Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/4C7305A2CA1011E9B965B370C4F9AE02.roa
File:                     4C7305A2CA1011E9B965B370C4F9AE02.roa (raw, json)
Hash identifier:          VcNeYDfEhU0OPQE78ZrT03iJaS+XtKi4g2yV9VQanf0=
Subject key identifier:   8F:51:BC:F1:79:DD:12:F5:F9:CD:5E:BD:6B:33:4E:F7:2B:63:9F:05
Certificate issuer:       /CN=A915B978/serialNumber=A83B01C96E794DE8CF8F1C9FA86421296DA871C4
Certificate serial:       19A6
Authority key identifier: A8:3B:01:C9:6E:79:4D:E8:CF:8F:1C:9F:A8:64:21:29:6D:A8:71:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/4C7305A2CA1011E9B965B370C4F9AE02.roa
Signing time:             Tue 19 Jul 2022 05:43:12 +0000
ROA not before:           Tue 19 Jul 2022 05:43:12 +0000
ROA not after:            Mon 01 May 2023 00:00:00 +0000
asID:                     18019
IP address blocks:        43.228.144.0/22 maxlen: 22
                          43.228.144.0/24 maxlen: 24
                          43.228.145.0/24 maxlen: 24
                          43.228.146.0/24 maxlen: 24
                          43.228.147.0/24 maxlen: 24
                          103.84.216.0/22 maxlen: 22
                          103.84.216.0/24 maxlen: 24
                          103.84.217.0/24 maxlen: 24
                          103.84.218.0/24 maxlen: 24
                          103.84.219.0/24 maxlen: 24
                          2400:a440::/32 maxlen: 32
                          2400:a440::/48 maxlen: 48
                          2400:a440:1::/48 maxlen: 48
                          2400:a440:2::/48 maxlen: 48
                          2400:a440:3::/48 maxlen: 48
                          2400:a440:4::/48 maxlen: 48
                          2400:a440:144::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6566 (0x19a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B978/serialNumber=A83B01C96E794DE8CF8F1C9FA86421296DA871C4
        Validity
            Not Before: Jul 19 05:43:12 2022 GMT
            Not After : May  1 00:00:00 2023 GMT
        Subject: CN=62d64470-2478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:17:36:93:cb:13:44:70:3f:11:dd:2c:3f:1d:
                    fb:f9:c3:79:62:85:30:9b:80:63:b2:a1:45:f6:c6:
                    bd:d2:79:57:a3:c4:3e:bd:fb:8b:cc:cd:8c:c0:d7:
                    d6:bc:f3:c9:a0:e2:61:e6:04:05:ae:6a:af:22:93:
                    29:75:4f:3f:ee:0c:e3:2f:07:df:b6:38:7b:c3:14:
                    bc:79:a3:a2:da:e6:dd:a8:ff:b0:4a:20:68:3f:f3:
                    bd:e2:0a:ed:5a:89:c5:66:08:9c:46:51:04:a1:68:
                    41:2b:d3:8b:1e:42:b2:84:05:2e:08:83:1f:80:5f:
                    78:4a:d0:06:1f:54:2a:cc:41:2c:d3:4e:66:c9:ec:
                    24:37:1f:36:7a:48:2f:5b:f0:75:9c:d1:48:c0:0d:
                    68:dd:bd:45:44:df:dd:ba:58:e8:06:dd:4b:4d:d0:
                    81:30:1c:69:14:5e:55:a5:52:45:68:99:4a:df:02:
                    ad:d6:40:83:ae:37:29:2f:14:fd:f3:d2:ac:33:14:
                    bd:46:ca:7a:ec:2e:c6:c7:c5:e9:80:3b:c7:94:0b:
                    fd:74:52:16:48:eb:c0:b7:ba:1a:f5:21:29:f5:93:
                    c2:16:0c:62:da:8e:6b:6a:d9:61:26:ff:c2:2f:43:
                    ca:1b:85:3d:55:e4:9f:16:1e:3b:a9:9e:a9:5c:a1:
                    b7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:51:BC:F1:79:DD:12:F5:F9:CD:5E:BD:6B:33:4E:F7:2B:63:9F:05
            X509v3 Authority Key Identifier:
                keyid:A8:3B:01:C9:6E:79:4D:E8:CF:8F:1C:9F:A8:64:21:29:6D:A8:71:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/4C7305A2CA1011E9B965B370C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.228.144.0/22
                  103.84.216.0/22
                IPv6:
                  2400:a440::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:10:a5:96:84:6e:70:83:94:30:b9:55:96:e8:99:47:d1:3a:
         ab:58:58:d4:55:92:70:3f:85:7d:bd:11:2b:96:0b:62:12:07:
         c9:e5:a0:43:86:4f:00:18:51:e3:e9:d5:1e:35:4f:f4:2e:7f:
         7d:88:4c:2f:fe:c8:9d:9b:fc:45:64:73:59:26:7a:59:a7:4a:
         22:69:d9:f3:44:d6:17:cb:57:ca:87:c5:52:75:db:06:26:8e:
         1d:12:c1:d8:10:d4:44:0a:c0:b5:13:c0:aa:f6:82:36:2c:73:
         41:2a:e4:48:be:72:8c:31:ef:c5:a7:b2:6c:b5:fe:d0:65:21:
         60:8f:ed:bf:41:21:0c:60:70:41:1e:f6:8b:ad:1c:2f:09:1a:
         60:72:f3:02:2a:43:d4:df:04:da:44:f1:61:5b:21:9b:65:08:
         2a:d0:df:25:2b:95:5d:eb:9c:0b:7b:a4:d3:54:5d:b4:ed:f1:
         62:22:8a:a1:4c:06:74:49:f2:57:d2:0b:0e:cd:03:f8:72:c1:
         1c:b0:46:52:41:02:07:bc:47:52:e7:38:28:4e:2f:d1:44:e6:
         7f:e2:c8:8e:94:f8:a8:8b:e0:bf:65:52:38:7b:1c:85:df:f4:
         a2:41:be:8f:16:1d:88:22:35:10:59:6b:5d:71:1e:46:ca:4f:
         ae:e1:d4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----