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/A8C01826C47D11ECB544A26DC4F9AE02.roa
Signing time:             Thu 01 Sep 2022 07:24:24 +0000
ROA not before:           Thu 01 Sep 2022 07:24:24 +0000
ROA not after:            Tue 31 Oct 2023 00:00:00 +0000
asID:                     55330
IP address blocks:        175.106.40.0/23 maxlen: 23
                          175.106.41.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269 (0x10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130138/serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A
        Validity
            Not Before: Sep  1 07:24:24 2022 GMT
            Not After : Oct 31 00:00:00 2023 GMT
        Subject: CN=63105e27-8e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:6f:d2:34:de:87:79:35:c1:34:7b:02:ed:25:
                    7b:df:56:86:b4:a6:3b:d7:4c:2e:bb:e9:9c:9b:a4:
                    cf:8e:38:fe:f3:df:6c:1e:12:19:63:91:74:ad:80:
                    e2:b3:52:52:bf:05:fd:ec:31:84:26:bc:f5:51:bb:
                    a1:c8:91:83:64:4b:7a:2f:fc:9f:96:6f:17:5d:e5:
                    13:08:3c:cb:96:21:45:dd:3a:06:ba:4f:c6:27:79:
                    16:62:72:4d:c5:6a:aa:a1:a6:d7:56:a3:f0:84:8d:
                    b5:ab:25:f9:f9:ec:12:d1:ce:82:5f:22:41:50:35:
                    44:15:61:62:08:da:69:9e:c5:28:b1:1c:6c:c9:60:
                    7a:ca:7f:6e:66:1a:1b:89:ba:40:89:ff:72:54:39:
                    f8:0d:e9:4d:e9:f8:b5:2a:c3:23:1d:12:46:0d:9e:
                    7c:45:01:d8:93:52:ef:26:ff:63:71:eb:5d:64:44:
                    af:c7:31:e7:27:9e:47:15:3e:a4:b1:e6:73:c3:b2:
                    27:57:7a:74:61:15:07:20:19:84:f7:ac:9b:21:90:
                    47:51:88:60:f1:be:46:4a:94:93:40:46:4a:5c:db:
                    aa:06:21:2f:ca:ef:2f:dc:02:62:96:f6:b6:3c:94:
                    2b:fd:be:d5:3d:7c:5c:94:3e:7e:98:36:e0:6c:ee:
                    5c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:FF:CA:CC:7E:A8:D4:0F:A4:59:B4:6C:61:AF:E5:0F:F1:80:F9:F5
            X509v3 Authority Key Identifier:
                keyid:4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/A8C01826C47D11ECB544A26DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.106.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:25:db:45:33:44:ff:aa:4d:01:b5:14:25:ba:0a:ea:47:14:
         06:8d:aa:77:e5:32:58:f7:44:da:97:b1:dc:3e:50:fc:52:89:
         8d:c5:e5:d9:11:3d:b3:6f:24:69:b8:8d:07:14:c6:44:70:ea:
         2f:43:37:14:88:e1:04:7c:f8:8a:92:6f:f6:a7:55:db:5d:d7:
         22:d0:67:47:2e:46:65:a4:41:8d:cd:0d:c0:e7:a2:cd:fb:ba:
         0d:5b:06:44:7d:8f:7f:b0:56:e2:fe:44:04:23:7b:3f:95:e5:
         86:85:df:9e:f0:09:1d:fa:3b:23:f1:96:fe:99:3a:69:48:33:
         21:ff:6c:8d:a4:1b:e2:69:51:d8:ee:48:08:27:7f:4f:fd:e9:
         17:fd:b3:c7:df:48:05:8f:d8:4d:fc:9e:bc:e9:c5:80:c2:c0:
         af:87:cb:15:6e:4c:3b:a9:ae:30:54:7f:28:72:a6:29:8b:c5:
         61:52:c3:15:a2:fb:be:a0:5a:59:45:cc:62:84:cf:42:2f:c1:
         77:50:72:6c:31:06:96:6a:57:a5:8f:9c:bc:e9:a1:2f:50:e4:
         9f:ec:d2:bb:e1:a9:e1:06:d8:5e:b3:8c:c3:89:81:c4:0e:44:
         83:9a:99:0a:1f:1a:f9:81:92:33:ef:62:63:90:40:28:4d:3b:
         3e:1c:d0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:31 2023 by rpki-client on console.sobornost.net