Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/49194112670811ED895DC665C4F9AE02.roa
File:                     49194112670811ED895DC665C4F9AE02.roa (raw, json)
Hash identifier:          MazzqvbIHC5BZU2OkJIdwb7m4LZncw5TMsNFcKMhbzk=
Subject key identifier:   9A:30:F0:7A:A8:39:3B:95:95:7C:42:2E:FD:F0:2A:DF:BD:16:98:DF
Certificate issuer:       /CN=A911636A/serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445
Certificate serial:       04
Authority key identifier: 5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/49194112670811ED895DC665C4F9AE02.roa
Signing time:             Fri 18 Nov 2022 06:14:40 +0000
ROA not before:           Fri 18 Nov 2022 06:14:40 +0000
ROA not after:            Sat 30 Dec 2023 00:00:00 +0000
asID:                     150434
IP address blocks:        103.40.156.0/23 maxlen: 23
                          2400:c360::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911636A/serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445
        Validity
            Not Before: Nov 18 06:14:40 2022 GMT
            Not After : Dec 30 00:00:00 2023 GMT
        Subject: CN=637722d0-e3b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c4:9e:40:52:e1:b0:de:28:cc:a5:df:55:70:
                    4a:cf:65:04:34:a6:29:f3:57:cf:a5:7d:d3:82:77:
                    37:bf:bb:c3:78:2e:a9:08:94:f0:ca:04:fb:24:46:
                    fd:f8:89:5f:a5:a9:a8:12:88:a1:94:d4:59:ec:fd:
                    aa:0c:a6:e2:05:35:f8:52:43:ea:67:e9:7e:99:9f:
                    a0:d1:48:5f:a9:de:75:81:08:af:b1:ba:3a:6e:00:
                    b2:2d:1a:0d:48:c1:6a:0f:fd:39:84:40:62:a8:09:
                    24:42:d0:b1:9e:ac:9f:fb:e8:e1:3d:7a:83:89:15:
                    60:3d:cb:98:19:36:b9:da:2e:a6:e4:ff:bd:27:f7:
                    c4:88:39:0a:59:4d:75:e4:e2:38:1a:a3:ee:ec:d9:
                    93:c4:78:ed:66:85:6a:69:3b:e4:65:ae:91:75:20:
                    04:e6:ea:d6:f4:85:a0:94:dd:de:14:cf:bc:4f:39:
                    de:e6:c4:f3:3f:87:9f:68:00:02:85:09:93:af:a5:
                    ad:cf:ba:42:7f:06:34:f8:8c:82:39:18:21:96:42:
                    d8:64:12:7f:8a:4f:ae:35:cc:4f:76:2e:1d:43:73:
                    e5:60:d6:ef:4f:35:e7:51:0d:35:fc:b5:23:e0:36:
                    a3:02:9a:da:19:b5:7a:bb:52:ab:55:0b:2a:3b:3e:
                    21:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:30:F0:7A:A8:39:3B:95:95:7C:42:2E:FD:F0:2A:DF:BD:16:98:DF
            X509v3 Authority Key Identifier:
                keyid:5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/49194112670811ED895DC665C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.40.156.0/23
                IPv6:
                  2400:c360::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:77:13:a9:8b:b1:66:5f:c7:14:74:df:1f:4d:b5:62:54:5e:
         56:49:55:e3:09:e2:28:19:70:1f:0f:2e:5f:ea:e9:9e:7c:25:
         db:de:16:bd:8e:ac:50:03:f6:6a:28:2f:71:c2:7a:82:5e:e8:
         b7:b9:7f:9d:71:0e:6d:9b:44:df:ec:c5:52:96:3f:e3:c2:90:
         34:3c:e7:58:93:48:4c:fd:8c:c2:3e:cb:01:49:93:71:7d:0d:
         e4:49:0a:37:ea:f1:eb:a5:c4:20:68:26:b3:ed:17:35:52:b1:
         50:af:fd:f6:4b:72:f6:43:a0:c0:83:c7:6b:f9:94:a2:be:5f:
         8d:41:d2:36:98:ad:1c:ac:72:1e:82:c4:2a:8e:a2:15:91:7a:
         cd:0e:d3:75:07:77:86:b6:7a:35:d1:03:61:4f:13:5f:91:b0:
         41:a3:9d:00:cb:d1:dd:35:f0:b6:14:5a:66:8f:07:9e:5c:a2:
         0e:19:6d:9e:54:8c:43:26:8f:27:ef:a4:93:2f:be:08:38:62:
         fb:1f:7a:7a:d3:c9:5a:34:2d:37:d7:47:e8:9d:ed:b7:40:d5:
         67:cf:c9:0e:51:7a:c6:a0:08:f1:ec:22:27:1c:4d:89:02:a0:
         ad:34:af:d2:1a:6d:25:67:47:bf:d8:fa:aa:2c:86:84:59:e7:
         f1:8c:26:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----