Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/8207722E058D11EC92BD9650C4F9AE02.roa
File:                     8207722E058D11EC92BD9650C4F9AE02.roa (raw, json)
Hash identifier:          Rd+B7JZUIkEs1ECKJkjeGHaj0PVSDUoUMZ0AGKCGK4o=
Subject key identifier:   70:6C:05:AB:7B:44:35:28:1B:A0:4F:E1:70:7C:D0:A0:CD:5E:45:F6
Certificate issuer:       /CN=A914CBF3/serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707
Certificate serial:       0836
Authority key identifier: E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/8207722E058D11EC92BD9650C4F9AE02.roa
Signing time:             Thu 27 Jan 2022 08:36:20 +0000
ROA not before:           Thu 27 Jan 2022 08:36:20 +0000
ROA not after:            Thu 02 Mar 2023 00:00:00 +0000
asID:                     137823
IP address blocks:        103.126.22.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2102 (0x836)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CBF3/serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707
        Validity
            Not Before: Jan 27 08:36:20 2022 GMT
            Not After : Mar  2 00:00:00 2023 GMT
        Subject: CN=61f25983-79ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:00:63:ea:3a:ef:c9:bd:4e:5b:7d:ec:d4:89:
                    59:e8:c7:a6:dc:e0:0a:a4:b1:05:b1:31:2c:d7:81:
                    6c:ca:e8:94:70:e6:a0:08:f5:93:42:31:08:aa:b8:
                    0e:06:c7:b2:7c:22:c6:3a:7f:97:fd:1e:d8:4b:a5:
                    2c:e7:bc:d5:8b:92:01:c8:4e:d7:9c:0b:05:1b:57:
                    a3:c3:d4:65:58:63:64:a2:d2:f3:d8:db:97:b7:68:
                    7d:b6:61:30:f7:e7:78:af:5f:09:e1:f6:72:a8:51:
                    a7:e5:96:82:5c:ed:1d:80:ef:c7:c5:84:73:86:b1:
                    11:75:85:1f:e5:be:d4:4c:b8:f8:65:ea:28:e8:e2:
                    af:f2:d0:03:ff:b5:a3:8c:d4:fe:9d:63:79:c2:d9:
                    c7:b4:59:b1:04:59:c0:c0:6f:ae:43:5c:3f:c9:5e:
                    c8:35:d0:5e:df:ed:97:19:a1:72:9d:49:35:e9:ac:
                    38:2b:f2:6e:51:02:b4:bd:e4:de:cd:16:cf:71:d6:
                    93:3e:d3:4b:87:bb:ec:59:41:e4:f5:84:c9:32:86:
                    12:35:57:19:1b:7c:bf:89:e1:b0:29:fe:8c:c0:33:
                    0a:a2:c8:74:e6:38:08:53:23:23:75:60:23:ce:18:
                    d8:e4:c6:df:5b:75:20:97:ae:80:86:c8:a1:11:1a:
                    5c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:6C:05:AB:7B:44:35:28:1B:A0:4F:E1:70:7C:D0:A0:CD:5E:45:F6
            X509v3 Authority Key Identifier:
                keyid:E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/8207722E058D11EC92BD9650C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:ec:a5:76:b2:80:36:78:c0:7f:12:89:b3:3a:f7:f6:50:b7:
         69:65:ce:ba:ee:3c:5f:03:fc:ed:09:a4:21:63:02:95:78:15:
         21:23:fd:7c:ab:74:dd:e2:f5:a7:26:b4:3c:9a:3e:64:d0:79:
         26:30:0b:50:30:a7:8d:3e:da:7e:e1:a8:b4:e0:5d:fc:9c:a0:
         8f:51:6e:e4:7d:64:b2:c8:fb:95:57:6c:af:2b:61:7f:91:9a:
         13:ca:38:d6:cb:4c:9a:21:9a:07:c2:6c:5d:c3:9a:b5:1a:eb:
         ef:bf:38:2f:5b:1b:fe:b8:46:1a:f7:75:2b:2c:a8:d2:56:53:
         b5:9e:b7:d1:4e:85:bc:f7:ae:d0:7b:d4:94:0c:a1:ed:58:81:
         d9:bf:4f:e0:e8:e3:0b:99:f3:ea:32:69:19:40:9a:bc:d3:ed:
         15:1f:68:1b:3b:8d:5f:98:ea:bc:74:51:63:3c:36:3c:c2:46:
         f6:14:50:86:f5:7b:e7:2c:f7:0b:53:ca:c0:78:9a:41:f8:fe:
         0b:f4:68:af:9b:6c:0e:dd:3e:ee:05:0a:f9:6b:f0:5a:fe:d6:
         20:d6:31:78:51:a9:56:13:07:31:3d:20:7c:a9:1d:d5:fd:7b:
         9f:14:02:92:17:9f:7d:83:4f:6e:0f:9b:e7:fd:b5:2f:8b:d4:
         44:23:af:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----