Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/A76F747C194A11EDBD91853DC4F9AE02.roa
File:                     A76F747C194A11EDBD91853DC4F9AE02.roa (raw, json)
Hash identifier:          WSkVFdH4pgU4lMLXylGg/NhnMCi79tHowZirV+iqc3A=
Subject key identifier:   E7:3E:FA:99:41:97:5D:85:04:3D:BD:14:7D:51:69:35:50:08:1B:6F
Certificate issuer:       /CN=A915B5B1/serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
Certificate serial:       C0
Authority key identifier: DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/A76F747C194A11EDBD91853DC4F9AE02.roa
Signing time:             Thu 11 Aug 2022 07:53:15 +0000
ROA not before:           Thu 11 Aug 2022 07:53:15 +0000
ROA not after:            Thu 31 Aug 2023 00:00:00 +0000
asID:                     139673
IP address blocks:        103.187.245.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192 (0xc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B5B1/serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
        Validity
            Not Before: Aug 11 07:53:15 2022 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=62f4b56a-925d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:52:9c:59:af:d2:fd:d1:ec:6b:15:bb:d2:fd:
                    a2:eb:cd:11:7b:24:bc:87:72:3a:11:26:93:cd:17:
                    47:6c:5f:b7:8e:30:04:d9:97:6f:a8:d3:7d:c0:13:
                    a4:e5:86:f0:d5:36:6d:07:bd:cd:88:3f:22:4c:59:
                    2a:5d:03:d5:2d:aa:eb:d1:f1:42:d2:95:a7:fb:22:
                    7e:c3:6c:d1:3f:06:bb:aa:68:7b:dc:71:03:60:88:
                    85:58:70:1b:0f:eb:43:2d:75:7c:8f:92:81:f0:09:
                    9c:4c:2d:a4:25:cd:e6:17:07:fa:fe:95:0b:d3:05:
                    85:2a:61:58:f9:fc:12:01:0d:e0:a6:fd:2b:49:ad:
                    cf:b0:7d:0d:ff:1e:5b:a6:47:8a:7e:20:a2:35:6b:
                    62:50:7a:a9:82:59:0a:f7:c7:b9:5d:ec:dc:c3:e5:
                    39:a5:69:27:ec:5e:78:5a:b0:50:5e:6c:73:23:00:
                    46:01:51:df:15:21:2d:5d:57:7b:fb:93:66:89:fe:
                    b7:4d:08:a8:57:5c:51:34:bd:db:da:89:c4:b9:18:
                    c0:26:a6:28:6d:1f:26:b4:77:55:93:e9:37:79:61:
                    37:a2:b4:97:4d:69:4d:88:4b:bb:37:27:80:8c:93:
                    1b:e1:ec:ae:ae:50:41:c1:aa:c9:3e:35:0a:1a:11:
                    01:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:3E:FA:99:41:97:5D:85:04:3D:BD:14:7D:51:69:35:50:08:1B:6F
            X509v3 Authority Key Identifier:
                keyid:DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/A76F747C194A11EDBD91853DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:95:80:1c:00:73:c7:da:b2:8f:ab:d6:40:8d:f2:90:36:62:
         97:27:7d:8c:75:14:29:83:08:68:ce:15:0b:1f:c9:f4:98:05:
         50:17:2e:18:4c:2a:47:5e:8a:27:89:8a:d5:a8:9b:da:b9:00:
         8c:52:cc:f4:15:17:dd:66:11:64:e5:2f:68:ab:db:e6:5e:a6:
         ed:25:15:b0:aa:72:95:a2:de:d4:4f:90:34:f6:4e:2e:89:07:
         aa:0a:ec:fc:76:55:2e:46:e9:d0:ea:f8:1d:3e:e1:50:e7:49:
         11:28:1e:97:42:65:3e:78:74:1a:99:2a:a1:0a:8c:38:10:b5:
         b3:52:d8:41:75:39:5a:26:5a:c3:8a:f0:0e:93:07:09:5f:3a:
         87:4f:83:01:de:64:e7:16:a1:87:cf:05:ef:d0:57:54:91:1c:
         f1:bf:ae:41:27:3d:1b:d1:df:f6:27:a7:ad:5e:e0:4a:94:92:
         55:bb:fa:fd:81:ed:3e:29:4e:5b:b7:00:e0:8f:48:08:d6:ba:
         35:b9:24:81:00:43:ef:1b:18:d0:5f:ff:4f:f6:d1:df:03:fe:
         cc:46:14:65:43:0c:00:0f:57:96:fc:a0:fd:fa:b1:82:a5:1b:
         52:6d:a5:9f:6f:8b:d7:39:69:cc:26:ba:91:d2:c9:3e:8c:d3:
         ac:cd:51:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----