Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/49F5A7DEDEB811EC995A194CC4F9AE02.roa
File:                     49F5A7DEDEB811EC995A194CC4F9AE02.roa (raw, json)
Hash identifier:          zH7VTVD3r4fYi7B76j7z9tPa4xLtg0DrCddAUDB1YJk=
Subject key identifier:   0A:8C:FC:45:9E:C9:5F:BF:81:30:1D:A8:DC:AC:89:DE:96:3B:C4:82
Certificate issuer:       /CN=A9117817/serialNumber=1294C48BC696AFE820BD1582F34367BADAB02432
Certificate serial:       0173
Authority key identifier: 12:94:C4:8B:C6:96:AF:E8:20:BD:15:82:F3:43:67:BA:DA:B0:24:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/49F5A7DEDEB811EC995A194CC4F9AE02.roa
Signing time:             Sat 28 May 2022 18:59:24 +0000
ROA not before:           Sat 28 May 2022 18:59:24 +0000
ROA not after:            Fri 30 Dec 2022 00:00:00 +0000
asID:                     38264
IP address blocks:        103.175.122.0/25 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371 (0x173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117817/serialNumber=1294C48BC696AFE820BD1582F34367BADAB02432
        Validity
            Not Before: May 28 18:59:24 2022 GMT
            Not After : Dec 30 00:00:00 2022 GMT
        Subject: CN=6292710c-6163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:38:45:8d:3e:e2:7a:53:ac:82:d3:76:70:43:
                    cf:d3:3d:d3:2d:71:4d:c0:92:43:3b:63:87:5f:ef:
                    1b:80:52:33:a6:19:e7:6e:df:0b:3f:d8:1d:a8:07:
                    da:88:d6:5f:64:52:7a:85:40:a0:62:83:ec:ca:92:
                    75:35:2f:9a:5b:63:ed:bb:2c:65:5b:27:2b:1a:2c:
                    ae:55:60:cc:d3:d2:85:8f:be:ff:bb:ba:8b:e6:bb:
                    28:10:0d:ad:74:95:48:ae:16:0b:9b:5a:fd:90:e7:
                    36:ce:cd:10:6f:09:01:e9:5f:8a:a3:6f:9e:45:da:
                    03:5a:bc:94:87:fd:5a:52:1d:9f:62:66:fd:13:61:
                    0a:a4:4d:f0:b6:e6:07:2a:20:09:39:ed:04:c4:51:
                    1e:5c:50:7a:6d:20:88:10:38:6e:9e:6b:2f:4c:4f:
                    f8:b4:f9:28:53:fc:68:42:75:e3:5f:92:cd:87:5e:
                    64:ed:f2:e7:be:bb:36:e3:f3:6c:63:33:bd:eb:11:
                    46:56:5b:37:1a:5f:8a:78:87:e6:d7:28:af:a5:17:
                    6d:fa:60:64:a0:8b:f8:ae:b1:89:38:e1:5e:34:e9:
                    41:42:0d:69:33:29:92:4f:a7:be:41:54:cf:13:7a:
                    9b:89:df:76:ce:b1:f7:8d:9d:7f:7d:47:c1:2b:b6:
                    3d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8C:FC:45:9E:C9:5F:BF:81:30:1D:A8:DC:AC:89:DE:96:3B:C4:82
            X509v3 Authority Key Identifier:
                keyid:12:94:C4:8B:C6:96:AF:E8:20:BD:15:82:F3:43:67:BA:DA:B0:24:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/49F5A7DEDEB811EC995A194CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.122.0/25

