Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/C0645966197E11EBB6E9E539C4F9AE02.roa
File:                     C0645966197E11EBB6E9E539C4F9AE02.roa (raw, json)
Hash identifier:          SIPLIWbT+afSoPfczvckW2q+3G8WR7ii6Yi8TOO9Of0=
Subject key identifier:   AE:CC:04:49:C1:EA:E0:C5:95:74:AD:94:42:1B:08:7E:84:54:26:4E
Certificate issuer:       /CN=A912CA50/serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750
Certificate serial:       05D7
Authority key identifier: 7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/C0645966197E11EBB6E9E539C4F9AE02.roa
Signing time:             Mon 26 Sep 2022 11:59:59 +0000
ROA not before:           Mon 26 Sep 2022 11:59:59 +0000
ROA not after:            Fri 01 Dec 2023 00:00:00 +0000
asID:                     137182
IP address blocks:        103.155.8.0/23 maxlen: 23
                          2406:60c0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1495 (0x5d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CA50/serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750
        Validity
            Not Before: Sep 26 11:59:59 2022 GMT
            Not After : Dec  1 00:00:00 2023 GMT
        Subject: CN=6331943e-91fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c2:a2:21:bb:15:52:d0:44:b2:84:ec:76:5b:
                    7f:96:93:4c:12:34:1c:30:ed:00:a1:d1:a6:f1:0e:
                    e1:72:a0:f7:28:b3:a5:ac:55:37:45:08:88:8d:d7:
                    4c:7b:f1:68:b2:31:a0:c6:2a:a5:29:7a:71:29:02:
                    d8:7d:84:a9:64:41:e6:ff:74:a0:e3:0e:e0:d1:53:
                    48:7a:79:de:92:a5:94:a7:ff:6f:58:cd:03:79:d0:
                    d4:07:c3:4c:da:15:06:6d:53:ad:45:31:b6:04:0e:
                    cb:00:8d:ca:8f:42:ff:32:3b:fe:d6:89:ca:e7:12:
                    78:e6:1f:2f:b9:d4:21:ba:4c:d0:20:e2:b3:e5:22:
                    39:76:73:75:e9:70:05:75:c3:fd:3c:db:a4:43:6c:
                    cf:d6:3c:04:ae:18:7c:6d:1d:b7:48:00:f1:95:c4:
                    ca:bb:3b:fc:57:ae:02:e6:d9:7e:c4:99:aa:47:b3:
                    7f:17:96:17:47:74:4c:5b:6a:73:9c:ec:3f:ed:89:
                    d8:47:02:10:5d:50:9e:3e:9a:77:b6:39:14:20:59:
                    6a:9e:b3:b6:54:aa:6f:d6:15:0f:67:aa:1a:81:f6:
                    7c:90:b8:87:31:26:7e:fe:78:e2:2e:0d:c2:40:de:
                    71:8f:8a:2d:cd:ca:ef:cb:95:1d:12:74:c3:9e:58:
                    07:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:CC:04:49:C1:EA:E0:C5:95:74:AD:94:42:1B:08:7E:84:54:26:4E
            X509v3 Authority Key Identifier:
                keyid:7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/C0645966197E11EBB6E9E539C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.8.0/23
