Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/26B3357A3CC711EEA5A9E833C4F9AE02.roa
File:                     26B3357A3CC711EEA5A9E833C4F9AE02.roa (raw, json)
Hash identifier:          02Kc2yJPuoyqEnPoUQsT+24tGvYDSFcoIvTdjw0/Pe0=
Subject key identifier:   91:02:8E:9D:CC:DB:8D:CE:95:CF:F6:27:E7:A0:0B:25:E4:9E:EC:B4
Certificate issuer:       /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Certificate serial:       93
Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/26B3357A3CC711EEA5A9E833C4F9AE02.roa
Signing time:             Thu 17 Aug 2023 06:27:34 +0000
ROA not before:           Thu 17 Aug 2023 06:27:34 +0000
ROA not after:            Tue 31 Oct 2023 00:00:00 +0000
asID:                     21082
IP address blocks:        103.230.9.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
        Validity
            Not Before: Aug 17 06:27:34 2023 GMT
            Not After : Oct 31 00:00:00 2023 GMT
        Subject: CN=64ddbdd6-e17a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:84:ef:08:4a:ea:45:9c:95:1f:50:de:d6:f3:
                    49:92:e8:9f:af:55:b5:de:b0:75:a1:31:a7:08:2e:
                    11:8b:0a:92:1e:80:d0:54:ba:a9:67:da:03:b7:1b:
                    ec:92:28:ed:49:29:d5:95:cd:63:f3:9e:e8:bd:43:
                    c1:eb:c4:7b:bd:83:05:40:73:70:1f:e4:c6:d3:34:
                    0b:4a:c6:8e:6c:39:57:ff:78:ca:c7:b3:7e:a7:60:
                    a7:5c:7d:35:ea:27:73:22:f0:35:73:f6:bd:85:ac:
                    69:98:5d:18:4b:b4:86:37:5a:c9:2a:2f:a5:b9:f2:
                    d9:1b:31:e7:32:48:7f:53:e2:78:8d:ec:80:08:99:
                    70:73:ed:68:fc:af:ae:e1:70:61:5a:2b:b1:65:d8:
                    8c:18:0c:d2:d1:9c:f3:7e:eb:a4:11:61:9b:eb:aa:
                    ee:34:00:39:b2:a3:62:74:42:a9:b2:14:27:d8:f3:
                    31:71:0c:96:5e:76:c1:a9:f8:98:47:cd:c2:38:9b:
                    59:88:d5:cc:42:e5:de:ea:73:83:34:83:b0:25:21:
                    65:1e:ab:e5:08:7e:05:14:76:98:ea:8d:ac:22:30:
                    8d:0e:60:bb:b1:9f:18:0a:10:c8:30:ca:f4:38:7a:
                    47:00:3d:ee:64:6b:6f:56:05:97:f7:57:2f:40:01:
                    38:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:02:8E:9D:CC:DB:8D:CE:95:CF:F6:27:E7:A0:0B:25:E4:9E:EC:B4
            X509v3 Authority Key Identifier:
                keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/26B3357A3CC711EEA5A9E833C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:86:12:84:46:65:f3:24:1c:80:9a:2b:11:b6:1b:25:a2:fd:
         f3:68:3e:e5:71:89:19:cc:9f:04:f1:d1:0a:df:ca:42:c3:ed:
         bd:c1:7e:53:e6:20:0b:a3:65:f4:96:64:f3:80:90:57:43:79:
         d2:c0:54:b8:7a:a4:b2:1a:f0:59:dc:0b:61:32:c1:e8:c6:65:
         6c:db:40:8f:68:5a:ed:c6:cc:54:f6:11:8f:33:83:c3:eb:ff:
         0a:33:ad:92:b3:4b:30:3b:7c:f3:b4:5a:b0:44:11:d5:03:53:
         d6:09:fe:db:37:56:f5:7e:ab:d1:aa:29:8b:d8:41:ba:e8:c3:
         14:1e:15:00:eb:a6:1c:3f:7c:21:7e:1c:f9:5d:09:d5:09:8e:
         2e:32:11:24:e6:3a:b6:8d:3d:4f:38:24:9e:9f:05:db:1f:85:
         95:40:7b:93:ca:4b:43:e7:b1:a4:9e:01:18:d0:4c:10:93:d5:
         50:82:55:d5:d6:d9:96:9f:b6:3c:7b:04:97:d9:80:e7:99:80:
         30:34:4e:7c:87:a7:65:8c:22:52:dc:4a:60:e0:f8:ef:45:cc:
         06:32:bc:6e:fd:27:91:7a:93:0e:5f:66:9c:1d:67:20:13:9a:
         56:de:5a:eb:71:82:f2:d1:4d:cb:93:0b:f1:00:c6:72:0e:18:
         cb:0c:33:8f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE4MTQxMTAvBgNVBAUTKDVDMDU2QjgwNjFBODYyMkMyQzA2QkI4NTc4NkU5REM2
MTM2MTRCQ0EwHhcNMjMwODE3MDYyNzM0WhcNMjMxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGRkYmRkNi1lMTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA64TvCErqRZyVH1De1vNJkuifr1W13rB1oTGnCC4RiwqSHoDQVLqpZ9oDtxvs
kijtSSnVlc1j857ovUPB68R7vYMFQHNwH+TG0zQLSsaObDlX/3jKx7N+p2CnXH01
6idzIvA1c/a9haxpmF0YS7SGN1rJKi+lufLZGzHnMkh/U+J4jeyACJlwc+1o/K+u
4XBhWiuxZdiMGAzS0ZzzfuukEWGb66ruNAA5sqNidEKpshQn2PMxcQyWXnbBqfiY
R83COJtZiNXMQuXe6nODNIOwJSFlHqvlCH4FFHaY6o2sIjCNDmC7sZ8YChDIMMr0
OHpHAD3uZGtvVgWX91cvQAE41QIDAQABo4IClTCCApEwHQYDVR0OBBYEFJECjp3M
243Olc/2J+egCyXknuy0MB8GA1UdIwQYMBaAFFwFa4BhqGIsLAa7hXhuncYTYUvK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTgxNC9EMzhBMTkxMjc0
NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi9YQVZyZ0dHb1lpd3NCcnVGZUc2ZHhoTmhT
OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hBVnJnR0dvWWl3c0JydUZlRzZkeGhOaFM4by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEE4MTQvRDM4QTE5MTI3NDVFMTFFREJBNjg4NTE0QzRGOUFFMDIvMjZCMzM1N0Ez
Q0M3MTFFRUE1QTlFODMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn5gkwDQYJKoZIhvcNAQELBQADggEBALaGEoRGZfMkHICa
KxG2GyWi/fNoPuVxiRnMnwTx0QrfykLD7b3BflPmIAujZfSWZPOAkFdDedLAVLh6
pLIa8FncC2EywejGZWzbQI9oWu3GzFT2EY8zg8Pr/wozrZKzSzA7fPO0WrBEEdUD
U9YJ/ts3VvV+q9GqKYvYQbrowxQeFQDrphw/fCF+HPldCdUJji4yESTmOraNPU84
JJ6fBdsfhZVAe5PKS0PnsaSeARjQTBCT1VCCVdXW2Zaftjx7BJfZgOeZgDA0TnyH
p2WMIlLcSmDg+O9FzAYyvG79J5F6kw5fZpwdZyATmlbeWutxgvLRTcuTC/EAxnIO
GMsMM48=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:21 2023 by rpki-client on console.sobornost.net