    Signature Algorithm: sha256WithRSAEncryption
         98:c7:4f:bf:ad:b3:4d:cb:60:cf:7b:d4:ab:b0:8c:d0:df:02:
         ad:30:d8:53:ff:f0:36:f1:17:4b:ea:ac:be:59:f5:2a:d8:43:
         08:f7:5b:1e:a7:1e:1e:1b:ad:99:8c:cb:98:71:a4:db:8d:aa:
         c4:75:7a:c5:77:31:94:0c:9d:1c:46:69:30:49:6d:50:d9:5a:
         d3:09:fc:f5:22:fd:4d:c7:c1:5e:f4:e6:3b:de:2a:0d:16:f9:
         58:be:b9:6a:f2:7e:b1:18:5d:5a:44:9d:13:1b:1e:fd:d2:52:
         f5:c9:ae:72:c0:72:98:b3:ef:b1:32:9b:4e:29:dd:00:5a:32:
         bb:fa:5d:e2:cd:c5:3a:b5:15:36:4f:4d:bd:89:f6:73:6f:09:
         86:3a:f4:a1:3e:c3:6e:b8:21:13:2b:9f:08:ba:ab:47:a9:52:
         97:60:bb:c0:65:b1:d8:aa:b9:c8:57:3b:db:41:f0:c7:89:38:
         bf:8a:45:d2:b0:5e:3b:99:7d:3b:42:2b:89:8a:86:a9:c3:e7:
         89:78:d0:dc:da:9e:17:a6:80:6e:39:01:f9:ab:ca:94:71:94:
         cf:84:56:4f:3c:61:38:22:38:32:65:c5:f2:4f:c4:d6:85:f8:
         3f:5c:46:49:9a:61:63:f4:02:fb:3b:35:72:6e:57:85:6d:fa:
         67:69:d1:aa
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTc4MTcxMTAvBgNVBAUTKDEyOTRDNDhCQzY5NkFGRTgyMEJEMTU4MkYzNDM2N0JB
REFCMDI0MzIwHhcNMjIwNTI4MTg1OTI0WhcNMjIxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjkyNzEwYy02MTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwDhFjT7ielOsgtN2cEPP0z3TLXFNwJJDO2OHX+8bgFIzphnnbt8LP9gdqAfa
iNZfZFJ6hUCgYoPsypJ1NS+aW2PtuyxlWycrGiyuVWDM09KFj77/u7qL5rsoEA2t
dJVIrhYLm1r9kOc2zs0QbwkB6V+Ko2+eRdoDWryUh/1aUh2fYmb9E2EKpE3wtuYH
KiAJOe0ExFEeXFB6bSCIEDhunmsvTE/4tPkoU/xoQnXjX5LNh15k7fLnvrs24/Ns
YzO96xFGVls3Gl+KeIfm1yivpRdt+mBkoIv4rrGJOOFeNOlBQg1pMymST6e+QVTP
E3qbid92zrH3jZ1/fUfBK7Y9FQIDAQABo4ICljCCApIwHQYDVR0OBBYEFAqM/EWe
yV+/gTAdqNysid6WO8SCMB8GA1UdIwQYMBaAFBKUxIvGlq/oIL0VgvNDZ7rasCQy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzgxNy8wNjgzRUI3MDRE
QUMxMUVDODU3MTYwMjNDNEY5QUUwMi9FcFRFaThhV3ItZ2d2UldDODBObnV0cXdK
REkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VwVEVpOGFXci1nZ3ZSV0M4ME5udXRxd0pESS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTc4MTcvMDY4M0VCNzA0REFDMTFFQzg1NzE2MDIzQzRGOUFFMDIvNDlGNUE3REVE
RUI4MTFFQzk5NUExOTRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgABMAcDBQdnr3oAMA0GCSqGSIb3DQEBCwUAA4IBAQCYx0+/rbNNy2DP
e9SrsIzQ3wKtMNhT//A28RdL6qy+WfUq2EMI91sepx4eG62ZjMuYcaTbjarEdXrF
dzGUDJ0cRmkwSW1Q2VrTCfz1Iv1Nx8Fe9OY73ioNFvlYvrlq8n6xGF1aRJ0TGx79
0lL1ya5ywHKYs++xMptOKd0AWjK7+l3izcU6tRU2T029ifZzbwmGOvShPsNuuCET
K58IuqtHqVKXYLvAZbHYqrnIVzvbQfDHiTi/ikXSsF47mX07QiuJioapw+eJeNDc
2p4XpoBuOQH5q8qUcZTPhFZPPGE4IjgyZcXyT8TWhfg/XEZJmmFj9AL7OzVybleF
bfpnadGq
-----END CERTIFICATE-----