                IPv6:
                  2406:60c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:6f:1b:bf:eb:15:2a:91:a9:70:13:60:94:5a:af:a6:e7:7c:
         fa:e3:f8:da:f0:b6:49:95:cf:45:47:a6:34:e0:6e:aa:06:89:
         db:1e:4b:ca:39:f9:e9:66:be:ea:a0:08:bf:ab:e3:08:8a:46:
         98:19:ec:e5:28:a4:e5:75:9b:3d:86:58:9a:ae:64:e8:27:75:
         ae:22:42:07:df:54:eb:14:0b:e9:f6:f5:74:d5:7f:07:c3:d6:
         29:95:a0:64:ba:d1:12:62:77:e6:db:4c:85:29:d7:8d:b0:4d:
         22:77:35:6a:7b:57:23:76:77:33:90:66:d0:7e:8f:2f:b7:b4:
         ad:2b:ca:43:16:a9:25:8c:0c:23:37:90:9a:b8:8c:43:da:49:
         0f:20:13:b2:bc:e6:55:d7:d5:dc:74:9f:94:4b:cb:df:8b:ba:
         e9:04:b2:2f:17:bc:87:8e:32:e1:11:2b:f6:ee:d0:73:1d:71:
         dd:ee:37:f0:e8:13:7f:68:9e:51:e8:6c:72:2f:4f:e8:e5:53:
         b4:f4:b9:49:71:1a:bd:81:ef:4c:72:35:29:35:1b:e3:e1:f9:
         98:0a:9a:62:86:d2:63:16:c9:7a:81:c7:7a:52:84:97:59:20:
         87:c3:e5:18:e8:6d:5c:a8:07:36:a1:5a:d4:22:28:35:36:98:
         0a:41:eb:31
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkNBNTAxMTAvBgNVBAUTKDdDN0M0M0FBRDBDODZCNUYzNzhFNUQ3QzMzMzJBMDVE
RTQ2MTI3NTAwHhcNMjIwOTI2MTE1OTU5WhcNMjMxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzMxOTQzZS05MWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApcKiIbsVUtBEsoTsdlt/lpNMEjQcMO0AodGm8Q7hcqD3KLOlrFU3RQiIjddM
e/FosjGgxiqlKXpxKQLYfYSpZEHm/3Sg4w7g0VNIennekqWUp/9vWM0DedDUB8NM
2hUGbVOtRTG2BA7LAI3Kj0L/Mjv+1onK5xJ45h8vudQhukzQIOKz5SI5dnN16XAF
dcP9PNukQ2zP1jwErhh8bR23SADxlcTKuzv8V64C5tl+xJmqR7N/F5YXR3RMW2pz
nOw/7YnYRwIQXVCePpp3tjkUIFlqnrO2VKpv1hUPZ6oagfZ8kLiHMSZ+/njiLg3C
QN5xj4otzcrvy5UdEnTDnlgHnQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFK7MBEnB
6uDFlXStlEIbCH6EVCZOMB8GA1UdIwQYMBaAFHx8Q6rQyGtfN45dfDMyoF3kYSdQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0E1MC8zODFDMTcxNkZC
QTUxMUVBQkJBRUIzNjNDNEY5QUUwMi9mSHhEcXRESWExODNqbDE4TXpLZ1hlUmhK
MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZIeERxdERJYTE4M2psMThNektnWGVSaEoxQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkNBNTAvMzgxQzE3MTZGQkE1MTFFQUJCQUVCMzYzQzRGOUFFMDIvQzA2NDU5NjYx
OTdFMTFFQkI2RTlFNTM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAFnmwgwDQQCAAIwBwMFACQGYMAwDQYJKoZIhvcNAQELBQAD
ggEBACJvG7/rFSqRqXATYJRar6bnfPrj+NrwtkmVz0VHpjTgbqoGidseS8o5+elm
vuqgCL+r4wiKRpgZ7OUopOV1mz2GWJquZOgnda4iQgffVOsUC+n29XTVfwfD1imV
oGS60RJid+bbTIUp142wTSJ3NWp7VyN2dzOQZtB+jy+3tK0rykMWqSWMDCM3kJq4
jEPaSQ8gE7K85lXX1dx0n5RLy9+LuukEsi8XvIeOMuERK/bu0HMdcd3uN/DoE39o
nlHobHIvT+jlU7T0uUlxGr2B70xyNSk1G+Ph+ZgKmmKG0mMWyXqBx3pShJdZIIfD
5RjobVyoBzahWtQiKDU2mApB6zE=
-----END CERTIFICATE-----