Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/44E82490D2C611ECBF3B3E53C4F9AE02.roa
File:                     44E82490D2C611ECBF3B3E53C4F9AE02.roa (raw, json)
Hash identifier:          BvujOEi2Oi3vERqovvg99+SP18dazu4xfpsUEchLz04=
Subject key identifier:   1E:FB:3C:5B:10:BE:2E:42:80:64:86:6C:B4:9E:7F:C4:E8:CD:FA:07
Certificate issuer:       /CN=A913E2B3/serialNumber=52868B0901F55B4078B91A73451CA6D22312C8AB
Certificate serial:       08F2
Authority key identifier: 52:86:8B:09:01:F5:5B:40:78:B9:1A:73:45:1C:A6:D2:23:12:C8:AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/44E82490D2C611ECBF3B3E53C4F9AE02.roa
Signing time:             Fri 13 May 2022 14:09:14 +0000
ROA not before:           Fri 13 May 2022 14:09:14 +0000
ROA not after:            Sun 28 May 2023 00:00:00 +0000
asID:                     138608
IP address blocks:        103.134.152.0/24 maxlen: 24
                          103.134.153.0/24 maxlen: 24
                          103.134.154.0/24 maxlen: 24
                          103.134.155.0/24 maxlen: 24
                          2404:6740::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2290 (0x8f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E2B3/serialNumber=52868B0901F55B4078B91A73451CA6D22312C8AB
        Validity
            Not Before: May 13 14:09:14 2022 GMT
            Not After : May 28 00:00:00 2023 GMT
        Subject: CN=627e668a-6614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:02:91:84:61:b3:2f:e9:d0:5d:19:f0:62:9f:
                    15:86:e4:58:62:e2:d4:20:f6:4b:5e:60:1c:d2:d0:
                    76:fb:88:bf:b7:79:22:2f:43:17:e7:dc:e6:ce:0b:
                    c0:10:7b:40:7f:1a:0b:73:82:0c:17:35:05:98:19:
                    05:c6:a7:6b:e7:c4:9a:01:11:ec:59:b7:89:8a:a8:
                    78:d6:7a:5e:da:cf:f9:66:fb:4a:81:64:3a:02:13:
                    98:0f:74:f3:d2:ef:8b:26:4e:d6:4f:3e:7d:60:ab:
                    f4:77:df:af:99:f1:21:27:b2:d1:d1:51:a2:e2:ce:
                    84:7a:24:7f:fe:ac:0a:22:73:0d:e1:4c:ea:dd:89:
                    fe:76:e4:69:26:04:68:74:a5:cd:6c:7f:80:2c:fe:
                    5d:96:8c:9b:a2:1f:09:3e:a7:83:25:3a:3a:f1:2c:
                    4d:3f:c7:5c:fd:96:de:e7:9f:7e:cc:4c:5f:2a:21:
                    22:fc:70:b0:aa:cb:6e:76:ce:4d:64:e7:af:4b:2a:
                    ed:f1:a4:f6:42:3d:42:59:90:56:40:23:69:b1:25:
                    a5:7b:53:e8:5d:e0:19:87:db:2d:8f:5e:c0:bd:ed:
                    53:a6:f0:d1:34:ca:a0:22:7a:87:7f:51:f7:64:14:
                    6c:dd:d1:22:83:fc:17:f5:2c:94:89:02:11:29:42:
                    b2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:FB:3C:5B:10:BE:2E:42:80:64:86:6C:B4:9E:7F:C4:E8:CD:FA:07
            X509v3 Authority Key Identifier:
                keyid:52:86:8B:09:01:F5:5B:40:78:B9:1A:73:45:1C:A6:D2:23:12:C8:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/44E82490D2C611ECBF3B3E53C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.152.0/22
                IPv6:
                  2404:6740::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:98:81:21:60:46:67:66:c2:0a:5e:a1:ca:6b:3b:b2:3d:8b:
         43:d6:12:39:b4:c6:2d:9e:80:b0:8c:ad:48:e7:7c:6a:36:f9:
         79:23:fd:6f:fb:6f:2a:21:9f:43:ba:c0:d2:5f:39:83:c2:14:
         42:02:d9:d8:fb:ea:b5:e1:ea:9d:e2:89:57:a7:ce:28:c9:a5:
         96:24:59:55:c0:2e:26:4d:d8:4d:d3:88:da:85:db:a2:b4:62:
         69:b5:d4:06:a0:bf:78:8d:c5:0b:d1:0e:3e:e0:34:82:a6:ac:
         b8:bf:e3:6a:8e:ea:9e:db:33:45:ff:57:dd:d7:4e:c2:4c:b7:
         5c:23:28:a1:54:06:27:10:f7:06:46:cf:67:b7:3b:05:15:86:
         5c:90:83:64:24:27:51:b4:85:ec:d9:b3:34:26:ec:04:20:73:
         15:1f:86:44:95:d1:4f:61:04:ef:fe:0d:f3:31:23:cd:85:a0:
         bb:97:ff:38:c9:69:f8:3f:ff:31:6f:1e:20:5c:d8:dc:83:27:
         8a:36:89:6d:46:67:ee:17:82:64:e5:ba:72:e2:3a:be:54:f1:
         2c:82:cf:0d:c5:3c:8b:ad:84:ae:93:9a:40:0d:01:68:26:15:
         52:a6:67:d9:e2:54:4a:55:75:ca:45:41:33:34:90:1c:73:1e:
         7f:60:0b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----